Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa
File:                     3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (raw, json)
Hash identifier:          0malPwz+RTtf0zfQa5ZCgjL04DU4eZWwOeTz+IpVOtc=
Subject key identifier:   50:E4:F7:32:AE:A9:BD:29:47:B1:E5:86:6E:10:CB:C2:B5:6B:8D:76
Certificate issuer:       /CN=096E75D80B559B9824609BA61681D845A0CB0F77
Certificate serial:       396C131C9B4DADC5FF7351942DA3FBC77EF7B24C
Authority key identifier: 09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa
Signing time:             Sun 03 May 2026 02:33:44 +0000
ROA not before:           Sun 03 May 2026 02:28:44 +0000
ROA not after:            Sun 02 May 2027 02:33:44 +0000
asID:                     147090
IP address blocks:        103.173.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl
                          rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6c:13:1c:9b:4d:ad:c5:ff:73:51:94:2d:a3:fb:c7:7e:f7:b2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096E75D80B559B9824609BA61681D845A0CB0F77
        Validity
            Not Before: May  3 02:28:44 2026 GMT
            Not After : May  2 02:33:44 2027 GMT
        Subject: CN=50E4F732AEA9BD2947B1E5866E10CBC2B56B8D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:4b:92:a0:b5:07:cf:54:d7:49:71:aa:4f:
                    df:41:44:aa:3f:76:3d:61:4a:e0:00:af:46:1f:dd:
                    33:b3:50:ba:53:45:22:c6:df:7d:c2:76:23:d8:fb:
                    bf:e8:74:75:a8:59:61:c1:3c:f6:59:aa:48:86:fc:
                    4b:e0:2b:83:76:b2:97:42:50:bd:40:8b:59:1c:df:
                    74:26:a0:f0:9f:a1:d7:d9:65:eb:68:27:60:01:e2:
                    a5:7d:96:e8:6f:6a:f5:ad:4e:4c:06:16:d8:b8:53:
                    14:7c:00:d6:12:7a:73:11:7f:e1:90:70:7b:ee:34:
                    ca:38:e3:de:17:1a:b0:9b:c5:84:26:e6:f7:aa:27:
                    24:6d:df:8f:70:12:2a:6f:e4:7a:51:a7:e7:8e:1b:
                    cc:06:ad:72:f6:7b:16:d1:bc:f8:21:e4:d1:4e:2d:
                    6f:60:e2:6e:97:f6:37:94:40:e1:82:c1:76:ec:c3:
                    9b:d9:42:e8:31:b9:79:c2:d7:45:e9:36:e5:08:b0:
                    24:cf:33:96:c2:aa:0f:4e:57:dc:3a:8e:8b:90:3d:
                    8f:8e:18:e3:c8:d2:a7:4e:2d:b6:97:2d:9b:95:45:
                    42:be:6c:aa:d2:b4:de:5a:eb:f5:01:78:9a:51:9a:
                    56:86:c2:1a:91:ca:99:66:56:80:70:58:ef:86:2e:
                    16:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E4:F7:32:AE:A9:BD:29:47:B1:E5:86:6E:10:CB:C2:B5:6B:8D:76
            X509v3 Authority Key Identifier:
                keyid:09:6E:75:D8:0B:55:9B:98:24:60:9B:A6:16:81:D8:45:A0:CB:0F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/096E75D80B559B9824609BA61681D845A0CB0F77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096E75D80B559B9824609BA61681D845A0CB0F77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:8b:37:3b:d0:51:b0:a9:be:9c:eb:52:31:75:5c:8d:40:f0:
         69:89:fa:7b:f3:cf:84:b8:eb:1b:26:e9:d0:a9:4b:c4:06:d1:
         c6:2f:c1:f9:3d:1a:ac:ee:4a:2e:2b:f6:61:53:f0:82:a9:78:
         14:7f:c4:11:6c:e1:7f:c1:17:88:b3:64:73:28:c9:64:d0:8d:
         56:3c:aa:a3:be:36:a2:69:94:c1:8e:0b:35:c0:9b:c6:9e:32:
         0e:96:01:9f:b2:74:22:ef:36:d5:40:7d:39:ee:80:e7:96:f1:
         4f:4f:e5:6c:b6:32:d4:f6:79:9d:ea:42:96:3b:0d:24:5c:82:
         ee:43:64:91:c2:e5:56:aa:9c:27:58:76:85:47:4e:c9:24:2a:
         bf:6c:b9:4e:6a:28:f4:e9:3b:47:ee:9d:af:95:07:4b:19:7f:
         b1:24:ce:17:4d:fe:df:39:5c:0b:d9:e4:68:ae:07:96:4d:75:
         db:86:a5:7a:f1:02:4c:6a:3e:3f:e6:97:dc:57:91:28:00:35:
         ad:2b:d1:04:35:d0:f9:d2:3d:e3:18:8d:81:9a:5e:1a:47:0a:
         6e:47:72:ed:eb:50:bd:9a:f9:ef:a2:22:eb:bf:34:c8:51:d3:
         27:76:ba:4a:95:1f:81:af:76:5c:6f:16:46:72:57:a1:b7:8f:
         b7:9c:cc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:36 2026 by rpki-client