Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
File:                     3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (raw, json)
Hash identifier:          YLTFqPbE8HodWEXzk84zRnRAos+QxeVHNtxc/4KtNBA=
Subject key identifier:   51:91:BA:30:8A:43:46:DB:A5:6B:B8:9D:BE:90:E7:2C:95:B7:51:12
Certificate issuer:       /CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B
Certificate serial:       06B5A3C26C75C95D133C73E28E4737FD8B1C53D0
Authority key identifier: C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa
Signing time:             Sun 03 May 2026 02:33:42 +0000
ROA not before:           Sun 03 May 2026 02:28:42 +0000
ROA not after:            Sun 02 May 2027 02:33:42 +0000
asID:                     147117
IP address blocks:        103.175.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl
                          rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:58:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:b5:a3:c2:6c:75:c9:5d:13:3c:73:e2:8e:47:37:fd:8b:1c:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B
        Validity
            Not Before: May  3 02:28:42 2026 GMT
            Not After : May  2 02:33:42 2027 GMT
        Subject: CN=5191BA308A4346DBA56BB89DBE90E72C95B75112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:af:94:d6:6a:62:58:dc:35:91:88:9e:58:
                    d8:15:89:4a:ed:ca:23:0f:e7:49:ca:a0:f2:73:df:
                    3f:db:71:21:66:ba:a6:2f:00:c8:75:1d:bf:26:4a:
                    7e:c9:62:6f:1f:93:01:d0:1c:1d:8f:3e:45:82:df:
                    38:21:c1:ff:cc:c0:61:6b:2c:71:bd:35:7b:30:d8:
                    63:61:25:b3:57:a5:13:98:a8:ce:da:37:89:68:8b:
                    62:71:48:18:23:c5:99:64:00:8f:fc:54:dd:47:88:
                    4a:c9:f1:d9:87:52:d6:77:d1:e3:4d:ef:12:57:39:
                    0e:86:ce:44:79:c3:ab:a7:08:20:05:5f:3d:97:ae:
                    9e:8f:f4:ea:68:01:97:9a:66:39:4f:18:32:40:7e:
                    59:8b:e5:7e:88:42:59:b3:e5:9e:8b:a8:3f:a4:a0:
                    75:ea:9a:15:cd:be:17:f3:bb:da:96:6d:ed:d3:13:
                    c7:3c:de:2f:a0:07:17:2b:3d:74:6e:b6:df:ca:2a:
                    16:c6:7b:44:99:17:4c:86:19:36:b7:61:41:5a:a0:
                    ab:25:28:0d:a2:2e:79:44:52:19:41:ff:fc:3f:f5:
                    f5:8b:1e:78:67:56:8a:d1:5d:ab:e8:1f:00:8e:32:
                    24:60:54:ec:dd:f0:52:5a:2b:a2:47:e9:b9:58:fa:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:BA:30:8A:43:46:DB:A5:6B:B8:9D:BE:90:E7:2C:95:B7:51:12
            X509v3 Authority Key Identifier:
                keyid:C3:C3:09:0F:9D:96:CA:59:36:EA:8B:7D:59:E9:AE:66:0F:7F:7D:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C3C3090F9D96CA5936EA8B7D59E9AE660F7F7D8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:5e:df:6f:37:b8:43:dc:b5:6b:ae:90:c2:fc:1c:b3:60:
         8f:8c:e6:f2:3e:7e:ed:94:35:44:67:61:41:fb:bb:9f:78:c9:
         fd:14:46:18:3e:0f:ff:dd:02:26:ed:f3:f7:9e:79:16:8c:d7:
         77:51:65:05:73:11:0a:6d:33:57:4e:26:be:a4:4e:dc:5e:a1:
         3f:a9:a1:87:8f:6a:ed:ca:8f:62:8b:ab:12:2c:07:df:66:87:
         f5:ed:b7:53:ef:e3:9d:5e:0a:24:bb:c4:02:a9:ed:34:2b:48:
         e7:88:9b:66:28:11:85:d1:2a:4b:0b:55:7a:2e:91:6d:8b:bd:
         52:69:c5:5e:84:73:f7:f8:18:68:02:27:35:14:b2:ed:dd:0d:
         d4:b4:50:96:ef:23:45:44:6e:12:c4:75:3d:ab:45:85:0f:15:
         d3:04:52:ad:01:fa:c4:1e:e2:28:4e:df:2f:02:7f:8f:14:d0:
         b5:78:c4:5a:96:ac:3c:a8:18:b3:c7:d8:49:aa:7e:ad:6c:04:
         13:96:b5:24:9c:5b:c5:68:83:40:91:fb:c7:64:ca:bc:65:e9:
         32:a1:9c:f2:f9:01:45:d0:f1:07:54:83:20:c3:41:83:aa:0e:
         6d:d3:9b:f1:2f:c3:69:5a:30:03:41:b8:ae:8d:2b:b5:06:35:
         6e:f1:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:59:30 2026 by rpki-client