Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
File:                     3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa (raw, json)
Hash identifier:          huLq2YMQLck+XmMqgf5+tIkuWDJY1pNSg4kGrXts0QE=
Subject key identifier:   E7:E9:85:14:DB:60:AB:23:3D:78:A4:8E:A9:CD:75:7E:12:9D:B9:6C
Certificate issuer:       /CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889
Certificate serial:       F86E6DBDA28FD2B88E3417D3FA03E1F76CDFD9
Authority key identifier: B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa
Signing time:             Sun 03 May 2026 02:35:00 +0000
ROA not before:           Sun 03 May 2026 02:30:00 +0000
ROA not after:            Sun 02 May 2027 02:35:00 +0000
asID:                     147130
IP address blocks:        103.176.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl
                          rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f8:6e:6d:bd:a2:8f:d2:b8:8e:34:17:d3:fa:03:e1:f7:6c:df:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9D7A5A49B322ED987281832ABCFB5DC509AB889
        Validity
            Not Before: May  3 02:30:00 2026 GMT
            Not After : May  2 02:35:00 2027 GMT
        Subject: CN=E7E98514DB60AB233D78A48EA9CD757E129DB96C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:5c:e2:96:c5:4c:fa:e8:c1:45:06:ad:01:
                    7f:63:5e:53:c4:ef:59:21:fd:66:01:d4:5d:e4:94:
                    8e:0f:44:44:e3:5d:ca:0e:4e:a1:b7:fd:46:0b:99:
                    74:b3:3c:df:09:cc:d3:55:97:e0:cf:74:e7:5d:cb:
                    82:36:d0:46:d4:a5:87:88:db:06:9a:07:c9:00:74:
                    4c:82:f0:0b:d4:35:51:30:77:be:4b:ce:af:34:3d:
                    01:82:09:c1:d2:e5:7c:61:4f:c6:aa:9a:a3:c3:70:
                    0d:8b:b4:8c:ac:73:f9:47:56:19:ca:70:e5:ac:c0:
                    1e:42:c7:b7:89:a6:66:58:3b:43:1d:29:30:1c:dc:
                    7b:c5:f0:c7:dc:73:0e:e2:35:7c:a7:c3:65:aa:98:
                    95:7c:d4:22:6c:88:d1:2b:3d:34:33:0d:82:d9:e1:
                    82:d3:52:8e:11:93:fc:10:f2:88:f3:a4:6a:64:aa:
                    cd:fd:d0:92:f8:35:89:64:a3:c3:88:ae:aa:fd:fe:
                    b7:ba:a9:9f:d0:04:4e:70:ff:e2:91:40:3f:67:08:
                    07:a5:e5:f5:3f:d0:ce:3c:7e:72:b1:09:51:8a:48:
                    05:5e:e2:bb:9f:bb:b3:ea:c4:98:e7:7a:b2:08:2a:
                    cc:09:59:80:bd:4b:ab:f4:11:f5:6d:7c:eb:11:90:
                    f7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E9:85:14:DB:60:AB:23:3D:78:A4:8E:A9:CD:75:7E:12:9D:B9:6C
            X509v3 Authority Key Identifier:
                keyid:B9:D7:A5:A4:9B:32:2E:D9:87:28:18:32:AB:CF:B5:DC:50:9A:B8:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/B9D7A5A49B322ED987281832ABCFB5DC509AB889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9D7A5A49B322ED987281832ABCFB5DC509AB889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/3130332e3137362e36382e302f32342d3234203d3e20313437313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:54:25:01:32:83:ea:6e:08:a3:58:7a:85:66:5d:e8:22:b5:
         6b:5b:28:6c:82:be:f6:89:ed:7c:97:de:b4:0d:f1:dc:2f:a4:
         1d:cf:4a:a6:c9:9c:65:fb:83:ba:7c:91:ed:0c:95:f0:52:7c:
         22:1e:03:c3:c4:2c:41:ce:e8:48:cd:f4:44:03:c9:ac:00:24:
         db:b2:1c:1a:8f:2a:21:b2:ee:c8:7f:20:03:cc:bf:05:98:b9:
         be:aa:3e:5a:f9:ef:82:b8:12:85:0c:c9:72:2b:b1:35:42:bc:
         9a:e3:ab:65:fa:d4:63:c2:48:a6:72:aa:b5:2c:77:be:9e:e2:
         8e:e5:84:7d:2d:55:55:9f:2c:89:1a:9f:93:39:fc:d0:25:f8:
         35:c2:06:8a:f4:42:32:b5:71:46:ca:b7:b0:7b:5d:2e:1b:32:
         91:a2:47:2b:22:7e:9e:6f:c3:7a:b8:ae:ad:ca:4e:71:17:0f:
         f6:06:d9:ad:f5:ed:57:64:cf:61:f5:1d:04:36:c1:5e:5f:c9:
         5f:86:ed:e6:aa:5a:b7:ab:4d:3e:f2:78:9f:9b:c6:55:f2:d5:
         fa:77:de:d4:97:c1:ee:20:bc:cf:c4:77:5d:6f:93:4b:c4:f2:
         4b:ef:21:40:b9:63:1a:5a:6f:b7:0e:27:c9:24:f0:ca:ff:96:
         26:d3:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:55 2026 by rpki-client