Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa
File:                     3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (raw, json)
Hash identifier:          LIajhJuhOUTaJm+oofhgjNswmcoOFB63ng8TVN1eQsc=
Subject key identifier:   1D:09:30:55:46:F6:33:84:96:BC:37:BB:FF:75:C8:40:72:E4:A6:D1
Certificate issuer:       /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B
Certificate serial:       70173AA95C65BB14472855A680E7A5C86F96122D
Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa
Signing time:             Sun 03 May 2026 02:33:42 +0000
ROA not before:           Sun 03 May 2026 02:28:42 +0000
ROA not after:            Sun 02 May 2027 02:33:42 +0000
asID:                     147117
IP address blocks:        103.175.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl
                          rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:3a:a9:5c:65:bb:14:47:28:55:a6:80:e7:a5:c8:6f:96:12:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B
        Validity
            Not Before: May  3 02:28:42 2026 GMT
            Not After : May  2 02:33:42 2027 GMT
        Subject: CN=1D09305546F6338496BC37BBFF75C84072E4A6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:e9:4d:9a:e3:3c:f3:76:62:de:29:bf:86:
                    ac:36:1d:6b:79:1f:db:85:a9:fc:22:83:92:0a:6c:
                    17:e9:db:3c:b4:d8:64:e0:d5:28:89:b7:6b:d3:0b:
                    60:f4:7c:09:48:31:32:35:5d:f7:07:17:b5:b3:c3:
                    e7:ff:84:5d:2e:0c:cd:9a:6e:6e:7b:28:7f:8a:2f:
                    d9:6b:e2:36:4c:36:a4:3e:3f:10:77:b8:f9:64:73:
                    ee:78:50:16:f3:95:5c:06:07:1b:f4:8b:c9:4b:86:
                    86:71:95:b1:9d:d3:7f:49:2a:e4:c7:d4:45:a2:51:
                    32:7a:0d:96:4d:69:80:4b:3f:b8:3a:0c:f1:ba:dd:
                    ec:40:90:37:e6:86:f4:ef:d9:d1:95:79:22:d3:67:
                    f9:67:89:6d:7c:73:10:56:87:27:1d:87:1c:70:80:
                    78:e1:87:a4:2f:50:12:a6:c9:ba:25:90:40:29:0b:
                    e8:23:9e:64:d5:a2:67:25:a8:e8:af:a4:93:fb:02:
                    8f:97:47:c6:8c:25:89:a6:1d:19:96:ab:88:10:a9:
                    ec:ff:4e:67:ef:de:44:be:62:2e:1a:04:91:e9:28:
                    5e:cc:1e:da:cc:ef:1b:2f:86:e7:4f:7c:76:c8:97:
                    17:78:fb:ec:8e:46:97:1c:f6:42:5f:db:1b:9a:51:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:30:55:46:F6:33:84:96:BC:37:BB:FF:75:C8:40:72:E4:A6:D1
            X509v3 Authority Key Identifier:
                keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:2e:52:1b:ed:9f:d8:e9:c1:30:6d:9b:97:32:a9:2a:6e:
         ba:1d:fa:fa:e2:ec:52:99:77:34:c9:91:d6:22:0c:fb:e3:1b:
         af:ff:a1:52:d2:d1:4b:36:bf:95:d3:0e:16:bf:d7:b3:85:35:
         93:d5:bc:22:27:58:5e:a5:af:48:72:69:b6:08:91:f0:a7:2c:
         4d:85:0a:10:6d:7f:cb:4e:2a:2e:ba:18:85:dc:2e:98:bf:af:
         b1:cb:08:04:a9:45:a8:e8:f3:79:4a:e8:9c:35:20:cd:ba:46:
         bc:13:a3:96:7d:ae:00:d8:67:db:75:6a:b3:df:c6:1d:1d:bf:
         ff:c5:b7:96:eb:7c:43:ee:75:3e:d8:00:cd:e1:3b:81:fa:1b:
         c8:85:b4:5d:e2:f8:b5:cd:7d:a4:7c:f6:e3:a2:56:73:85:25:
         ed:9a:4b:c6:f4:25:66:bc:f2:1b:19:09:87:e1:c1:0c:39:04:
         00:3b:8e:e8:21:44:a8:e6:67:e9:cf:65:45:6b:99:d4:e3:a0:
         f5:ce:e3:e7:bb:af:ac:12:9a:29:4e:39:81:a2:74:f6:75:72:
         00:12:79:57:6a:37:55:6e:8f:8b:21:7b:f5:00:97:9c:26:04:
         89:45:e7:ab:c9:15:1f:00:15:68:64:a6:93:d7:22:ad:8b:8c:
         55:63:e5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:59 2026 by rpki-client