Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=
Subject key identifier:   07:6E:EF:FC:D4:13:B4:CC:FF:B5:58:A6:97:77:1D:45:7C:43:7A:69
Certificate issuer:       /CN=850C1E1809E2AF49A27C3E67F27A17989362D067
Certificate serial:       6D46B73D647FE28B8EE9A0D7D79FB002011C8823
Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 02:33:48 +0000
ROA not before:           Sun 03 May 2026 02:28:48 +0000
ROA not after:            Sun 02 May 2027 02:33:48 +0000
asID:                     46023
IP address blocks:        103.245.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl
                          rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:46:b7:3d:64:7f:e2:8b:8e:e9:a0:d7:d7:9f:b0:02:01:1c:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067
        Validity
            Not Before: May  3 02:28:48 2026 GMT
            Not After : May  2 02:33:48 2027 GMT
        Subject: CN=076EEFFCD413B4CCFFB558A697771D457C437A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:a9:85:96:b3:9d:56:59:c0:54:1b:42:d6:
                    62:18:16:b1:9a:8b:85:6a:09:f5:c0:d7:9f:f0:1d:
                    09:cc:4a:8e:4c:c1:d9:b3:ac:ef:5d:cd:01:6b:0c:
                    0a:ea:3f:2a:58:a1:4a:01:f5:fd:b1:51:82:6c:df:
                    4c:9b:51:68:b2:b3:95:e2:3e:d6:d4:92:49:c4:36:
                    b0:aa:29:c6:2a:14:d5:d3:bb:3b:32:30:e6:21:bd:
                    59:33:e5:f0:e8:34:4b:f9:f9:b3:25:78:50:de:67:
                    67:ce:82:c4:3f:6a:0b:29:df:08:8a:3f:82:32:4b:
                    7a:33:d8:a2:f8:ce:f1:66:e5:21:ec:cf:6c:27:34:
                    93:50:86:55:44:c2:92:45:c3:86:20:8c:51:a5:fd:
                    04:69:8e:64:18:e8:9b:f9:c7:21:31:65:fb:b1:5f:
                    43:84:b8:ac:99:2e:a2:cf:b5:31:a9:ca:ef:bc:07:
                    f5:9b:91:eb:bc:6f:8c:04:95:54:9a:c0:b3:5b:2d:
                    94:42:d6:be:13:67:55:fa:c4:af:3e:5b:ec:6b:70:
                    a1:a0:9e:d6:01:60:c6:b0:90:df:b9:e6:8e:a8:ed:
                    b0:fe:33:dd:f6:75:02:4e:63:be:62:ce:35:97:d9:
                    05:43:02:bd:9e:28:4c:cb:e7:16:f6:4e:38:c0:d5:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:EF:FC:D4:13:B4:CC:FF:B5:58:A6:97:77:1D:45:7C:43:7A:69
            X509v3 Authority Key Identifier:
                keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31372e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:12:b4:12:82:18:c4:bd:a9:5e:50:d3:51:ae:74:83:39:
         2a:51:8d:89:4e:f4:4b:73:a4:a0:19:b0:74:e6:f2:9e:bb:b5:
         c5:9e:ce:4d:d7:24:51:7b:a7:9c:3e:fe:7b:28:78:3c:de:fc:
         89:4b:3e:70:bd:cb:ff:ef:b5:95:ac:0e:0c:83:e3:73:e0:31:
         f5:10:2b:15:0d:4a:fc:dd:97:e5:11:83:a7:1c:49:64:3d:d8:
         df:1e:54:39:c9:87:7a:18:89:c1:a8:40:69:78:b4:1a:16:75:
         5f:b0:08:e4:f5:40:d7:79:81:29:95:a1:ee:c0:11:cb:70:17:
         0a:5f:b6:08:0b:a7:eb:88:cd:8f:3d:57:bf:83:71:39:d1:4b:
         71:f3:86:69:67:5d:7f:c5:f0:24:a0:2b:7e:59:7b:23:81:55:
         f6:3e:e4:0f:55:e0:20:c3:21:9e:53:24:02:5e:17:31:56:9e:
         6f:c5:60:1b:4c:a5:45:4f:17:61:bd:51:06:0c:66:62:45:67:
         f8:9c:3c:1f:5e:fc:90:98:38:bc:f8:e7:9c:e8:dd:21:de:b6:
         12:32:f8:6d:1f:14:b5:d6:73:03:f0:6e:af:f7:ca:24:5a:27:
         ba:ce:41:af:e2:53:15:10:e1:f4:28:a5:c8:26:53:76:64:43:
         9e:79:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:02 2026 by rpki-client