Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa
File:                     3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa (raw, json)
Hash identifier:          57w/Luhe+7f6hpVSBQNyONJUFdWOrDcV0vHq4jpkSew=
Subject key identifier:   49:D1:24:44:63:90:E6:51:6B:59:49:78:FA:B2:64:5E:7A:71:CF:B0
Certificate issuer:       /CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5
Certificate serial:       3C2601D9544A4969215110262D60EF1AEBEBD5DF
Authority key identifier: B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa
Signing time:             Sun 03 May 2026 02:38:11 +0000
ROA not before:           Sun 03 May 2026 02:33:11 +0000
ROA not after:            Sun 02 May 2027 02:38:11 +0000
asID:                     147133
IP address blocks:        103.176.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl
                          rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:06:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:26:01:d9:54:4a:49:69:21:51:10:26:2d:60:ef:1a:eb:eb:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5
        Validity
            Not Before: May  3 02:33:11 2026 GMT
            Not After : May  2 02:38:11 2027 GMT
        Subject: CN=49D124446390E6516B594978FAB2645E7A71CFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:79:15:fe:e9:ba:e7:9e:81:7d:5c:a5:ec:
                    73:85:d4:6c:97:d6:21:f5:ed:85:ca:1f:e9:a7:ba:
                    1c:44:f4:25:d8:02:7e:01:32:12:98:15:37:97:d2:
                    8d:ae:1a:6b:67:c1:3b:a5:a5:01:e2:b2:98:56:72:
                    f4:eb:d1:9a:1f:3d:91:6a:da:eb:76:29:9f:ba:30:
                    48:78:13:81:6a:f9:e3:c4:08:12:45:bd:3f:db:f9:
                    c9:db:78:a9:10:15:9e:77:ee:3d:a9:ce:48:8f:64:
                    ec:a3:47:f7:51:69:57:79:90:c3:fe:3e:47:9a:2f:
                    52:3c:9b:3f:cc:ee:9b:19:e8:3e:d4:ab:6c:40:21:
                    74:66:7b:04:09:b4:71:47:57:f6:a1:96:7c:74:51:
                    af:2a:a0:43:99:f3:e8:88:ee:91:ea:cd:13:88:65:
                    91:f1:ca:87:47:97:93:0a:9d:f0:ce:d3:2c:3a:35:
                    b0:00:18:86:28:c3:ae:55:65:35:f5:a2:1b:6c:bf:
                    8b:8b:21:63:a1:c1:45:43:de:df:2e:a5:e5:ad:07:
                    5b:78:5d:20:9d:12:51:c8:8f:7a:2a:94:c7:41:61:
                    a6:5c:03:03:d1:c7:ab:33:2c:95:b0:ea:8a:5d:b6:
                    82:a3:de:dd:bb:c7:39:62:14:13:55:5f:43:be:7d:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D1:24:44:63:90:E6:51:6B:59:49:78:FA:B2:64:5E:7A:71:CF:B0
            X509v3 Authority Key Identifier:
                keyid:B1:9F:4F:9B:34:D9:08:8B:8C:F2:AC:E3:B0:A5:6A:7E:DF:52:3A:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B19F4F9B34D9088B8CF2ACE3B0A56A7EDF523AB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/3130332e3137362e3138302e302f32342d3234203d3e20313437313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:97:50:c9:0a:11:ee:40:f6:6e:55:51:45:94:f9:75:1f:59:
         fc:7d:a3:e5:8a:56:8c:c2:c8:ff:11:20:62:a8:ed:80:cd:79:
         5c:48:f3:a8:b2:a5:b2:5b:e2:b1:cc:d3:56:29:c5:31:bc:11:
         41:33:35:40:1d:a9:f9:2a:61:83:2b:fd:3a:75:c9:d6:ee:50:
         c6:f3:e2:53:0a:75:5c:8a:90:bc:5d:1b:69:de:21:34:88:2a:
         38:fd:f5:10:f9:bb:05:92:a9:15:ba:62:a9:6a:b8:bc:47:5e:
         1b:f2:52:eb:24:69:9b:c9:fe:3e:f1:6b:dd:b7:8c:9d:33:e2:
         98:9f:01:51:a8:f4:60:be:4a:19:ab:2b:2f:6f:0e:a6:53:8a:
         ab:7f:c0:ea:74:f5:96:f4:3b:22:24:66:13:54:40:11:ea:b1:
         4d:8c:e9:93:07:c0:df:ee:eb:2c:84:45:f6:07:10:5f:f2:09:
         85:0d:a6:4b:28:58:26:f1:aa:dc:d9:d6:3c:25:c7:39:08:da:
         8f:f1:2d:75:06:ea:07:94:de:61:c5:b5:3d:7e:b1:95:d8:d0:
         df:89:d6:7f:6b:9f:f3:af:d1:ec:63:5a:49:48:39:5a:99:e1:
         d6:98:e6:f8:28:0a:31:3e:a4:72:1c:7b:88:dd:38:62:9c:ce:
         cd:9f:86:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:12 2026 by rpki-client