Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa
File:                     3130332e3137372e382e302f32342d3234203d3e20313437313337.roa (raw, json)
Hash identifier:          WVnSwWyfbHb1cF4zK3nfAh3+4mXKYVShqhzNFGYV1/4=
Subject key identifier:   E3:24:A8:71:1E:1B:F0:45:00:54:7A:6D:33:F2:9A:A1:F3:1F:01:37
Certificate issuer:       /CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
Certificate serial:       177339083EC27976E4047E4D439A263B84DFEF75
Authority key identifier: C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa
Signing time:             Sun 03 May 2026 02:26:41 +0000
ROA not before:           Sun 03 May 2026 02:21:41 +0000
ROA not after:            Sun 02 May 2027 02:26:41 +0000
asID:                     147137
IP address blocks:        103.177.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl
                          rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:73:39:08:3e:c2:79:76:e4:04:7e:4d:43:9a:26:3b:84:df:ef:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9
        Validity
            Not Before: May  3 02:21:41 2026 GMT
            Not After : May  2 02:26:41 2027 GMT
        Subject: CN=E324A8711E1BF04500547A6D33F29AA1F31F0137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:2b:f1:7e:08:9b:e1:04:3b:10:1c:60:72:
                    a6:1f:88:5b:fa:3b:49:36:1a:84:f4:af:8a:de:8f:
                    2c:8d:b9:6a:de:e0:46:bf:70:84:a6:6b:cd:9f:e7:
                    39:8e:d5:b8:08:fc:31:64:d7:fe:0f:0f:13:2a:79:
                    e6:07:a2:3b:6c:47:74:11:28:06:49:9e:d4:d8:06:
                    60:ea:05:0c:ea:ec:45:47:56:27:b6:51:28:9b:44:
                    83:95:45:9a:72:d6:5d:ba:7c:38:84:21:80:9c:57:
                    c4:e9:b0:35:a8:f6:4e:80:eb:24:b2:fb:af:37:a0:
                    9a:be:05:61:09:f3:86:f8:d5:d3:d6:2b:51:d5:98:
                    d0:9b:18:13:68:66:24:47:24:1c:e4:1b:11:62:2c:
                    4d:82:4e:5c:9e:d1:be:1b:11:1d:e3:0d:b0:d2:3f:
                    ec:cf:d8:76:31:64:b9:cf:3f:fc:5b:7a:83:0e:66:
                    9d:e7:bc:19:b1:f4:c4:6d:41:38:be:49:19:e8:c7:
                    1b:44:fa:66:11:51:72:29:b5:ba:3a:e6:d8:63:80:
                    af:67:ec:7d:fb:76:ba:76:1d:c8:33:23:a2:ac:9b:
                    2f:21:ba:32:2c:52:87:f7:73:9b:ec:7f:ff:db:3e:
                    cb:54:24:9c:5b:fe:d4:1e:6a:b6:be:ea:3a:25:1e:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:A8:71:1E:1B:F0:45:00:54:7A:6D:33:F2:9A:A1:F3:1F:01:37
            X509v3 Authority Key Identifier:
                keyid:C0:D7:02:8C:0F:A6:28:34:8A:E2:24:5D:D0:CC:02:D3:C5:DC:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C0D7028C0FA628348AE2245DD0CC02D3C5DCB3F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32342d3234203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:a5:b1:22:3b:55:e4:d8:60:d1:fb:72:b0:6c:e2:61:44:2a:
         f0:65:ff:f3:9f:e1:cb:85:da:ab:73:e4:88:04:3b:b7:12:18:
         af:f4:42:07:84:00:ed:f0:7e:a5:95:1b:cf:4b:39:38:76:50:
         76:b5:62:73:c4:c2:bd:8a:e9:a2:a1:0c:5f:c7:9c:10:f8:d4:
         07:d3:bb:93:ad:1e:67:30:61:0c:00:e2:96:34:04:0e:f6:86:
         3f:9c:06:92:f8:05:fa:3b:ee:55:e0:e2:00:99:09:a6:bc:39:
         b8:a2:36:89:6f:53:4a:93:5f:41:cb:fc:08:fe:1e:4d:59:26:
         36:71:32:3e:6e:dd:ac:c8:b4:07:bf:6e:93:d2:74:97:85:39:
         5d:64:d7:1e:13:9d:ec:43:dd:2c:43:d9:cc:ce:d1:f3:ff:94:
         e5:60:18:10:9a:aa:38:02:fe:ff:1a:e7:79:d1:c0:b1:75:41:
         5a:d9:ff:d8:76:cd:6b:4e:0f:94:97:db:2a:03:80:ba:e0:36:
         e7:9e:fd:ef:78:1c:2a:ba:ad:43:63:2e:6d:3e:87:02:65:8c:
         b6:86:12:db:d6:50:94:96:b4:18:80:fc:3a:8e:15:c9:e0:99:
         20:42:c9:bd:00:de:9e:4b:ca:b6:2a:a2:52:84:69:bc:9e:2a:
         b3:3a:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:04:30 2026 by rpki-client