Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa
File:                     3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (raw, json)
Hash identifier:          g6lAbZqkaksDk1xdjsRVZipSwUOrqirOYAGeG6k+1X4=
Subject key identifier:   E2:79:D6:58:74:30:5E:1A:ED:5B:2A:DD:EB:5B:40:41:E7:A3:4F:4E
Certificate issuer:       /CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
Certificate serial:       202B8799B15E52AA0652FDCFC29C07DA80811E7D
Authority key identifier: 90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa
Signing time:             Sun 03 May 2026 02:37:56 +0000
ROA not before:           Sun 03 May 2026 02:32:56 +0000
ROA not after:            Sun 02 May 2027 02:37:56 +0000
asID:                     142401
IP address blocks:        103.172.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl
                          rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2b:87:99:b1:5e:52:aa:06:52:fd:cf:c2:9c:07:da:80:81:1e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365
        Validity
            Not Before: May  3 02:32:56 2026 GMT
            Not After : May  2 02:37:56 2027 GMT
        Subject: CN=E279D65874305E1AED5B2ADDEB5B4041E7A34F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:fc:f1:70:0c:53:bb:8c:fa:00:54:92:34:
                    f2:e6:07:ff:e6:f8:db:5b:e5:b3:23:7e:85:97:47:
                    8c:26:8c:a1:6b:0a:7d:5b:f8:8e:2c:28:9b:cd:af:
                    07:62:4f:79:41:5e:4c:d3:92:76:a8:42:18:02:65:
                    67:d6:18:a0:54:b4:b0:97:50:58:95:99:5b:27:d5:
                    b6:36:f5:c8:7e:08:26:7e:4c:dd:d9:94:88:e3:f6:
                    19:f0:09:61:f7:d7:57:0d:2c:67:d5:2d:0f:74:b3:
                    bb:7f:56:64:8e:04:c2:7a:eb:47:ec:59:1a:8e:98:
                    4f:ac:52:41:a9:77:c9:e7:eb:ef:43:37:99:34:ce:
                    47:9e:d9:98:f3:0c:84:63:d5:42:b1:9b:54:d8:4b:
                    15:d4:10:d4:56:73:52:ef:61:1a:c1:3e:32:71:9c:
                    bb:80:1f:ac:19:e1:fa:5c:8e:be:9a:0c:9e:f0:ce:
                    37:6c:d5:25:65:d9:c6:06:f7:47:e0:0c:2f:e8:25:
                    98:20:26:b9:f6:3b:67:f2:d0:cf:c6:b2:b3:67:d1:
                    88:70:fd:b8:9a:f3:11:69:0c:51:2e:c9:22:38:a0:
                    1e:27:93:da:1e:be:9d:49:f2:6a:dc:83:cb:63:f9:
                    5c:f2:ed:23:29:4d:49:6a:dd:3a:dc:e8:af:57:c9:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:D6:58:74:30:5E:1A:ED:5B:2A:DD:EB:5B:40:41:E7:A3:4F:4E
            X509v3 Authority Key Identifier:
                keyid:90:CC:72:09:CA:A8:A6:C7:FE:EC:21:9D:AE:49:7F:7A:EE:F4:33:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90CC7209CAA8A6C7FEEC219DAE497F7AEEF43365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:7e:c1:ad:5a:8c:2a:08:1e:a0:5d:11:16:e3:f2:fc:d4:40:
         29:fd:7c:cb:b6:b6:2e:00:54:b0:18:90:96:8d:9a:db:a2:4d:
         55:78:59:39:cc:3d:cc:3c:48:5e:7a:55:18:90:8f:bc:8f:cb:
         c9:82:fb:c2:e8:00:31:f2:ad:c5:2c:49:29:9a:bf:93:fc:b2:
         5f:bd:86:af:64:85:0b:db:56:c3:ef:b6:09:69:35:70:82:bf:
         81:28:a0:bb:a7:94:68:00:e9:02:e4:b1:4f:16:f8:a9:29:09:
         19:7c:a4:bf:27:0a:e2:30:1a:91:39:dd:34:eb:f8:30:c5:c9:
         2b:46:72:21:c8:2a:30:3a:81:6d:76:38:9e:89:a9:6f:43:d6:
         ce:eb:8b:8f:3e:08:f6:f0:20:8d:10:5c:d2:08:0d:fb:08:3c:
         86:a0:33:39:45:d9:7e:c6:3b:5a:84:d5:b0:c8:73:fd:b2:4d:
         4a:18:5c:1a:a6:f8:76:0a:d8:d0:5c:d8:2c:67:69:4c:f7:07:
         02:4a:07:7c:6c:4f:33:af:bd:6e:68:92:cb:f5:78:80:17:7e:
         db:1d:c6:bf:8c:20:9e:dc:1e:24:08:f3:7b:d0:cd:62:f6:8a:
         a7:eb:f3:df:55:05:0a:35:4f:bc:25:ba:06:f2:f2:25:fd:72:
         7b:62:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:54 2026 by rpki-client