Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          Q+Zpu9s7FFAblJfI/9bq1CU9BNldDzB+MO83xGJv/O8=
Subject key identifier:   FA:0F:E8:E2:25:EA:B5:5E:20:B1:4E:D4:BA:38:33:9F:4C:59:4B:52
Certificate issuer:       /CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
Certificate serial:       76045F8F9AA322714DB6214FCE27F300FD1694BE
Authority key identifier: E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:22:11 +0000
ROA not before:           Sun 03 May 2026 02:17:11 +0000
ROA not after:            Sun 02 May 2027 02:22:11 +0000
asID:                     139952
IP address blocks:        103.178.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl
                          rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:04:5f:8f:9a:a3:22:71:4d:b6:21:4f:ce:27:f3:00:fd:16:94:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60
        Validity
            Not Before: May  3 02:17:11 2026 GMT
            Not After : May  2 02:22:11 2027 GMT
        Subject: CN=FA0FE8E225EAB55E20B14ED4BA38339F4C594B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:3e:fe:95:4c:e9:ef:fb:db:53:9b:7f:5b:
                    5c:bb:39:f4:6d:06:19:dc:6e:03:c0:d2:91:3e:9b:
                    df:c9:e1:32:d1:3c:36:e5:60:6d:93:92:42:2d:91:
                    37:99:d4:33:f3:e6:f4:34:cd:ae:70:3d:21:cd:cd:
                    41:0a:59:8f:4e:61:91:6c:1d:ad:11:9d:72:81:ae:
                    2f:55:d9:89:44:70:c3:d4:d2:62:4c:db:a4:06:f9:
                    88:af:4c:0d:97:ca:99:e7:b8:01:a6:d3:8e:4e:7e:
                    55:01:99:fe:21:4b:b1:d0:a0:17:60:9b:48:07:11:
                    10:86:f3:12:d7:21:0a:a1:2d:9f:e1:5c:32:ff:e6:
                    24:8c:9b:03:3f:59:d0:fb:1e:32:34:d5:66:8d:ff:
                    ab:0e:cb:de:1e:5f:09:1d:10:29:81:a2:9b:29:88:
                    96:d2:91:53:ad:f2:7a:11:68:85:ba:df:55:3d:8f:
                    7c:93:51:f6:7d:92:3e:03:74:9c:9a:3f:f2:e8:de:
                    29:3e:ba:33:fc:e1:53:10:c1:7d:ad:b0:e4:25:c8:
                    12:5e:a8:d7:51:8d:8b:ee:a7:e8:38:bb:7f:b1:74:
                    8c:e8:21:88:95:4a:32:11:bf:15:a8:62:e0:ce:aa:
                    18:2e:83:e1:f9:cd:f5:d2:78:bb:45:7a:3d:d6:44:
                    51:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:E8:E2:25:EA:B5:5E:20:B1:4E:D4:BA:38:33:9F:4C:59:4B:52
            X509v3 Authority Key Identifier:
                keyid:E5:F6:F9:E5:DD:9D:34:BD:A0:8C:45:31:BA:70:87:61:A3:5A:DE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E5F6F9E5DD9D34BDA08C4531BA708761A35ADE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/3130332e3137382e3137302e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:61:9d:4f:0b:72:c2:b2:6d:36:66:b8:94:58:b9:04:6d:79:
         6d:99:e9:db:c6:67:56:e3:82:82:fb:b2:4e:a3:78:bb:67:f4:
         44:25:f3:93:8b:0c:bf:c5:93:2a:a0:04:7b:98:57:0b:9e:da:
         e8:08:8e:81:90:58:dc:53:78:fd:39:68:b2:cd:df:55:a3:21:
         2e:e5:5e:2e:38:b3:cd:46:13:0f:20:dd:69:3c:94:8e:52:a8:
         3d:21:e1:89:b7:0c:c0:81:c7:e8:ea:06:19:8d:e1:0a:da:1a:
         de:40:65:03:2b:2e:76:16:5e:62:36:f7:ec:cf:9e:34:ca:55:
         ef:00:bc:af:4c:cf:11:cb:49:1a:83:b1:c9:8a:b0:1a:f5:cc:
         16:c8:74:49:8f:d8:e5:76:5d:66:d4:d7:14:5b:b5:ff:c3:67:
         a7:61:53:91:87:a9:f1:01:4f:0a:30:d8:fe:f2:91:e1:17:13:
         43:06:f4:60:c5:b2:1c:58:fd:6c:07:7c:ce:47:ec:02:68:52:
         b0:76:d2:c5:6c:c0:e6:2c:d2:64:86:ce:dd:15:80:c1:22:e6:
         ad:5a:88:91:a2:90:8f:5b:8f:95:e7:7d:43:18:61:90:94:2b:
         10:b5:4e:a8:fd:14:a0:11:66:5d:eb:d6:7f:24:ab:a0:c3:5f:
         4e:86:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:16 2026 by rpki-client