Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa
File:                     3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa (raw, json)
Hash identifier:          dkiEurQUbycXFg21P8maECsCJ68qwlxLVBuvs8trkqU=
Subject key identifier:   86:78:9D:6D:23:A8:7E:7D:8E:BC:AC:2D:6E:D1:93:B4:93:3B:BA:D9
Certificate issuer:       /CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE
Certificate serial:       0577FB13296574AD17E1E6836D0F6C8A2C92CC37
Authority key identifier: A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa
Signing time:             Sun 03 May 2026 02:37:58 +0000
ROA not before:           Sun 03 May 2026 02:32:58 +0000
ROA not after:            Sun 02 May 2027 02:37:58 +0000
asID:                     134635
IP address blocks:        103.84.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl
                          rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:77:fb:13:29:65:74:ad:17:e1:e6:83:6d:0f:6c:8a:2c:92:cc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7889B33867ED2BDF15C39F722D20BAF76B420EE
        Validity
            Not Before: May  3 02:32:58 2026 GMT
            Not After : May  2 02:37:58 2027 GMT
        Subject: CN=86789D6D23A87E7D8EBCAC2D6ED193B4933BBAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:e5:42:7b:09:21:49:08:8a:40:3b:1a:06:
                    74:a7:ac:40:a7:70:6f:03:19:72:67:f7:cd:d6:71:
                    f1:55:8b:6a:4d:d3:d3:0a:74:a3:1c:87:7b:e8:42:
                    9b:d6:be:57:53:46:4b:6c:7c:7a:2b:57:d9:07:1c:
                    f8:3f:44:d6:89:1f:62:67:1a:9c:dd:88:8f:7c:5d:
                    7c:6a:80:c8:f7:fc:af:06:64:28:7c:5a:02:22:34:
                    1a:aa:88:b6:e4:7e:96:0c:94:0c:b1:28:66:db:a8:
                    78:2b:88:6d:ea:99:ba:d9:e9:e2:5b:3e:13:c3:ad:
                    d5:56:54:5c:20:b1:14:5e:02:97:26:6c:2e:ac:9f:
                    14:a8:24:df:26:f6:09:7c:5e:82:ce:7f:4f:64:61:
                    8f:01:83:ca:7a:c3:5c:d6:1d:5d:7c:08:50:a6:49:
                    dc:a2:23:01:6e:5c:9d:4e:62:71:d2:39:b1:04:b8:
                    26:9f:0b:4f:75:d6:51:f9:3e:2e:51:33:2d:39:e8:
                    4e:1a:45:b0:6d:50:95:0d:b1:9f:87:e6:1f:8d:93:
                    8f:ce:41:db:57:34:d8:e4:c0:f8:72:28:2e:6c:30:
                    97:eb:6b:d9:1f:c5:0b:b1:c0:b9:89:7b:b9:21:11:
                    53:4f:d8:18:2b:7f:d5:f6:6c:2e:4c:83:c4:29:b6:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:78:9D:6D:23:A8:7E:7D:8E:BC:AC:2D:6E:D1:93:B4:93:3B:BA:D9
            X509v3 Authority Key Identifier:
                keyid:A7:88:9B:33:86:7E:D2:BD:F1:5C:39:F7:22:D2:0B:AF:76:B4:20:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/A7889B33867ED2BDF15C39F722D20BAF76B420EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A7889B33867ED2BDF15C39F722D20BAF76B420EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/3130332e38342e3131372e302f32342d3234203d3e20313334363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:56:d7:c4:4f:8d:6f:0a:42:83:05:bd:26:be:51:5c:91:4f:
         d6:14:98:28:32:0e:01:15:ba:17:17:3d:67:6f:fc:3d:46:8b:
         56:e9:b7:c9:5a:de:10:f9:6c:bf:58:72:f4:07:03:5b:a6:6e:
         42:4d:68:b9:a2:5a:b6:87:5d:44:b8:fb:e6:23:9e:04:ca:7d:
         90:e4:65:f6:53:9b:c6:c5:3b:1c:61:85:cb:d9:1b:2a:58:3e:
         49:46:bf:d3:e1:14:a2:bf:c8:c9:f0:2f:ba:5a:d6:98:90:ca:
         e9:9e:da:75:13:8a:a3:c1:0e:21:31:c1:dc:c2:79:65:9a:1f:
         32:ff:f7:11:d6:6c:ad:b5:26:8d:12:4d:e2:cd:ab:44:e8:b2:
         29:9e:2c:9f:c8:59:b6:98:7c:a7:4f:c3:c7:19:84:0c:6c:80:
         ab:a3:7e:59:1c:f2:d6:0f:c5:f5:2a:24:cc:7b:7d:1f:81:90:
         6d:11:f9:99:ff:d9:05:53:83:8d:13:13:e5:01:d4:28:5b:c7:
         98:bf:4b:8f:a3:c1:cc:9d:1f:53:7b:79:72:d3:e7:39:04:f7:
         fc:78:e2:a2:8c:44:57:83:2f:07:48:4f:c4:2d:36:70:57:29:
         5b:4a:e2:72:6b:09:64:c9:4e:48:2e:01:ee:c1:02:80:16:a7:
         49:cf:c5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:46 2026 by rpki-client