Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          HjyzaNQUCQhEFQ4hKYw2ku34SqSG+Q21ZyHYmX0dpFM=
Subject key identifier:   F0:F9:99:CC:87:72:B6:1F:19:8B:D2:ED:A4:72:83:8D:58:A5:74:2B
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       33522EECF565D303A56F7B76E18DC24FF240A61E
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa
Signing time:             Sun 03 May 2026 02:30:31 +0000
ROA not before:           Sun 03 May 2026 02:25:31 +0000
ROA not after:            Sun 02 May 2027 02:30:31 +0000
asID:                     136874
IP address blocks:        103.105.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:52:2e:ec:f5:65:d3:03:a5:6f:7b:76:e1:8d:c2:4f:f2:40:a6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:31 2026 GMT
            Not After : May  2 02:30:31 2027 GMT
        Subject: CN=F0F999CC8772B61F198BD2EDA472838D58A5742B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:1b:b6:5b:d6:b8:e1:c7:a4:fd:54:33:d6:
                    48:59:8e:7f:ce:dd:e5:8e:96:d0:61:f9:73:72:57:
                    04:30:10:4d:d5:ce:3d:a4:86:46:e8:7f:dc:d8:8f:
                    df:5a:31:7a:93:e9:68:c9:44:95:d0:c5:72:19:d6:
                    69:22:b4:de:28:fe:55:f6:b6:d1:20:76:d6:5c:38:
                    d6:44:be:c5:4e:64:24:63:22:80:2c:20:ed:c6:b5:
                    c5:a3:49:2e:8e:a9:00:7d:e8:75:ff:10:46:06:96:
                    f3:9c:ac:80:61:2c:99:9d:1e:9b:71:3b:45:d9:ee:
                    09:b4:8a:61:7f:1c:11:e8:db:16:2d:ac:f8:50:f9:
                    93:a5:42:13:a1:ec:97:9f:1b:01:a6:60:df:2a:c6:
                    d9:5a:0b:61:4e:c8:42:68:5b:48:6e:82:ff:9e:e0:
                    3b:c4:8c:3b:53:56:75:fd:c3:73:c3:75:ba:fc:44:
                    f3:6d:02:7f:32:0e:c8:31:b6:16:02:bd:47:a1:6d:
                    3d:11:04:60:fe:2a:f4:87:68:85:09:d6:f0:7b:a3:
                    5e:96:94:38:b5:fd:f9:e5:59:07:53:61:3d:0a:da:
                    4d:b5:fb:b8:92:b3:cc:05:47:6d:1d:72:6a:f3:3c:
                    9b:a0:11:8e:93:d8:60:5e:56:4d:f1:1b:17:22:df:
                    0d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F9:99:CC:87:72:B6:1F:19:8B:D2:ED:A4:72:83:8D:58:A5:74:2B
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:07:cb:bb:02:60:b7:6a:8a:5d:db:e9:d4:c5:7b:53:a1:
         a8:53:73:a1:54:48:dd:e4:84:8d:af:ea:80:1d:d6:dd:cb:8b:
         a3:3b:ec:6c:5c:b5:25:5e:77:d2:d4:d5:92:0c:90:e3:db:e5:
         dd:50:6f:21:56:6e:59:53:13:d0:dd:44:39:dc:79:5d:b8:30:
         97:80:00:72:c4:83:69:61:95:4b:38:da:02:02:a9:15:b4:d0:
         52:47:da:61:6a:c4:3d:c6:7a:af:fc:4a:03:b5:93:48:0b:0a:
         34:3d:6b:e1:7e:f5:8e:13:db:71:ee:c2:1b:6a:74:9d:c6:14:
         30:55:cd:45:40:62:a6:b8:15:6f:44:d6:5d:4e:c2:6e:c8:7e:
         85:ef:4b:d6:a9:18:02:b5:ac:ee:c6:13:48:f7:ef:2e:e4:2a:
         8b:9a:74:77:cd:60:48:7f:af:b3:1a:4e:b3:95:20:7a:d5:09:
         bc:14:2c:6b:bf:a2:06:4d:e8:43:72:92:0b:c5:2f:08:6d:5e:
         cf:97:70:ab:c9:f6:19:83:f9:05:ed:92:16:ab:db:27:94:24:
         9f:80:0a:31:7a:ec:72:19:dc:54:b1:09:8a:cc:6f:9c:64:da:
         18:a9:5d:6a:3c:c4:f4:64:5a:a9:56:d6:41:56:77:c9:41:30:
         13:43:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:06 2026 by rpki-client