Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
File:                     3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa (raw, json)
Hash identifier:          We8sRw23ra0s7ummEVmNto7+y6Pn15K3D/+wd4Omz9o=
Subject key identifier:   24:E4:75:F0:80:E9:80:9E:A0:10:C4:AC:B6:80:FC:2A:29:91:59:97
Certificate issuer:       /CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
Certificate serial:       57D5A5A4763A7A53E2D927FE31E3F62254CF7309
Authority key identifier: EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa
Signing time:             Sun 03 May 2026 02:42:37 +0000
ROA not before:           Sun 03 May 2026 02:37:37 +0000
ROA not after:            Sun 02 May 2027 02:42:37 +0000
asID:                     147100
IP address blocks:        103.174.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl
                          rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:25:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d5:a5:a4:76:3a:7a:53:e2:d9:27:fe:31:e3:f6:22:54:cf:73:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE046BFFB08A27729B8D486164C8C1E280C169E
        Validity
            Not Before: May  3 02:37:37 2026 GMT
            Not After : May  2 02:42:37 2027 GMT
        Subject: CN=24E475F080E9809EA010C4ACB680FC2A29915997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:b0:b6:e9:ab:18:2f:91:81:bf:44:89:f5:
                    d0:70:80:9a:19:d8:f1:25:1f:82:6e:86:03:7f:79:
                    f8:13:a3:20:85:23:a9:c6:1f:b1:f8:4e:e5:80:e8:
                    78:e9:f2:8b:76:db:1f:c6:ec:92:1a:1d:d5:32:21:
                    ba:14:67:50:d5:28:39:b9:ff:93:bf:67:47:1b:11:
                    7f:48:08:82:09:cb:8d:cc:a7:d5:d7:19:a9:a6:7b:
                    13:4c:01:40:08:6f:3e:64:a9:e9:ba:1f:6a:9a:b1:
                    dc:47:2a:76:75:a5:19:02:ce:1f:62:94:55:da:8f:
                    b1:b6:f9:c1:36:cf:aa:82:42:db:9e:c4:40:c0:66:
                    6b:f8:ce:da:b9:75:11:25:72:e2:d8:de:12:cb:1d:
                    fa:04:75:9c:82:bc:f1:26:da:94:37:49:26:dc:22:
                    57:8c:85:88:95:28:36:d9:bf:af:f0:0a:50:64:03:
                    bb:b7:58:3e:52:3e:84:dc:52:4c:93:11:98:eb:f8:
                    9d:0b:01:5b:66:25:9e:f2:8b:b5:38:4d:54:0a:22:
                    4a:31:0b:d0:5d:64:3c:34:95:d0:b6:13:0a:f1:5b:
                    ef:10:82:ab:bb:04:e3:e6:37:f8:66:6f:5d:89:c7:
                    39:b6:44:ca:66:3d:97:58:4b:09:20:f2:b6:e4:fd:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E4:75:F0:80:E9:80:9E:A0:10:C4:AC:B6:80:FC:2A:29:91:59:97
            X509v3 Authority Key Identifier:
                keyid:EA:E0:46:BF:FB:08:A2:77:29:B8:D4:86:16:4C:8C:1E:28:0C:16:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/EAE046BFFB08A27729B8D486164C8C1E280C169E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE046BFFB08A27729B8D486164C8C1E280C169E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/71090573-6ad3-4e63-8af4-8a2d582aa0cd/0/3130332e3137342e3131362e302f32342d3234203d3e20313437313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:86:5c:c5:8c:25:da:f1:4c:c7:76:a6:df:66:e5:d6:55:94:
         12:4e:2e:78:e5:8d:92:be:cb:23:21:94:1c:60:15:48:96:2a:
         81:11:ee:41:c0:5d:37:de:ea:40:25:75:de:88:52:a3:fb:bc:
         b9:54:4b:69:b1:ff:9c:ef:f2:24:ef:82:f6:61:ff:cd:e0:ad:
         3e:a8:e1:ec:ef:b6:ed:08:d9:1f:cf:e8:d1:90:44:cf:ac:7f:
         7f:4b:e6:00:0f:a5:7a:da:f8:23:d1:67:9a:9a:2f:9e:05:f0:
         78:39:7a:09:81:d1:2a:ab:e1:e9:b2:e3:de:f6:49:24:e7:f7:
         4c:cb:9a:17:eb:fd:36:1d:ed:f9:8c:62:f8:6f:f0:cc:27:76:
         13:99:fc:c0:9a:71:84:8a:ce:94:fc:3e:05:a9:e9:7b:40:81:
         98:fc:2b:2d:2b:fd:87:ba:ea:85:d0:d3:be:0b:09:32:73:5d:
         ef:8f:33:0c:62:4f:e1:37:f8:9b:04:54:2b:a4:be:19:c1:8d:
         c3:f2:c9:ee:81:ab:30:9a:d3:76:59:7e:58:36:44:80:3a:25:
         ac:27:6a:f4:23:d5:a3:fd:00:9f:90:ec:aa:08:a6:5c:e3:5b:
         fa:38:8e:ab:e3:37:12:c7:06:bd:e0:91:7c:e3:bd:78:1b:0b:
         4f:0a:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:25 2026 by rpki-client