Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37362e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          KgofiVV7byfxlL6Vf1XpG4C/w7NT33LktkrgEON9NAk=
Subject key identifier:   5C:3A:AE:75:89:03:8D:C5:7B:B1:F0:C4:10:58:4E:37:FE:D7:D9:CE
Certificate issuer:       /CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
Certificate serial:       178073C5883C61E3B831C1C9B31349B3FB9DE23F
Authority key identifier: 62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 03 May 2026 02:38:56 +0000
ROA not before:           Sun 03 May 2026 02:33:56 +0000
ROA not after:            Sun 02 May 2027 02:38:56 +0000
asID:                     135474
IP address blocks:        103.73.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl
                          rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:80:73:c5:88:3c:61:e3:b8:31:c1:c9:b3:13:49:b3:fb:9d:e2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
        Validity
            Not Before: May  3 02:33:56 2026 GMT
            Not After : May  2 02:38:56 2027 GMT
        Subject: CN=5C3AAE7589038DC57BB1F0C410584E37FED7D9CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:8d:3a:21:22:31:14:08:57:ac:86:1f:60:
                    d1:05:f1:8e:6e:d2:e5:4f:7a:89:8f:8d:0d:c3:1b:
                    06:c5:4f:39:df:4a:0b:65:08:9d:94:d6:43:82:f4:
                    cd:6f:0d:8f:3a:cb:64:64:da:78:be:9e:0f:cb:47:
                    57:18:33:13:8c:29:c1:e7:53:2b:59:09:28:7e:f9:
                    64:bd:79:50:27:d7:da:97:eb:68:8e:00:eb:15:2c:
                    99:6d:d4:9a:c8:35:ce:36:17:de:a3:4a:5d:5a:1b:
                    a3:36:7e:2b:04:e3:29:04:f9:3c:39:f2:15:62:45:
                    e3:a6:f6:a9:cc:dd:29:5f:40:b0:2a:7f:b4:9e:41:
                    1e:67:ed:d8:41:cc:2f:93:75:52:cf:0e:86:56:d5:
                    cc:f5:0d:63:f0:db:e1:76:17:1e:6c:6f:bb:d1:d3:
                    ab:54:f7:e9:0c:4b:ef:1c:fc:61:ef:d1:70:a5:41:
                    a0:d4:20:12:40:e7:50:a6:db:7f:a0:13:7e:8f:5c:
                    50:ee:b1:86:05:4b:9e:f4:15:9d:9c:37:44:34:b0:
                    49:06:2b:6f:18:db:59:a1:1c:3f:6d:24:19:c1:45:
                    30:59:84:b4:0a:a3:69:8c:f1:fe:f1:f5:f9:0f:5a:
                    10:fb:24:a2:0b:89:73:54:79:98:90:83:b5:41:d1:
                    3d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:AE:75:89:03:8D:C5:7B:B1:F0:C4:10:58:4E:37:FE:D7:D9:CE
            X509v3 Authority Key Identifier:
                keyid:62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37362e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:99:06:79:94:66:a0:6d:20:a4:46:41:d5:d3:b8:1e:5a:5f:
         59:6c:a7:c4:3a:3d:f6:13:a1:3f:43:b3:c1:4a:95:a9:1c:38:
         44:3d:95:e3:a4:44:09:03:0e:c9:89:63:9a:fb:96:99:bd:1c:
         3b:60:a7:31:fd:94:78:9b:32:1e:c8:91:e2:66:1c:74:8f:db:
         2f:ed:5f:fa:83:f8:58:cd:24:d5:12:f0:a2:c4:df:e9:e4:a7:
         94:56:21:07:3a:7b:18:23:a5:7d:d3:07:3d:0f:6c:eb:ca:70:
         0f:5c:1e:ae:55:5a:e2:04:5a:bc:e4:8d:e1:b6:9f:cc:cc:db:
         50:e3:ab:07:06:58:96:82:29:68:54:3d:4b:b1:30:4b:a5:a6:
         15:a5:8e:b4:ee:1f:bc:0f:56:4b:62:7c:a9:49:2c:cf:06:4d:
         d0:47:49:b0:5b:24:6f:1e:dc:3e:13:57:c3:82:4e:bd:0c:80:
         89:e7:c2:38:18:f6:90:01:bb:24:13:78:d5:17:14:31:3d:bb:
         5e:2f:9f:78:ac:85:5a:e2:bf:f7:2c:78:f4:70:f9:e7:4e:24:
         46:c9:aa:b0:6b:c1:d8:c7:30:bd:ac:fe:cb:f4:64:93:56:c4:
         f8:94:94:dd:89:47:53:8e:a5:9e:73:ff:3d:9c:f4:1a:14:06:
         b1:07:b1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:29 2026 by rpki-client