Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa
File:                     3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (raw, json)
Hash identifier:          sPeZ5gB9bmKL5IKYQ+GWjLxvbyJMzi8Se9W99QeygcE=
Subject key identifier:   B4:4B:15:25:9D:B2:59:25:FE:7C:3F:55:23:7F:F0:FA:54:DA:EC:77
Certificate issuer:       /CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
Certificate serial:       72463AD500E4DEEC4CCE2236BB140327083D2F88
Authority key identifier: 94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa
Signing time:             Sun 03 May 2026 02:31:27 +0000
ROA not before:           Sun 03 May 2026 02:26:27 +0000
ROA not after:            Sun 02 May 2027 02:31:27 +0000
asID:                     149340
IP address blocks:        103.178.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl
                          rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:46:3a:d5:00:e4:de:ec:4c:ce:22:36:bb:14:03:27:08:3d:2f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94AA0EEA480AC3300365DF4B33DA3F3150698D55
        Validity
            Not Before: May  3 02:26:27 2026 GMT
            Not After : May  2 02:31:27 2027 GMT
        Subject: CN=B44B15259DB25925FE7C3F55237FF0FA54DAEC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:f3:44:13:3f:0a:e2:b8:3a:19:1d:e0:34:
                    a3:e0:24:be:22:de:68:e8:07:65:30:98:56:4a:9e:
                    81:5c:24:f9:30:a9:04:18:df:e5:cf:a8:95:b2:04:
                    f6:11:36:64:65:6b:94:ff:b4:50:21:0a:f8:12:93:
                    81:f8:d7:50:1e:3f:53:52:9d:80:60:73:e5:18:96:
                    62:f2:09:bc:a9:96:7d:78:ab:27:21:d7:f4:3c:71:
                    92:bb:b5:96:a2:ca:21:36:b2:31:10:4a:b1:c4:13:
                    5f:97:3c:0f:8a:1e:5f:f2:33:31:42:10:ed:00:6f:
                    a5:30:ef:83:f1:af:fe:9b:71:aa:eb:d1:d0:f2:39:
                    4c:61:e3:fb:33:15:35:d7:15:90:67:04:26:3d:b9:
                    c4:5d:13:3b:82:7a:f8:6d:9d:72:2c:18:ea:65:b2:
                    67:66:aa:e3:65:e0:05:cb:3a:a5:e8:20:e9:fa:64:
                    69:16:a6:9d:f6:5e:e4:1a:ab:ea:81:17:68:f4:b3:
                    eb:be:cc:17:94:f8:fd:8d:a6:1a:ad:b7:b6:df:11:
                    4b:0d:d3:8d:36:15:71:9e:f2:55:1c:3d:7e:61:8e:
                    51:55:1d:c8:54:cb:b6:21:30:3b:26:ac:95:69:4d:
                    5c:1c:97:da:69:c8:86:c0:61:fe:9d:53:ad:4f:31:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:15:25:9D:B2:59:25:FE:7C:3F:55:23:7F:F0:FA:54:DA:EC:77
            X509v3 Authority Key Identifier:
                keyid:94:AA:0E:EA:48:0A:C3:30:03:65:DF:4B:33:DA:3F:31:50:69:8D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/94AA0EEA480AC3300365DF4B33DA3F3150698D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/94AA0EEA480AC3300365DF4B33DA3F3150698D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d4:7e:54:29:8b:bc:c7:fb:9a:b9:d4:92:0f:4d:b2:1e:b4:
         f0:41:c2:37:7b:b0:49:76:86:b1:16:a6:93:af:9c:37:e1:27:
         bd:fd:84:74:1d:18:d9:42:18:b7:07:09:f9:5d:59:fb:cf:84:
         c0:46:7f:7e:ac:00:17:fb:7c:0a:51:0d:a6:3d:6e:f1:3d:3a:
         fe:61:00:04:34:08:e3:96:2b:09:a2:8f:d8:c1:4c:87:a0:12:
         db:ee:28:33:75:6c:fd:39:04:f2:8f:06:c1:71:97:0d:dd:dd:
         0a:75:34:d7:ed:6f:44:4b:cd:d7:17:8c:39:cb:ca:be:de:32:
         d6:90:34:b6:99:48:fd:d9:a4:6e:63:eb:d1:bf:70:f2:f5:db:
         e4:5c:4d:17:a7:0c:b5:2b:46:38:a8:48:48:c0:25:07:35:db:
         93:3d:64:c7:64:83:83:25:8f:5f:9f:e7:2f:30:3f:08:9d:2d:
         e3:ad:44:52:88:df:ce:8d:fb:99:0c:7b:b5:4c:69:fa:9d:f0:
         a4:c3:57:b2:e4:e4:e1:f2:f7:9a:c6:d0:6d:72:29:fc:d1:72:
         0d:ce:05:72:af:f6:18:77:2d:26:47:92:8f:77:30:cb:3b:b5:
         db:5f:a4:df:63:16:fa:cd:44:24:ec:d2:ba:89:a0:ea:1e:f4:
         8a:10:76:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:16:47 2026 by rpki-client