Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa
File:                     3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa (raw, json)
Hash identifier:          Ucyhvvm+o+bM38pbNEVAS9gvS1vDNFxykpJ6+UpJuS4=
Subject key identifier:   88:94:DF:54:A9:47:05:3F:3C:6F:6F:D8:7A:59:6F:E0:D1:4C:FA:46
Certificate issuer:       /CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
Certificate serial:       507C6EBCAF4AB569A449DBDA05B7A2904727FB37
Authority key identifier: B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa
Signing time:             Sun 03 May 2026 02:36:14 +0000
ROA not before:           Sun 03 May 2026 02:31:14 +0000
ROA not after:            Sun 02 May 2027 02:36:14 +0000
asID:                     147107
IP address blocks:        103.174.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl
                          rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7c:6e:bc:af:4a:b5:69:a4:49:db:da:05:b7:a2:90:47:27:fb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F572F5666D2B0BB66E3EC828AC43A207CB001A
        Validity
            Not Before: May  3 02:31:14 2026 GMT
            Not After : May  2 02:36:14 2027 GMT
        Subject: CN=8894DF54A947053F3C6F6FD87A596FE0D14CFA46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:96:80:35:63:75:53:e3:53:86:2a:7b:28:
                    1e:dd:b4:14:be:e6:a6:1c:b8:14:7b:11:cc:8d:2e:
                    4a:2e:6d:5f:54:43:e7:4f:4b:61:0d:96:cd:7f:0a:
                    c1:75:3a:2d:50:47:0e:3b:e2:d8:fe:b3:25:01:55:
                    cc:25:e0:30:64:d3:ac:31:b9:d3:a4:d0:40:e8:8d:
                    0e:22:ea:f8:d1:5f:ac:43:6a:21:6a:63:3f:0a:2f:
                    cb:00:b9:89:57:c3:39:ff:c3:1c:7b:5b:40:78:09:
                    6d:f0:f8:79:f1:e8:6f:d5:4d:cc:d0:2a:0a:ca:9a:
                    69:4f:1f:28:7e:84:62:e1:07:d6:6a:c4:8d:ef:aa:
                    76:aa:df:bd:14:07:12:9c:6d:a3:87:02:a7:10:a1:
                    bb:3c:86:fb:e3:b4:ba:4d:de:2f:b9:5e:f1:8f:7c:
                    f3:79:f6:58:8e:5a:a1:ce:7e:12:9e:de:b4:84:c4:
                    c7:73:97:40:6f:b1:e5:0d:51:96:ea:73:e3:01:ab:
                    4a:fe:a4:3b:39:74:6a:cb:37:35:d2:cc:af:66:a4:
                    22:8f:01:ed:c4:67:ed:cf:72:2b:75:62:3f:fc:6e:
                    59:80:47:14:30:af:d9:0d:23:a6:da:b4:4c:09:40:
                    e9:c9:57:df:b6:22:01:a8:bd:1c:cb:a1:84:00:c9:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:DF:54:A9:47:05:3F:3C:6F:6F:D8:7A:59:6F:E0:D1:4C:FA:46
            X509v3 Authority Key Identifier:
                keyid:B2:F5:72:F5:66:6D:2B:0B:B6:6E:3E:C8:28:AC:43:A2:07:CB:00:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2F572F5666D2B0BB66E3EC828AC43A207CB001A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5c285291-ce92-4144-9c18-9e8c191ddec6/0/3130332e3137342e3138312e302f32342d3234203d3e20313437313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:49:65:0e:89:da:ce:9a:f8:6b:f9:21:40:30:2d:7e:87:9d:
         8c:73:25:36:e8:b5:a7:e0:b9:75:69:74:87:7e:c0:11:5a:6c:
         01:34:9d:1a:0b:e6:37:1d:6e:bc:95:d3:c7:1b:c0:ee:35:70:
         10:1b:6c:29:6f:f1:28:7a:62:a8:a7:69:5c:ee:e5:d8:ff:49:
         b3:97:1c:81:ff:b2:4f:d3:83:01:e9:f3:ed:3f:db:0d:f9:9d:
         28:28:45:33:9a:9c:7a:5c:55:f2:47:05:48:b8:c0:73:e2:e1:
         a8:c4:0f:e3:71:65:3b:a1:21:e2:48:40:df:d4:98:37:20:51:
         4a:39:f1:ad:01:6e:63:b7:a2:20:ef:83:bf:00:be:b7:62:c7:
         c4:dd:cb:9d:f5:5e:fa:84:14:d6:16:bc:d7:81:fe:d8:da:d3:
         be:b5:48:28:01:8f:fa:65:54:ac:a9:63:aa:3f:c1:d4:f9:f5:
         12:c4:4b:49:69:b7:77:0e:78:33:00:cc:2d:72:c7:67:91:38:
         43:5a:a6:bb:2c:3b:ed:7a:3d:72:9d:ac:4e:f1:d9:8e:a4:87:
         04:22:ce:96:23:6c:dd:c1:16:a9:9e:99:93:50:d7:6f:e5:71:
         90:75:e9:38:49:d2:c6:c5:86:41:69:30:14:75:04:13:3a:f9:
         b8:f2:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:05 2026 by rpki-client