Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa
File:                     3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (raw, json)
Hash identifier:          +co2KhnhkyS+dd2WpG/hxO+d+62en7egKYIfJt2xtsw=
Subject key identifier:   8B:DB:D1:C9:27:40:D7:38:D3:9E:48:98:10:6E:6A:BB:54:C3:A2:A3
Certificate issuer:       /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0
Certificate serial:       41C0C4D749CE79BD9F00684CBB78022B1F89E3D4
Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa
Signing time:             Sun 03 May 2026 02:32:55 +0000
ROA not before:           Sun 03 May 2026 02:27:55 +0000
ROA not after:            Sun 02 May 2027 02:32:55 +0000
asID:                     135464
IP address blocks:        103.102.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl
                          rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c0:c4:d7:49:ce:79:bd:9f:00:68:4c:bb:78:02:2b:1f:89:e3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0
        Validity
            Not Before: May  3 02:27:55 2026 GMT
            Not After : May  2 02:32:55 2027 GMT
        Subject: CN=8BDBD1C92740D738D39E4898106E6ABB54C3A2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:be:57:e5:fc:5a:1b:e8:eb:b4:2d:f6:ee:
                    c4:98:ab:b9:ef:db:66:11:08:57:74:fa:1a:63:57:
                    4e:3b:b1:11:ff:20:fa:5b:31:b0:89:6b:74:5b:a3:
                    81:78:8d:97:3c:9e:c9:b8:d0:fc:98:86:1e:fb:a2:
                    62:b5:a0:09:37:a4:28:f2:23:3e:4f:e1:66:b7:0a:
                    c0:17:dd:50:24:da:76:5e:1f:88:15:1a:49:b2:7d:
                    f8:cc:e4:e0:c8:b6:b3:44:83:d8:25:2f:57:9c:5f:
                    3a:09:3d:fb:ea:ca:f2:17:82:b6:81:f8:b0:ab:be:
                    35:7e:1c:78:e1:c3:49:bd:1f:c9:69:0c:27:60:81:
                    de:da:94:b1:30:db:29:f2:f7:2d:c1:4a:c7:09:0f:
                    46:09:31:5e:1d:28:63:80:a6:e2:c9:05:e9:f6:29:
                    9f:37:2b:7b:d9:75:5f:4c:50:fc:8a:0c:b2:8a:b3:
                    8c:08:24:da:20:88:28:b1:89:52:87:11:70:f7:05:
                    d4:2a:42:b9:2e:51:2e:66:8e:05:fb:20:da:14:9c:
                    e8:fc:99:c1:b9:2f:34:df:90:a4:32:22:49:4f:c5:
                    41:f5:79:34:73:fa:7c:1d:c0:bc:26:47:57:dc:cb:
                    06:50:62:32:2e:a6:a3:84:b5:bb:d4:cd:84:b2:62:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:D1:C9:27:40:D7:38:D3:9E:48:98:10:6E:6A:BB:54:C3:A2:A3
            X509v3 Authority Key Identifier:
                keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4a:08:fd:e6:0b:6d:05:1c:d1:6e:6e:4d:35:8d:e5:36:8a:
         d1:26:0b:c1:2a:29:2a:d0:f8:7e:9f:fd:15:fd:09:86:5a:fc:
         d7:bf:9c:0c:79:9b:9b:80:f1:a5:99:a6:35:3f:1d:41:90:5a:
         72:05:7d:cb:66:eb:99:9c:a2:76:46:11:6b:bc:d3:92:b5:0a:
         69:a1:89:f0:ce:54:49:5b:2f:07:3b:57:b1:ad:5e:97:93:2d:
         27:2b:01:4f:02:9a:d4:db:11:22:7e:b7:4b:a0:8c:0e:ec:0c:
         79:26:f7:7b:a8:c6:49:fd:24:bb:08:a7:6b:4e:ff:ef:06:44:
         42:d3:c5:b4:93:80:f1:ae:7a:35:cb:2c:c5:a4:b2:73:c7:07:
         f6:9b:b1:29:f2:5e:ff:8d:b4:e9:40:a3:bb:ab:bb:ad:23:e9:
         1f:14:1e:2b:8c:d3:86:0d:03:7c:43:e5:92:52:bd:5e:bb:12:
         94:13:77:1c:3d:8e:18:e6:c4:23:23:10:9f:88:0b:b2:30:ae:
         c1:0d:ab:bf:7a:ff:ab:af:a1:c7:73:ac:5d:0c:00:6c:9c:b3:
         9a:71:f0:b4:06:48:50:73:f2:89:36:c0:39:9f:ea:83:90:47:
         6b:c9:61:e9:7d:cb:2d:7e:fb:38:9f:4b:25:2d:fa:dc:72:58:
         ce:1b:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:22 2026 by rpki-client