Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa
File:                     3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (raw, json)
Hash identifier:          LvhMo9Ji9pG6mVQPdJp//+4N2gdaqqVMar2Fp2RKr1Q=
Subject key identifier:   46:5F:D9:F4:22:54:E6:0F:E5:65:4D:A6:8C:52:A8:12:0D:EE:6E:56
Certificate issuer:       /CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D
Certificate serial:       0F37851FD7B35DE8895364123960B6BBE70B5820
Authority key identifier: 8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa
Signing time:             Sun 03 May 2026 02:34:22 +0000
ROA not before:           Sun 03 May 2026 02:29:22 +0000
ROA not after:            Sun 02 May 2027 02:34:22 +0000
asID:                     149319
IP address blocks:        103.178.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl
                          rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:37:85:1f:d7:b3:5d:e8:89:53:64:12:39:60:b6:bb:e7:0b:58:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D
        Validity
            Not Before: May  3 02:29:22 2026 GMT
            Not After : May  2 02:34:22 2027 GMT
        Subject: CN=465FD9F42254E60FE5654DA68C52A8120DEE6E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:07:13:9f:f9:be:40:e4:f0:1e:7a:f1:95:
                    3d:9d:85:12:fc:ce:22:61:34:14:66:de:2e:b1:dc:
                    9c:7a:6a:34:e3:c7:b6:e8:4d:9c:54:2f:d7:05:3a:
                    df:4d:17:ca:99:10:d3:e9:20:9a:4b:3f:82:19:72:
                    62:9d:32:cd:5b:a8:68:e5:cf:1e:22:47:9d:1c:b5:
                    7b:f5:fc:08:01:6a:61:e7:81:02:1c:cb:44:cf:3b:
                    36:7b:0b:c2:e7:ff:69:59:bc:56:07:60:1b:2a:f0:
                    6e:18:02:d2:f7:6c:ff:2e:e1:35:87:18:27:25:3c:
                    58:d3:3a:87:99:c1:fc:ca:c0:fd:c1:06:2c:e7:8a:
                    30:62:18:6b:ed:a3:03:70:15:62:f3:19:0e:1b:f2:
                    bc:8e:d4:e0:1d:65:70:58:17:12:d6:fe:d1:25:30:
                    cb:b2:27:6c:2b:f6:61:98:0a:eb:a8:a3:7e:97:dc:
                    09:9e:2f:52:08:e9:cb:53:96:08:5b:5e:0d:f0:74:
                    01:2e:3f:de:3e:05:15:07:3a:d1:a5:0d:16:d9:e1:
                    31:5d:67:7f:db:75:7c:e1:c7:e2:4c:21:46:a7:b0:
                    75:6b:10:be:c8:f3:df:1e:27:00:98:61:35:9e:13:
                    e8:a2:aa:75:fc:98:ec:c9:27:d6:53:28:83:e3:f9:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5F:D9:F4:22:54:E6:0F:E5:65:4D:A6:8C:52:A8:12:0D:EE:6E:56
            X509v3 Authority Key Identifier:
                keyid:8B:E2:68:46:5C:E3:BF:5E:B0:DF:36:13:FE:BD:D3:C2:76:F5:BB:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8BE268465CE3BF5EB0DF3613FEBDD3C276F5BB2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:94:a7:04:6c:62:f4:e1:b1:c3:94:64:11:a4:a7:08:bc:35:
         15:c0:8e:fb:fe:94:7b:5c:85:f6:ed:c9:2b:a1:d5:2b:41:48:
         2f:c8:90:d7:84:39:c4:84:bc:f4:ac:03:01:6a:ee:73:b2:07:
         bd:c8:40:ff:0e:c9:01:d0:ca:72:43:7f:51:6e:9b:fc:2b:84:
         67:be:cf:2a:4d:2a:c7:64:29:55:c6:ba:47:de:79:f8:52:c3:
         d8:5f:28:9b:29:62:7b:69:dc:c7:c3:38:5d:93:7b:56:e6:be:
         40:5d:f1:d7:69:e8:4d:31:a9:a2:46:dc:60:38:15:f3:d8:f7:
         5f:3a:c7:1c:66:a8:74:c1:a2:24:fe:1d:75:cf:b3:d9:4b:d3:
         a0:71:6d:81:09:cf:0d:69:16:a0:99:8d:01:35:a3:65:38:ea:
         a6:c3:78:c5:df:b6:0b:75:6c:42:eb:d8:aa:48:96:3f:d9:f7:
         0d:30:25:96:e3:da:9b:3b:7e:59:25:4c:52:04:6d:3f:8e:12:
         2f:94:8f:0a:63:72:b6:29:c8:2e:cb:e0:5a:a3:88:ce:0e:eb:
         b9:2c:a7:00:fc:28:b0:93:e4:f0:9a:d0:c5:69:a9:b3:68:3d:
         40:3c:9f:9d:45:4f:85:5f:3d:68:0b:64:9d:56:3e:d2:92:fa:
         c2:04:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:56 2026 by rpki-client