Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          lMkQ1C6m2HGJs+HDPBBo+GFoglPLrUt0++vMeyTVBPY=
Subject key identifier:   FA:18:55:48:3C:9C:22:FC:6F:A4:49:CF:F1:F3:5E:7E:29:3F:79:2B
Certificate issuer:       /CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA
Certificate serial:       50775D5BCD067ABA44CD102C715E8DC9AF31E192
Authority key identifier: 78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa
Signing time:             Sun 03 May 2026 02:22:37 +0000
ROA not before:           Sun 03 May 2026 02:17:37 +0000
ROA not after:            Sun 02 May 2027 02:22:37 +0000
asID:                     141674
IP address blocks:        103.163.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl
                          rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:77:5d:5b:cd:06:7a:ba:44:cd:10:2c:71:5e:8d:c9:af:31:e1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA
        Validity
            Not Before: May  3 02:17:37 2026 GMT
            Not After : May  2 02:22:37 2027 GMT
        Subject: CN=FA1855483C9C22FC6FA449CFF1F35E7E293F792B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:5c:42:96:9c:f2:fc:78:9a:72:4c:67:d8:
                    ef:51:8d:01:0d:c7:8d:4f:84:84:c5:ac:d0:f1:b7:
                    95:4d:af:9c:39:f8:ec:69:41:2c:6b:e3:7b:e7:90:
                    bb:44:d6:34:c9:c9:c1:71:d7:4b:aa:65:d5:95:63:
                    59:a8:03:16:f2:38:f5:4d:5b:f0:21:98:9a:ec:82:
                    0f:18:45:1a:27:62:f9:9a:27:a6:6a:af:e7:f1:d9:
                    b1:30:58:de:97:81:c7:83:cc:52:bd:92:9d:90:ea:
                    f4:95:ab:60:b3:9e:8e:49:51:83:de:d5:70:da:e0:
                    0a:f4:62:ad:04:72:bb:73:96:a7:9d:ff:37:8d:21:
                    c4:1c:89:47:5b:73:01:fb:0b:f9:e2:d9:2f:68:42:
                    d8:5c:70:19:f5:73:46:5b:85:b8:ad:29:c0:1a:7e:
                    d6:2d:c1:c9:8c:fc:da:40:0b:4b:36:0f:92:c4:dc:
                    68:83:0c:2e:87:7b:be:c3:a1:c5:71:84:57:8f:20:
                    25:9a:0d:c4:dd:88:21:df:2d:32:e0:f6:cb:6f:d8:
                    d5:90:18:88:89:a4:3f:4a:f4:48:7f:23:23:46:24:
                    40:b0:fa:c3:2b:5f:73:35:ff:93:75:f0:fd:cc:2c:
                    6e:f3:2b:09:4f:cb:80:1b:d6:60:ef:7c:a9:1d:59:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:55:48:3C:9C:22:FC:6F:A4:49:CF:F1:F3:5E:7E:29:3F:79:2B
            X509v3 Authority Key Identifier:
                keyid:78:B2:1F:CC:57:E9:B9:12:4F:15:D5:B7:C6:FE:14:52:A1:36:D2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/78B21FCC57E9B9124F15D5B7C6FE1452A136D2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d234d50-67e1-419c-85ba-64ba8c111225/0/3130332e3136332e38302e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:b2:41:d8:70:e5:de:29:6c:b7:79:ba:da:14:12:bb:3b:
         2e:66:8b:bc:12:eb:0a:91:61:b7:c9:66:43:84:26:6f:e2:05:
         e9:18:81:0c:30:97:6a:4e:e1:c6:c4:93:c7:56:b2:c0:9b:fb:
         0c:08:86:1f:22:de:0e:68:dd:c1:cb:c1:49:1f:71:7f:b6:ce:
         e5:d2:87:b2:92:98:45:ab:7a:1c:a2:24:8f:de:b5:f7:b3:9a:
         0d:c7:e7:a1:2c:66:3c:19:b1:03:5e:df:f6:96:12:2a:d6:a6:
         13:16:43:8c:f2:96:8d:7d:75:15:70:c7:47:2e:ac:86:5d:e3:
         a5:c3:d2:b1:22:70:aa:0e:1b:ea:50:4a:d2:6c:b2:90:23:11:
         68:87:b9:83:bf:3d:5e:dd:9c:72:8c:04:1a:12:85:e4:ee:0d:
         1f:47:12:f5:f9:0e:2f:07:58:30:ed:f5:b2:fd:18:97:26:e6:
         77:72:8c:2d:77:a1:34:1d:46:e9:02:38:76:37:b6:80:97:f1:
         59:a9:c6:49:0b:32:a5:ff:1b:27:f8:6e:4b:db:0f:e9:48:45:
         da:33:61:22:90:47:fe:da:85:f6:02:a4:3e:23:d1:5e:1f:2e:
         f0:4b:a0:94:f3:d0:77:51:bb:2d:46:08:e1:e6:19:4b:df:47:
         ef:7e:53:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:57:18 2026 by rpki-client