Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa
File:                     3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa (raw, json)
Hash identifier:          6TaFuBiM6linhPB1ZFPQ8ukQQbZ31lu3G23g8rzDbhE=
Subject key identifier:   C9:A9:68:35:0C:15:A5:97:FF:77:74:57:05:7F:FA:70:38:E7:96:85
Certificate issuer:       /CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
Certificate serial:       6380B63701ADAE6E5EBD2CC2C5BE5E15FAC89F4C
Authority key identifier: A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa
Signing time:             Sun 03 May 2026 02:29:22 +0000
ROA not before:           Sun 03 May 2026 02:24:22 +0000
ROA not after:            Sun 02 May 2027 02:29:22 +0000
asID:                     147128
IP address blocks:        103.176.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl
                          rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:80:b6:37:01:ad:ae:6e:5e:bd:2c:c2:c5:be:5e:15:fa:c8:9f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3FC798CD711AE0868F235A3EA767FB9B4129434
        Validity
            Not Before: May  3 02:24:22 2026 GMT
            Not After : May  2 02:29:22 2027 GMT
        Subject: CN=C9A968350C15A597FF777457057FFA7038E79685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:4b:44:ed:2a:bb:69:5e:a7:37:44:44:f7:
                    69:8b:70:48:19:81:6b:81:bb:c4:ab:19:f4:90:33:
                    74:68:d6:45:0d:32:18:c8:f0:a7:fa:ea:a5:64:5f:
                    a4:d7:9a:1c:3b:02:fe:9e:4e:3a:a6:c6:a4:21:40:
                    88:aa:7c:d7:7a:e8:29:6c:24:60:eb:40:74:48:c2:
                    c8:fa:f6:d6:b3:1f:9f:0a:37:f8:0a:45:08:a0:5d:
                    d2:b6:2c:80:6c:d4:de:2c:1b:80:f7:15:73:3e:8e:
                    59:c1:b0:ce:76:27:ac:d8:81:dc:8a:e4:86:a3:cb:
                    a3:6f:8c:ce:da:48:a5:a9:f7:26:6d:af:bb:dc:31:
                    df:0b:60:97:f0:04:d7:20:ca:64:df:c6:c9:f9:d4:
                    5b:e7:77:ee:e3:c2:de:4f:04:f6:fc:2b:f9:8e:0b:
                    fa:bb:3d:66:0f:95:bb:13:d8:ee:40:35:12:98:ba:
                    c7:f0:c8:32:87:1f:e9:ea:df:7a:4e:f1:e5:7c:ca:
                    99:f9:e5:97:23:1f:10:85:cc:ae:17:5f:57:b6:34:
                    fd:db:c9:6b:cb:fd:4f:98:8f:93:36:aa:5e:21:5e:
                    cc:d0:1b:b1:8c:e9:48:88:91:89:47:90:7c:32:54:
                    16:5b:d8:cd:e5:73:b6:15:55:fc:41:65:b0:87:13:
                    79:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:68:35:0C:15:A5:97:FF:77:74:57:05:7F:FA:70:38:E7:96:85
            X509v3 Authority Key Identifier:
                keyid:A3:FC:79:8C:D7:11:AE:08:68:F2:35:A3:EA:76:7F:B9:B4:12:94:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/A3FC798CD711AE0868F235A3EA767FB9B4129434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A3FC798CD711AE0868F235A3EA767FB9B4129434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/431a9426-3c35-470e-bf34-30e7e41602cb/0/3130332e3137362e34352e302f32342d3234203d3e20313437313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:27:c4:20:1a:eb:05:56:0d:a2:02:71:d1:5d:e6:f8:0a:
         d4:3d:48:76:89:4a:60:a1:b5:66:6d:b6:75:fb:e4:49:9a:64:
         cc:ba:5c:6d:71:cb:1f:d5:3f:25:00:6c:29:4a:87:4f:c6:e1:
         f7:50:ab:2a:cc:fb:c8:bf:d1:c8:02:0c:03:34:5d:41:92:ca:
         95:f1:cf:53:0b:dd:5c:db:40:98:3a:cf:20:51:37:ac:83:a5:
         f5:62:d4:f3:5c:84:8d:73:7d:c8:7d:d6:e1:a7:78:f5:b4:e0:
         93:84:a0:b0:a3:1f:fd:e3:0d:10:e0:47:23:d9:96:c6:d9:f2:
         f7:3a:db:5f:a8:51:52:b1:bc:61:41:b1:11:2c:7a:10:3f:c7:
         6f:0d:25:62:3d:96:8e:5c:ec:49:2e:ba:ed:f4:33:c0:79:4c:
         78:32:58:a0:a2:eb:ea:95:6b:bd:ae:64:68:ad:ec:4f:d9:46:
         5e:d3:22:82:a5:b2:41:45:4a:6c:03:64:e9:c0:8c:5c:c7:59:
         f4:97:89:a5:d5:a2:1b:a4:02:00:60:c4:75:ed:8c:6c:61:d8:
         dd:c7:84:9a:c2:29:fe:77:30:f4:81:e7:91:27:76:bb:db:e5:
         01:c9:10:92:53:db:ab:bf:70:c3:85:22:16:a7:7d:cf:ec:d1:
         1d:74:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:37 2026 by rpki-client