Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa
File:                     3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (raw, json)
Hash identifier:          89aIdO+EcaO2EgEgxRB/RqjR0BzQuTZKwEZg7t/EUN8=
Subject key identifier:   8B:F4:63:86:7A:35:49:32:62:FB:B9:68:CA:0E:21:07:7D:23:4D:84
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       082A1AED13BEB59FAEC47C137DEC1D42A6CC772C
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa
Signing time:             Sun 03 May 2026 02:30:33 +0000
ROA not before:           Sun 03 May 2026 02:25:33 +0000
ROA not after:            Sun 02 May 2027 02:30:33 +0000
asID:                     55676
IP address blocks:        103.105.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:2a:1a:ed:13:be:b5:9f:ae:c4:7c:13:7d:ec:1d:42:a6:cc:77:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:33 2026 GMT
            Not After : May  2 02:30:33 2027 GMT
        Subject: CN=8BF463867A35493262FBB968CA0E21077D234D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:97:35:65:05:e0:62:80:e3:e6:05:91:18:7d:
                    86:a2:4e:e1:24:fa:bb:6d:d2:7e:48:72:5d:34:1d:
                    ca:89:aa:66:34:fe:27:a2:18:3d:3a:03:e4:8a:7e:
                    89:6e:05:1a:ae:94:84:73:ea:a7:d3:29:21:40:9c:
                    cf:aa:dd:c9:20:8b:4c:40:33:dd:a8:f2:ab:30:50:
                    a5:f2:43:78:4b:c6:51:fc:23:d6:cd:b0:06:16:1f:
                    bd:4c:96:de:a2:bd:d2:6e:26:e7:6b:d2:28:1e:3b:
                    6b:13:20:cf:9c:9a:69:84:14:24:b9:f6:55:6d:ea:
                    d9:8c:dd:d3:f9:17:90:4c:e3:71:fb:6d:c3:83:47:
                    95:70:5b:c6:a1:a9:fd:23:1c:b1:36:b9:5e:77:1e:
                    5c:1c:59:92:19:0a:0c:03:87:d1:5b:38:51:df:e8:
                    31:2b:5b:cc:84:6d:50:69:e8:ab:9d:ab:99:56:e2:
                    15:14:b4:b6:b2:d5:21:fb:3f:8c:34:9f:49:22:94:
                    7c:e0:43:1d:e9:7e:d1:9c:e0:64:08:fa:7e:f8:46:
                    ab:03:7d:5a:15:7b:cd:2a:d8:7c:21:d0:5f:91:00:
                    f1:fb:a8:43:ff:63:30:21:70:23:59:64:06:7d:51:
                    88:b8:af:76:ed:8a:03:48:7c:7f:86:c2:5c:b3:b8:
                    16:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F4:63:86:7A:35:49:32:62:FB:B9:68:CA:0E:21:07:7D:23:4D:84
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37372e302f32342d3234203d3e203535363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:4e:07:dd:de:67:fc:ef:ad:cd:c2:6d:ab:98:ee:1b:71:
         02:9f:f5:d1:4a:e8:b2:c5:6a:a7:e2:21:bf:5d:81:08:3b:ed:
         70:a1:c6:89:43:7c:1d:09:a4:d2:98:96:e3:66:5f:8b:89:fb:
         0a:fb:fe:21:25:38:56:89:9d:b5:c4:25:7f:8e:16:83:7d:1e:
         ec:01:59:9d:74:50:b1:34:2a:4f:a5:0f:05:96:fb:31:e5:39:
         3a:5d:29:da:4f:cd:7d:09:18:94:eb:5e:75:e4:72:9f:a4:5c:
         73:42:6b:b8:fa:e0:a8:0a:1c:c1:3f:6a:6b:b3:38:d4:d2:50:
         34:8f:a2:3d:f4:09:92:49:98:e0:20:7b:69:87:c9:4b:42:b6:
         39:86:4c:f5:29:e2:76:cc:17:93:07:69:35:a9:54:98:94:dd:
         d7:18:00:57:6c:9d:3f:a3:33:0b:5b:b8:dc:ee:6d:a7:26:53:
         17:a4:cd:4a:75:c7:06:d3:e2:b2:fa:72:8b:de:7d:d2:50:2d:
         01:29:62:db:f9:02:32:d8:e9:b0:53:cb:56:9e:44:1a:ee:6d:
         32:9f:90:75:12:94:66:7d:fa:0b:b8:fe:a4:9e:88:2d:16:29:
         27:39:4c:30:58:3e:6f:29:c4:54:95:fa:8b:36:9e:d6:5a:33:
         74:23:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:13 2026 by rpki-client