Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
File:                     3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (raw, json)
Hash identifier:          9nR8f+NKs+GCy2BCUqqfXP6eNr2a6TnGK4mv1oCv2Sk=
Subject key identifier:   BD:82:34:29:03:22:31:FA:1D:5E:D3:D5:A0:54:5F:AF:40:DF:6F:27
Certificate issuer:       /CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4
Certificate serial:       5552F57EE5595E50430F6C6075B9B60220CD8BF5
Authority key identifier: 23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa
Signing time:             Sun 03 May 2026 02:39:17 +0000
ROA not before:           Sun 03 May 2026 02:34:17 +0000
ROA not after:            Sun 02 May 2027 02:39:17 +0000
asID:                     147119
IP address blocks:        103.175.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl
                          rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:52:f5:7e:e5:59:5e:50:43:0f:6c:60:75:b9:b6:02:20:cd:8b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4
        Validity
            Not Before: May  3 02:34:17 2026 GMT
            Not After : May  2 02:39:17 2027 GMT
        Subject: CN=BD823429032231FA1D5ED3D5A0545FAF40DF6F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9d:98:e2:cd:49:56:f7:38:28:82:88:a3:26:
                    ab:d3:3e:42:c3:d3:62:d0:16:8d:79:5e:f1:68:ac:
                    27:b1:4b:84:55:db:8f:9d:77:5e:b7:fb:39:04:76:
                    e2:40:e3:e2:45:86:05:90:d8:9f:11:1d:65:4f:b7:
                    53:e4:b2:11:6a:49:13:c6:4b:78:7f:94:e2:de:56:
                    a6:cf:39:ec:52:30:20:b4:59:9f:d6:40:95:35:d1:
                    7a:4e:27:f4:62:cb:a1:57:d5:f5:2c:ea:d5:00:cf:
                    04:88:26:d8:4f:dd:90:ea:2e:44:66:5f:5c:51:57:
                    81:c6:b5:4d:99:c3:df:15:00:4a:09:8b:3c:0a:8e:
                    a3:a6:78:60:b1:9f:9a:bc:88:f4:f8:dd:d6:72:61:
                    01:da:f5:6f:11:e4:48:09:2c:93:bc:40:08:68:06:
                    7c:f3:ee:3a:ff:59:f6:95:37:16:25:3e:8a:e0:d8:
                    e4:93:36:cd:49:5b:92:99:1c:86:93:5f:79:3a:c9:
                    c0:02:7b:5a:24:dd:5b:d1:bd:28:63:8d:e0:00:0e:
                    fd:eb:bb:e4:e6:7f:e2:4f:aa:03:a9:35:57:d8:a1:
                    54:8c:81:0e:23:de:84:ad:12:fb:1d:6b:06:64:ae:
                    5a:4a:48:46:30:d5:9b:d9:28:8b:41:08:37:6e:90:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:82:34:29:03:22:31:FA:1D:5E:D3:D5:A0:54:5F:AF:40:DF:6F:27
            X509v3 Authority Key Identifier:
                keyid:23:6F:DF:FF:48:37:04:9A:03:57:4F:0A:3F:5B:0E:9B:6C:C8:E3:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/236FDFFF4837049A03574F0A3F5B0E9B6CC8E3A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:51:ac:af:42:c1:49:7a:a2:c7:a6:af:47:7c:91:71:94:a0:
         a4:80:b1:b1:5f:83:b3:65:b0:c0:65:76:eb:42:13:74:a6:6a:
         6f:1f:a9:d7:d1:24:34:81:fb:bc:91:c5:34:1f:73:f7:52:72:
         ad:af:54:ea:6b:8f:2b:2a:68:c4:c3:95:d4:75:91:90:12:9a:
         87:82:47:c9:ff:91:b5:2a:53:da:90:68:67:dd:04:21:65:d2:
         04:3a:77:e8:2a:eb:34:0a:c5:2b:67:65:f3:bd:ef:34:ae:e8:
         32:8f:70:d2:9d:3f:06:49:a6:11:40:d0:18:6c:ad:62:c5:bb:
         89:a7:9b:2e:e2:90:5e:26:cb:9a:d6:15:a5:bc:90:e0:06:ae:
         e2:c2:27:f7:34:e0:0f:59:71:2a:31:72:6e:90:b6:bd:d7:24:
         a2:53:f8:1c:8e:74:68:76:fa:f2:5e:63:9d:ab:24:cd:ac:b0:
         9e:be:46:b8:11:05:3c:71:dc:f7:ad:bd:45:46:81:b1:22:34:
         62:ad:6e:1f:70:cb:8f:f4:83:a0:cc:08:a6:b8:41:70:75:f6:
         68:a8:2d:2f:04:85:bb:6e:ed:ed:55:5a:d8:ce:d8:2e:16:f9:
         ab:d3:4b:4f:ad:6a:b9:40:b2:04:ec:03:9b:63:d3:6c:a0:f5:
         49:78:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:03 2026 by rpki-client