Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa
File:                     3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (raw, json)
Hash identifier:          j6ecS+LU2IE57nqnTMCP3ISPfe6p/tZiprWjSdtyRJI=
Subject key identifier:   6C:55:65:96:56:D6:50:15:22:6B:5E:66:0F:9B:E9:83:D2:C0:95:15
Certificate issuer:       /CN=815468AF79588A14560E794FB64918D01C6C1FDC
Certificate serial:       65DD8F491A88098296159FFC6917070B6B24B44A
Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa
Signing time:             Sun 03 May 2026 02:32:36 +0000
ROA not before:           Sun 03 May 2026 02:27:36 +0000
ROA not after:            Sun 02 May 2027 02:32:36 +0000
asID:                     147113
IP address blocks:        103.177.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl
                          rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:dd:8f:49:1a:88:09:82:96:15:9f:fc:69:17:07:0b:6b:24:b4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC
        Validity
            Not Before: May  3 02:27:36 2026 GMT
            Not After : May  2 02:32:36 2027 GMT
        Subject: CN=6C55659656D65015226B5E660F9BE983D2C09515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7f:8a:d9:9a:44:ef:74:c6:4e:cb:a6:90:8d:
                    f1:b0:f6:ea:cd:c5:02:16:88:2a:d6:3b:d4:5d:d5:
                    b9:d7:f5:65:f8:b7:ed:33:db:a0:a3:95:e6:99:bb:
                    80:81:1e:f9:16:85:ba:17:0b:1d:23:d6:4c:8f:ce:
                    af:51:8f:09:a1:7c:be:70:97:57:8b:ac:6a:74:98:
                    a8:ad:ef:ae:e9:c1:c5:c4:31:8a:c3:f3:d5:e4:36:
                    20:49:72:42:b7:cf:74:12:9c:56:f6:5a:a5:6c:c3:
                    1a:a0:de:e8:d4:3f:3a:32:c5:a5:b2:a7:98:d3:67:
                    e6:4e:73:c0:ad:40:23:ba:41:3a:17:2b:12:fc:af:
                    fc:18:60:86:7d:e5:fe:35:1e:1d:d8:3b:3d:e6:c6:
                    ee:25:a8:f4:3a:5a:99:97:87:b2:30:3e:0b:08:d7:
                    c9:58:d3:46:20:a0:01:48:a6:ac:b1:32:ce:6c:51:
                    31:49:8f:f4:32:bc:eb:79:f6:1d:2f:d3:a6:88:9e:
                    e4:09:f2:d0:d2:09:31:ee:21:ea:b4:ba:78:c2:ed:
                    74:ec:31:96:56:39:db:01:22:05:6a:ce:6f:7d:40:
                    6b:7e:72:10:95:c2:43:37:ce:f5:e0:3f:2f:c4:e0:
                    11:20:5f:31:05:44:ef:97:5b:0b:a5:66:c6:a5:8c:
                    3a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:65:96:56:D6:50:15:22:6B:5E:66:0F:9B:E9:83:D2:C0:95:15
            X509v3 Authority Key Identifier:
                keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:1b:89:0c:d0:0a:60:b1:30:a2:33:b9:91:80:61:44:66:8e:
         9a:99:97:23:a6:c1:2f:94:cb:e6:74:44:8a:5a:fe:fa:b8:e0:
         11:f5:11:44:a2:58:d1:be:1c:73:0f:92:0e:af:e9:e4:2a:c7:
         e9:c1:3a:b2:81:83:16:a1:05:ea:a3:95:d8:9e:0c:40:52:22:
         a6:d0:8b:f5:84:b0:41:9f:21:9a:ce:c9:7b:75:21:54:9c:85:
         cd:5a:24:8a:ac:50:b1:88:98:c9:21:8e:f9:dd:6a:c0:e7:a6:
         25:b6:c4:07:3d:e5:78:4c:42:dc:8f:f5:a4:27:38:2a:c5:2e:
         30:c1:87:5a:3f:ff:a2:25:77:fd:eb:b1:40:7c:42:79:da:cd:
         e2:a6:9c:2d:fe:39:1a:23:fd:ab:80:b0:24:fc:2d:0b:08:15:
         64:a2:9a:ee:66:d9:03:ca:d2:b0:78:3e:a8:30:ce:03:87:3f:
         1a:05:94:87:64:e9:65:f2:42:67:a8:24:d1:e5:db:67:56:4c:
         d8:e4:07:74:21:45:c1:af:be:d8:16:f9:8f:20:12:d9:77:25:
         6f:39:dd:89:07:a7:27:0b:70:6e:de:d0:b1:1b:cb:ad:15:a8:
         85:8f:55:ab:a8:d2:78:a6:50:87:db:4c:96:6c:f3:86:22:a2:
         74:62:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:45 2026 by rpki-client