Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          hxtIKOBEaXvvEhPlm4EoLMj05xZmKO9tH3GRDWA9ERg=
Subject key identifier:   31:EB:70:D6:58:65:49:04:30:A2:74:FF:95:3F:D0:1D:2E:C9:23:73
Certificate issuer:       /CN=E83F205BF306DAF53F99D7D0596E19991D122A75
Certificate serial:       632B1CBCDCED3DFD7832E77BE4038E0C65CE86CB
Authority key identifier: E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:22:22 +0000
ROA not before:           Sun 03 May 2026 02:17:22 +0000
ROA not after:            Sun 02 May 2027 02:22:22 +0000
asID:                     139952
IP address blocks:        103.174.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl
                          rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2b:1c:bc:dc:ed:3d:fd:78:32:e7:7b:e4:03:8e:0c:65:ce:86:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83F205BF306DAF53F99D7D0596E19991D122A75
        Validity
            Not Before: May  3 02:17:22 2026 GMT
            Not After : May  2 02:22:22 2027 GMT
        Subject: CN=31EB70D65865490430A274FF953FD01D2EC92373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:a0:76:bf:9e:5d:1b:ae:c7:ae:0f:c2:d6:
                    38:45:36:dd:28:9d:1c:90:bd:fb:e7:93:43:84:a4:
                    00:02:2b:29:51:9a:2d:53:c5:1a:fc:f5:ba:dd:52:
                    95:bf:3f:48:15:76:c5:4d:bd:75:6a:b2:f5:6e:3e:
                    2f:f1:6b:d0:36:cd:50:c5:e5:76:be:4f:c1:b6:6a:
                    fd:1b:0c:f4:9c:90:bb:79:53:0f:60:6c:3c:4e:18:
                    b6:c9:51:6d:a9:c6:9b:33:ce:f0:b2:8b:83:d8:15:
                    d2:91:0f:d4:24:3a:12:1b:44:50:86:5a:11:7d:6b:
                    fc:3c:b0:a8:83:02:16:cc:f9:35:9e:ee:67:97:00:
                    2f:63:3c:bc:95:49:33:3d:07:86:c7:68:d4:9a:b4:
                    b4:80:9a:d8:d6:9a:9a:a0:68:5d:d0:4a:a0:15:be:
                    f5:24:02:8b:a6:a7:cc:0a:b4:e4:2a:90:b2:68:19:
                    eb:b2:1a:48:6e:6e:b6:36:e0:e0:0d:75:c3:3d:9c:
                    73:d5:2c:97:4a:a5:40:56:68:15:19:b2:dc:db:a9:
                    61:b7:46:6c:93:85:7c:88:8a:c6:f5:18:c9:8d:2c:
                    90:8a:3d:48:74:b4:15:3c:31:dd:2d:e8:57:b4:cf:
                    77:bc:06:24:03:f3:5d:5f:06:14:27:ca:4c:aa:97:
                    b2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:70:D6:58:65:49:04:30:A2:74:FF:95:3F:D0:1D:2E:C9:23:73
            X509v3 Authority Key Identifier:
                keyid:E8:3F:20:5B:F3:06:DA:F5:3F:99:D7:D0:59:6E:19:99:1D:12:2A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/E83F205BF306DAF53F99D7D0596E19991D122A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E83F205BF306DAF53F99D7D0596E19991D122A75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2c3624c4-bfdc-4e48-8ea0-eb05605c6213/0/3130332e3137342e3131322e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d2:bf:62:74:20:93:fa:33:eb:77:bb:a0:d8:00:7b:a7:b0:
         2d:e5:9b:83:34:9a:0f:65:3b:05:7e:cf:8b:da:24:41:93:5f:
         28:78:82:70:4b:db:86:6b:5c:2b:5c:a8:98:93:8a:48:43:1f:
         63:85:ce:bb:21:df:74:f5:a5:89:b0:36:bb:83:53:ea:d0:5d:
         0e:ec:84:98:47:47:77:04:f0:af:62:2a:1b:ca:9a:67:7a:f7:
         47:03:3e:7f:a9:e2:c4:a4:9b:f2:05:e4:46:f8:d9:2c:c5:e3:
         db:b9:92:25:ee:f3:14:a9:0e:08:15:26:5d:f2:c5:6f:f6:ee:
         36:f2:ad:1f:3a:b0:55:30:a6:23:d5:70:2a:77:d9:07:6a:33:
         78:5e:d8:a4:31:42:48:89:5d:ef:a1:6c:c0:9f:8e:11:22:b4:
         18:07:5a:e2:58:21:f4:98:23:50:77:c1:55:e3:cb:fa:d5:83:
         f1:8f:54:80:75:c3:9a:8a:7f:ab:6d:de:2a:f1:9a:62:42:4d:
         da:8e:9e:b2:5b:6a:82:0a:cd:ba:2f:f0:a2:01:05:d2:e4:5d:
         44:83:d5:cb:34:d8:37:1d:4d:34:b0:2c:f8:bf:49:0b:1b:e9:
         50:dd:1b:47:99:6e:fe:08:37:c8:ec:6a:04:18:35:35:a3:50:
         cf:b2:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:55 2026 by rpki-client