Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
File:                     3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (raw, json)
Hash identifier:          92ZQT4r/M03zq1NAav7PDjyanG9ZRWjnE3cnJHsI4AU=
Subject key identifier:   D5:1D:B8:86:11:9F:CF:23:C3:7C:0B:54:8C:20:DC:0A:ED:30:73:2A
Certificate issuer:       /CN=FC1A394AF4972652D1A91AA14711525172E42585
Certificate serial:       44EA8958B1F65EF4996930F4CF54B27C753A1BA3
Authority key identifier: FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
Signing time:             Sun 03 May 2026 02:41:13 +0000
ROA not before:           Sun 03 May 2026 02:36:13 +0000
ROA not after:            Sun 02 May 2027 02:41:13 +0000
asID:                     147105
IP address blocks:        103.174.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl
                          rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ea:89:58:b1:f6:5e:f4:99:69:30:f4:cf:54:b2:7c:75:3a:1b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC1A394AF4972652D1A91AA14711525172E42585
        Validity
            Not Before: May  3 02:36:13 2026 GMT
            Not After : May  2 02:41:13 2027 GMT
        Subject: CN=D51DB886119FCF23C37C0B548C20DC0AED30732A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:82:7e:d3:68:fe:2c:69:28:d8:c4:03:f5:fe:
                    57:eb:ab:76:72:42:b9:00:19:1d:5c:9d:eb:54:24:
                    40:56:89:fb:2d:21:7d:71:8e:ce:7d:00:de:56:e6:
                    d2:d7:82:a1:77:7c:27:87:93:6a:58:3f:70:9d:4e:
                    dd:a2:fa:64:69:7d:22:31:4b:50:20:7e:b1:45:55:
                    ab:d1:e1:b7:83:c3:37:12:1f:d5:8a:a2:1d:ff:b7:
                    75:8e:42:a1:3b:48:84:40:cc:62:bd:3b:ee:81:3b:
                    b6:4e:21:b7:eb:d3:c5:64:9d:44:89:57:10:15:25:
                    b6:4e:9c:a7:a9:3d:78:fe:1c:13:53:e0:dd:46:91:
                    b9:10:60:0b:64:46:6a:c5:67:e7:c4:48:84:3f:e6:
                    b4:37:e2:1b:a0:bc:8b:e7:cb:aa:53:6f:5a:e8:fe:
                    c2:ac:26:2d:4f:96:5b:ce:29:ff:40:eb:69:ac:cd:
                    51:f1:5a:cc:a9:99:05:79:0e:1c:e7:3d:4b:41:cd:
                    be:43:b5:6f:44:d1:d2:61:91:89:2b:ad:ae:69:cb:
                    59:46:f3:6e:0c:f4:9d:fb:93:f0:68:ca:0b:e1:96:
                    d1:28:65:cd:33:02:98:43:26:45:94:58:b0:7b:3a:
                    2c:29:61:1b:2a:51:08:8d:d3:fb:2d:1c:a1:fc:9b:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1D:B8:86:11:9F:CF:23:C3:7C:0B:54:8C:20:DC:0A:ED:30:73:2A
            X509v3 Authority Key Identifier:
                keyid:FC:1A:39:4A:F4:97:26:52:D1:A9:1A:A1:47:11:52:51:72:E4:25:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/FC1A394AF4972652D1A91AA14711525172E42585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC1A394AF4972652D1A91AA14711525172E42585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:a4:5d:ae:b3:fe:29:83:52:64:0c:ae:07:80:b4:cd:7c:
         87:4c:24:7f:48:ab:2e:bf:54:f2:ba:2e:f0:85:21:a6:77:e2:
         06:f4:ed:61:85:b8:d0:55:6b:12:57:6a:d7:3a:67:50:07:3c:
         8a:69:f8:81:61:b1:b7:c6:89:a0:ca:54:99:86:51:06:e5:0e:
         5b:2c:8e:a8:d3:a0:73:f6:5f:65:7a:da:1c:85:09:9a:b0:fc:
         ff:2a:0b:82:cb:98:b8:73:63:f0:e3:31:70:12:7c:86:e0:21:
         3d:d9:32:50:6a:e9:79:63:d2:3f:df:93:3a:7d:0d:80:0a:52:
         e1:6d:dd:e0:f3:ef:b2:89:ce:a8:7f:b2:b6:07:4c:45:fa:a1:
         35:97:5e:3e:e8:81:d9:4e:b5:3a:05:a4:a4:c3:2c:80:de:16:
         01:3c:9f:5b:72:92:72:79:86:3c:9a:5e:96:cb:a9:dd:ba:a9:
         b7:09:f7:22:c9:3f:fe:a0:27:43:7d:05:4e:93:22:86:08:ce:
         88:84:0b:98:3a:3d:42:c5:ec:a1:26:2e:1f:63:37:55:41:f8:
         08:d4:e5:41:21:99:0c:da:cf:66:37:a9:1d:55:94:9a:9d:ec:
         ba:cb:7d:97:a6:b4:dd:8c:d2:6c:77:f4:a5:1f:8d:b2:95:0a:
         f8:27:96:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:37 2026 by rpki-client