Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa
File:                     3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa (raw, json)
Hash identifier:          2xL5IzsEGAiAsA9S7Fekuh6FO3TOT5kNHOKLcjwwo5c=
Subject key identifier:   7A:DA:55:DA:A4:E2:FB:BD:B4:2F:5A:3B:07:9B:D3:CE:E8:86:EE:84
Certificate issuer:       /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA
Certificate serial:       1E24665E5745AEE85A4D52F98E8FD0944D230455
Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa
Signing time:             Sun 03 May 2026 02:22:36 +0000
ROA not before:           Sun 03 May 2026 02:17:36 +0000
ROA not after:            Sun 02 May 2027 02:22:36 +0000
asID:                     141674
IP address blocks:        103.163.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl
                          rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:24:66:5e:57:45:ae:e8:5a:4d:52:f9:8e:8f:d0:94:4d:23:04:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA
        Validity
            Not Before: May  3 02:17:36 2026 GMT
            Not After : May  2 02:22:36 2027 GMT
        Subject: CN=7ADA55DAA4E2FBBDB42F5A3B079BD3CEE886EE84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:5d:91:0f:55:dc:07:c9:cc:43:d0:a5:eb:
                    26:65:71:51:49:f8:77:13:bb:fc:aa:3e:6c:ce:6b:
                    5b:41:80:b6:30:ae:cf:38:24:99:39:90:ae:a4:96:
                    41:8c:0d:2a:1b:39:a6:09:96:7b:f7:78:52:d2:1e:
                    46:b0:52:aa:3f:fb:db:e4:06:41:7c:46:b1:0b:05:
                    f5:68:6b:41:d7:19:b0:4a:4b:0f:3a:73:4d:97:02:
                    ae:16:85:ba:67:d7:c6:2b:a4:82:d6:97:01:55:4b:
                    e9:06:85:f8:2d:ed:9c:63:e8:de:a5:b1:20:02:c2:
                    37:ab:9e:34:c1:0c:2b:2f:d5:b1:c8:00:3d:ec:35:
                    f1:0b:8b:d9:81:3a:9a:da:98:a8:08:8a:e3:cf:77:
                    0a:25:81:67:6e:3b:0a:86:94:a4:c9:5e:da:2d:12:
                    e5:5d:93:54:82:2a:dd:4f:84:ad:6f:cd:55:e6:81:
                    02:b0:4e:c5:68:70:ce:07:53:ef:68:ac:76:95:66:
                    df:ae:91:ab:56:7d:98:39:98:b4:31:2a:d7:cf:3b:
                    54:ca:af:e4:fe:7a:6a:39:07:8e:0d:f3:1b:28:f5:
                    5e:90:b9:27:86:a7:72:0f:76:b3:b2:01:96:9a:06:
                    a8:64:c0:f8:4f:cd:6c:f9:18:af:a5:f7:74:94:cd:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:55:DA:A4:E2:FB:BD:B4:2F:5A:3B:07:9B:D3:CE:E8:86:EE:84
            X509v3 Authority Key Identifier:
                keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32332d3233203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:8d:82:e9:13:f7:b9:0b:68:4c:e2:62:8c:0b:2c:cc:22:
         9e:eb:f8:06:eb:62:60:02:92:9a:d3:53:92:ef:8f:cd:9e:ab:
         29:67:63:40:f7:0b:02:a8:01:2c:02:21:c1:cc:20:13:7c:dc:
         47:29:86:f0:ac:03:33:aa:fd:cf:92:2c:18:6a:7d:a0:de:a6:
         15:f6:e3:09:61:35:bb:5f:98:b4:ef:46:74:6d:13:9b:9d:00:
         85:a8:f6:82:a9:87:a0:e5:d3:a7:c2:04:be:01:5b:fa:6f:e1:
         7a:82:1e:33:c8:a2:71:8b:35:fb:d6:3a:bd:49:10:8f:8a:ab:
         2e:87:52:7c:92:b9:a8:cd:6a:dd:9d:e1:b6:58:1a:c2:a5:9e:
         94:df:f3:94:86:84:d9:24:2c:01:4e:aa:7c:42:00:ed:49:2c:
         d6:c2:11:46:fa:72:d2:d6:ad:c5:d7:6c:62:9b:fe:1a:78:eb:
         9f:28:78:0a:95:8f:fe:bf:35:8a:0e:b4:30:03:b0:3a:17:e8:
         75:30:98:8f:d5:39:73:38:3f:6a:79:06:81:bf:3b:b5:22:34:
         1b:d3:24:ca:98:90:92:eb:23:93:da:d5:1d:8c:0a:1c:27:70:
         b6:35:f5:8d:93:2a:a7:ba:ba:f1:d7:75:96:fc:33:94:c3:99:
         e0:a1:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:30 2026 by rpki-client