Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa
File:                     3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (raw, json)
Hash identifier:          vIUCd1IemIKCQ+NzE6xQfnpmhwQEajDU6BevZYDhd68=
Subject key identifier:   8E:34:03:0B:17:9A:64:98:05:E1:E6:76:A4:0F:9C:82:31:23:49:18
Certificate issuer:       /CN=F440C463790421765C0B198FBF82B80F70529E23
Certificate serial:       1DD131F9E11999F2999AC82851CAFFE5062C4D84
Authority key identifier: F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa
Signing time:             Sun 03 May 2026 02:40:48 +0000
ROA not before:           Sun 03 May 2026 02:35:48 +0000
ROA not after:            Sun 02 May 2027 02:40:48 +0000
asID:                     147154
IP address blocks:        103.176.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl
                          rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d1:31:f9:e1:19:99:f2:99:9a:c8:28:51:ca:ff:e5:06:2c:4d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F440C463790421765C0B198FBF82B80F70529E23
        Validity
            Not Before: May  3 02:35:48 2026 GMT
            Not After : May  2 02:40:48 2027 GMT
        Subject: CN=8E34030B179A649805E1E676A40F9C8231234918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:52:46:e7:e6:4f:fe:6e:31:7a:5a:eb:d7:0c:
                    58:49:d0:e2:f1:5b:1e:7d:c5:3a:da:06:0e:4b:83:
                    90:d0:3e:56:84:56:48:21:59:e5:d5:45:d7:1e:fd:
                    77:4a:0f:ae:03:d7:ef:e4:a5:e1:eb:b6:84:0e:2a:
                    06:d4:05:0d:ff:25:04:63:67:29:de:48:ba:c2:01:
                    03:10:95:89:91:7b:b4:de:58:9e:fe:5c:6c:fd:53:
                    28:8b:ef:15:c5:eb:6b:11:6a:90:7f:7e:0c:7b:b6:
                    63:1a:3e:97:8a:80:14:e3:85:a3:0d:70:0c:33:1b:
                    d9:30:fe:fb:e1:f7:64:5c:5b:2d:71:68:0e:27:7d:
                    a1:06:bb:26:b8:38:60:17:3d:bb:24:e0:01:15:4c:
                    30:81:e1:6c:b1:15:f1:4f:c9:0d:1d:a4:b7:bd:c4:
                    f7:4f:e6:63:ce:89:80:4a:71:6f:f2:ad:cc:97:e0:
                    c0:9a:8b:94:ec:76:c0:96:46:66:6a:2e:0b:70:9d:
                    50:52:93:64:39:b7:c5:a4:cb:7b:e5:ee:b6:d4:1e:
                    3e:9c:a7:10:ac:81:82:60:0f:81:f9:02:2b:e3:25:
                    53:7f:38:e3:e9:d9:30:12:11:86:48:0d:d4:f7:aa:
                    aa:5d:85:d6:0b:0b:a5:7c:65:5a:19:f1:49:68:c1:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:03:0B:17:9A:64:98:05:E1:E6:76:A4:0F:9C:82:31:23:49:18
            X509v3 Authority Key Identifier:
                keyid:F4:40:C4:63:79:04:21:76:5C:0B:19:8F:BF:82:B8:0F:70:52:9E:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/F440C463790421765C0B198FBF82B80F70529E23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F440C463790421765C0B198FBF82B80F70529E23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:bf:97:e9:a1:d5:92:55:35:0e:b0:18:f7:32:d2:5f:af:
         e2:0f:d0:f9:92:9a:46:02:94:58:16:37:42:07:a8:7c:db:c7:
         dd:f3:e8:ad:8c:42:b5:9d:fd:72:34:5c:4e:bb:4a:52:28:3b:
         e2:48:f0:a0:37:ad:19:e3:c2:1e:85:b6:77:fd:f2:36:13:81:
         35:e7:48:ac:dc:64:a0:79:c3:12:cf:d4:38:fb:c1:64:34:3a:
         e7:ce:42:cf:39:73:59:93:ff:8c:20:bd:29:5d:4e:45:ce:59:
         54:a6:b6:51:48:fd:ed:d7:26:17:09:f9:14:27:c8:90:90:f4:
         2f:43:70:6f:65:93:35:f3:6e:e7:9b:a1:39:83:f8:be:2f:d6:
         5d:f1:11:bf:d2:71:55:2b:ae:91:05:d1:d0:9e:fa:55:5d:5c:
         10:47:8a:04:da:5a:34:02:7d:c4:77:d8:e4:89:f5:98:38:26:
         c5:fd:bd:fb:49:6e:57:bc:a7:7b:0c:5d:6a:0b:9a:61:37:3b:
         59:c7:2f:9b:9f:f6:82:0e:2a:5d:db:bd:32:a1:d9:3e:dc:d4:
         67:69:64:5e:89:8e:2c:22:86:95:4b:af:0d:00:02:dd:35:08:
         44:bf:88:db:ff:ba:7a:3f:ad:29:8d:36:b5:a4:bb:8a:1d:1c:
         10:a6:8c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:17 2026 by rpki-client