Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37372e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37372e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          ZKwRXTBUvSlAaz3jwCkugufGLnLAIl1YngLs+w7+/4Q=
Subject key identifier:   18:B4:83:D0:43:C9:9E:C0:21:FE:48:C3:DB:D5:99:79:88:CA:D7:AC
Certificate issuer:       /CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
Certificate serial:       515D5F0F34A95536813812EE362A0179FE2B954C
Authority key identifier: 62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37372e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 03 May 2026 02:38:56 +0000
ROA not before:           Sun 03 May 2026 02:33:56 +0000
ROA not after:            Sun 02 May 2027 02:38:56 +0000
asID:                     135474
IP address blocks:        103.73.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl
                          rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5d:5f:0f:34:a9:55:36:81:38:12:ee:36:2a:01:79:fe:2b:95:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
        Validity
            Not Before: May  3 02:33:56 2026 GMT
            Not After : May  2 02:38:56 2027 GMT
        Subject: CN=18B483D043C99EC021FE48C3DBD5997988CAD7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:e3:63:43:d2:6c:c2:8a:26:1d:cc:8a:eb:
                    c6:00:cd:79:25:e9:9e:5c:82:36:f4:e9:9f:68:32:
                    58:fe:06:15:48:81:69:e9:30:92:06:05:09:70:81:
                    23:8f:f0:aa:49:fb:85:af:a3:f0:18:72:65:83:5a:
                    d9:20:84:c0:a0:59:4e:25:9f:88:07:75:a1:25:6c:
                    b4:2f:05:ad:99:30:e0:24:32:ce:4e:68:8b:86:ee:
                    b7:6a:f5:c2:4d:4b:93:b9:8b:f2:6c:24:0b:69:52:
                    c8:b9:80:c2:d0:b1:59:7a:e0:6c:f7:f7:66:17:56:
                    cc:05:b8:76:69:52:c7:ea:cb:8e:31:1f:25:2a:53:
                    eb:9c:bf:44:b3:ff:e1:bf:f0:62:3f:bb:3f:42:30:
                    68:61:29:e2:b7:31:37:39:38:a2:d4:72:5f:fb:9b:
                    72:49:03:82:cd:1f:0e:9b:8e:45:6d:6a:e2:ae:bd:
                    3f:fd:65:51:f1:92:63:d4:f7:25:d2:42:df:2e:55:
                    af:0a:e1:66:c3:46:72:d7:01:4c:c2:fb:b8:e2:0d:
                    e4:bf:77:4b:76:d3:b9:01:3f:73:b7:cc:a1:f2:b6:
                    f4:c0:1b:f7:f6:dd:f0:50:4f:5b:fa:6c:8c:45:45:
                    aa:e8:95:07:3d:45:65:9c:67:dd:48:06:19:0b:56:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:83:D0:43:C9:9E:C0:21:FE:48:C3:DB:D5:99:79:88:CA:D7:AC
            X509v3 Authority Key Identifier:
                keyid:62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37372e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:43:62:1a:48:f5:6f:1c:72:3f:5e:d0:80:ac:7a:dd:5b:ef:
         a7:30:8d:06:64:64:8a:8c:05:fc:dc:5e:07:de:35:fd:e7:c6:
         ac:5a:ba:90:b8:1e:58:7d:a3:55:07:c7:34:f5:a0:bf:55:be:
         df:21:a1:42:9d:14:22:7f:13:76:b3:d4:19:8f:fa:8b:b7:f0:
         05:ad:d1:46:75:17:7f:c6:65:9e:8d:4b:6e:4b:cf:a8:3b:41:
         26:76:be:82:f3:05:8c:eb:91:70:84:3a:e0:cb:19:cd:6a:c2:
         a0:7f:be:3c:d0:fd:b4:4e:92:ab:ca:af:3a:cb:88:7e:31:ac:
         25:cf:7a:88:e9:3f:d8:49:8a:fc:a5:49:bd:f7:31:56:11:67:
         5f:39:26:d6:8f:cc:dc:55:43:d5:7d:b2:39:2d:38:57:2e:fc:
         71:6d:cb:e9:4e:ca:7f:d4:0d:0a:0b:55:98:c4:64:e5:48:8d:
         83:a8:67:a1:39:d0:da:18:a8:1a:7c:38:28:44:c7:b6:8d:89:
         52:1f:64:3f:03:c5:2f:41:a0:7e:05:1b:a4:02:6f:c0:19:ba:
         22:58:91:32:a7:41:01:00:85:71:10:4c:92:e3:cc:97:56:4d:
         d2:d3:67:34:22:c5:90:d3:7e:3a:04:01:1b:40:d2:53:3d:45:
         3a:9b:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:05 2026 by rpki-client