Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa
File:                     3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (raw, json)
Hash identifier:          gkAC5+StdnMaSqYuGVBT+3ErlRAaXIJGp1TwiVqa81g=
Subject key identifier:   37:59:2A:59:D1:E7:C7:1D:29:24:63:40:61:48:2D:00:65:D6:7E:C2
Certificate issuer:       /CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
Certificate serial:       0FC57620577914767739BA7F60864C3B33CC7700
Authority key identifier: E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa
Signing time:             Sun 03 May 2026 02:30:33 +0000
ROA not before:           Sun 03 May 2026 02:25:33 +0000
ROA not after:            Sun 02 May 2027 02:30:33 +0000
asID:                     136874
IP address blocks:        103.105.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl
                          rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:76:20:57:79:14:76:77:39:ba:7f:60:86:4c:3b:33:cc:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E88BC8A7F27D2A5B7520E87760889CD042853ADE
        Validity
            Not Before: May  3 02:25:33 2026 GMT
            Not After : May  2 02:30:33 2027 GMT
        Subject: CN=37592A59D1E7C71D2924634061482D0065D67EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:a1:5a:aa:c4:fc:b8:9f:20:ef:ee:68:fe:
                    5d:d2:31:1b:f8:e8:3b:54:2b:30:fd:9a:d6:e5:58:
                    de:ca:c8:e9:54:b8:0e:ed:d8:30:ef:c3:2d:8a:15:
                    a5:5c:9e:11:77:53:d7:c4:6b:94:fc:35:92:d2:dc:
                    5e:b3:be:ae:d8:e3:16:1b:b4:ad:7a:32:f2:3a:f2:
                    b7:24:70:28:1c:67:b0:c0:d8:f7:a9:70:9c:b1:c8:
                    ac:b7:71:94:02:f0:91:13:2f:7c:f7:4d:e4:03:ad:
                    31:b4:77:6d:2c:ed:04:ec:5d:87:23:2b:36:e5:e7:
                    4b:97:9f:d2:77:1d:af:da:ba:14:4a:29:ad:6b:39:
                    e7:1c:bf:22:e3:46:b6:93:25:15:8b:22:38:0a:06:
                    18:68:cf:8e:64:a4:50:f6:d9:3f:3b:c4:a6:8d:50:
                    14:7f:1d:d4:e1:cd:22:6f:0b:9c:aa:fd:b3:49:f3:
                    92:c1:a7:72:8d:55:92:63:aa:74:6f:c1:4a:db:3f:
                    03:c4:4f:c7:cd:ee:be:b5:4f:71:bd:51:4f:48:b9:
                    3c:de:94:6c:20:ae:76:07:92:57:2a:54:ec:57:b9:
                    e0:57:e3:db:01:86:67:61:97:80:b0:25:c7:b1:f4:
                    73:52:26:6a:34:b5:6c:3b:59:8d:56:ed:d7:bb:7a:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:2A:59:D1:E7:C7:1D:29:24:63:40:61:48:2D:00:65:D6:7E:C2
            X509v3 Authority Key Identifier:
                keyid:E8:8B:C8:A7:F2:7D:2A:5B:75:20:E8:77:60:88:9C:D0:42:85:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/E88BC8A7F27D2A5B7520E87760889CD042853ADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E88BC8A7F27D2A5B7520E87760889CD042853ADE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:e3:3c:99:48:56:fb:cf:34:5f:1b:0f:d4:37:fa:5a:f4:
         2a:cb:bc:54:2d:b2:47:33:dd:d6:66:5c:53:97:bb:8e:1d:bc:
         e2:61:84:9c:ad:01:d6:02:a2:8a:0a:26:61:58:1c:02:b2:45:
         bd:40:c7:a6:54:a6:50:d8:42:92:a5:31:7a:0a:87:93:b2:76:
         e1:51:7b:57:9b:fb:f6:bc:a6:0a:4c:28:d7:7f:53:11:9e:ee:
         9d:2b:39:0a:89:f4:d8:e0:10:25:42:68:3a:a1:b8:1b:07:f0:
         20:09:bb:f0:3a:09:d8:5f:f0:5b:f2:e9:6c:7f:f4:e3:4a:60:
         3c:4a:55:c7:5a:a1:90:7e:ca:38:68:0b:95:29:73:06:30:ad:
         fa:c1:40:58:ed:bc:0b:a6:af:12:9e:1f:b7:4a:ca:34:ba:28:
         92:d0:30:13:23:ab:46:cb:7f:b9:97:47:02:d5:05:86:39:c5:
         39:8e:1a:5e:13:e1:fa:47:c9:53:bf:af:70:12:d6:d9:c4:18:
         f6:ef:02:8b:32:3d:06:11:32:aa:c1:e5:36:64:d1:2e:4b:a8:
         3e:ca:2e:97:c2:18:51:7f:21:6d:27:51:5e:d3:6e:1e:46:56:
         20:04:69:d9:f1:21:65:44:db:2e:62:05:44:97:7c:b7:51:7e:
         c0:b3:8c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:34 2026 by rpki-client