Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa
File:                     3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (raw, json)
Hash identifier:          4TyXOZJITcEyepgGV7UqSgIx7GZrhhX2jvzd83SSTg8=
Subject key identifier:   7C:6C:D7:9C:2F:4A:99:76:51:AF:F7:C5:CA:D1:59:C4:B1:E9:03:17
Certificate issuer:       /CN=815468AF79588A14560E794FB64918D01C6C1FDC
Certificate serial:       552CCE1F45342BE45959EB2366E444393437C188
Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa
Signing time:             Sun 03 May 2026 02:32:36 +0000
ROA not before:           Sun 03 May 2026 02:27:36 +0000
ROA not after:            Sun 02 May 2027 02:32:36 +0000
asID:                     147113
IP address blocks:        103.173.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl
                          rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:2c:ce:1f:45:34:2b:e4:59:59:eb:23:66:e4:44:39:34:37:c1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC
        Validity
            Not Before: May  3 02:27:36 2026 GMT
            Not After : May  2 02:32:36 2027 GMT
        Subject: CN=7C6CD79C2F4A997651AFF7C5CAD159C4B1E90317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:a5:fe:7f:70:a0:e3:ab:ca:a1:2b:28:5a:
                    fd:e2:b6:28:cb:f6:01:48:4a:c1:ca:35:3c:a6:e9:
                    bc:d7:06:28:2b:42:14:e5:fa:56:d7:a7:06:3e:ce:
                    2a:4e:c6:5e:bd:d9:ea:4d:f6:ed:07:87:26:b4:84:
                    f3:78:40:e3:06:5d:06:0f:29:71:5f:d8:14:dd:bc:
                    aa:8e:65:30:90:cd:1e:28:fc:88:17:86:93:3e:3e:
                    a1:c6:11:e7:d5:ac:41:f0:54:3b:0e:0b:2d:14:c5:
                    b7:0d:b8:de:ba:4a:12:a1:fa:fe:cd:c6:c1:d1:e8:
                    23:f5:89:25:38:88:80:83:c5:78:bf:c1:d1:78:e1:
                    bc:bc:8f:57:b3:76:86:e4:e3:3f:a3:4c:8d:0b:c3:
                    f4:0f:75:cc:ef:2b:49:5b:51:30:68:89:ac:0d:fe:
                    81:d9:c8:91:a1:8e:4b:23:5f:fc:c2:7d:c1:ec:f2:
                    57:7c:c5:51:0d:cb:54:e5:b2:4a:0e:13:d9:2c:52:
                    06:cb:fe:04:9c:72:dd:00:71:91:c5:da:c2:b9:d0:
                    a0:f5:8a:67:8b:63:35:71:f3:7b:be:38:82:f8:9c:
                    9f:83:7d:ad:76:ab:14:51:6a:70:c9:c6:70:d9:24:
                    94:b9:06:23:41:4c:77:13:bb:e5:cd:c8:ac:2f:f7:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:D7:9C:2F:4A:99:76:51:AF:F7:C5:CA:D1:59:C4:B1:E9:03:17
            X509v3 Authority Key Identifier:
                keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:5d:02:22:0c:b9:25:ea:d4:da:42:29:aa:d2:73:a5:37:d3:
         f1:98:1f:23:79:15:7a:26:a1:3b:b9:01:02:e9:03:94:ba:66:
         1f:1e:5c:5d:63:ee:f9:12:37:fc:69:da:93:e0:7b:30:a3:ca:
         87:25:2d:ab:7d:85:f8:be:83:55:a0:48:69:55:12:f0:e9:e9:
         3f:38:3d:e4:8b:8d:2f:8c:0d:cf:e7:2a:8a:89:18:75:cd:71:
         19:a5:e1:ca:7e:f2:ac:2b:e7:95:cd:d8:cb:ff:c2:29:cf:c7:
         d7:3c:c7:49:53:6e:3d:50:99:7c:8c:75:df:5d:04:71:93:12:
         23:c7:55:07:9e:8b:9c:db:d2:15:72:4a:22:ce:2f:0b:9c:04:
         6d:f2:9a:ee:8f:36:39:81:97:85:dd:b5:31:9c:a6:bb:9d:bf:
         61:22:f5:9b:c4:26:19:77:fd:fc:64:ef:64:3c:61:cb:e3:6c:
         bf:6f:ef:03:a7:1e:28:ae:f0:01:98:32:6d:d6:17:72:d7:73:
         8d:98:2b:f5:1e:3e:21:cf:9c:07:95:5b:6f:89:d3:95:15:93:
         48:71:1a:a0:00:80:50:94:26:c7:7d:54:98:fa:11:a5:3e:24:
         1f:78:b8:8f:e7:0f:9e:99:2f:53:f4:96:b9:74:d0:c7:0a:27:
         5b:93:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:01 2026 by rpki-client