Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
File:                     3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (raw, json)
Hash identifier:          Ud8zXVkaxOANWSpFsC422ZV+3rT9KJeF9ej6YaNldzs=
Subject key identifier:   DD:7C:B4:80:40:5E:C8:FC:9E:AC:4A:5A:83:E5:FD:B1:58:F2:07:9F
Certificate issuer:       /CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2
Certificate serial:       2156C09BF72472FB09F56A6AB353BEC00279A29C
Authority key identifier: 4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa
Signing time:             Sun 03 May 2026 02:43:25 +0000
ROA not before:           Sun 03 May 2026 02:38:25 +0000
ROA not after:            Sun 02 May 2027 02:43:25 +0000
asID:                     150923
IP address blocks:        103.97.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl
                          rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:56:c0:9b:f7:24:72:fb:09:f5:6a:6a:b3:53:be:c0:02:79:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D715DE6E25B74B3A677BAED7CE81E31190071F2
        Validity
            Not Before: May  3 02:38:25 2026 GMT
            Not After : May  2 02:43:25 2027 GMT
        Subject: CN=DD7CB480405EC8FC9EAC4A5A83E5FDB158F2079F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:8d:37:62:43:2d:3b:e4:f3:b8:ef:cc:31:
                    00:43:22:09:c0:85:c0:fa:da:d2:b6:97:3a:bd:64:
                    58:10:1c:01:54:c4:90:c0:9d:d6:41:a3:1c:32:f9:
                    d6:e9:26:e0:53:ac:e9:7a:34:cc:59:bf:40:44:5e:
                    c0:c2:83:16:19:c9:3c:91:2b:f6:3e:d8:3d:86:57:
                    e0:67:ed:33:45:b2:a6:a4:6d:8d:0f:16:c6:f8:14:
                    04:ed:f5:63:cf:9e:75:e5:d4:2b:d1:c1:ad:12:c1:
                    88:6a:d4:6d:df:df:21:bb:cd:ef:71:84:6d:ea:8f:
                    da:59:01:29:01:5f:15:e0:8d:a4:07:02:0d:9e:4b:
                    b0:6f:3b:c7:68:65:79:a2:a6:10:2d:a5:b0:d2:e2:
                    e4:e5:78:b7:7e:85:bf:36:77:1d:fb:6b:dd:aa:e5:
                    ac:c0:36:ba:05:81:06:6b:0e:b9:80:c5:cc:ec:9f:
                    ae:9a:0c:00:dd:1d:f9:26:9c:88:56:be:8b:67:b3:
                    d4:92:de:cf:c9:9b:a6:e1:15:95:bd:71:41:c9:b5:
                    22:7b:9a:fe:2e:11:cb:f5:1b:48:b4:19:1b:9d:5b:
                    e1:91:5e:e1:fd:39:e6:70:50:1a:b5:92:a8:24:f0:
                    ef:29:b9:bd:fb:48:b9:a5:de:62:01:e7:ed:6f:4c:
                    cb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7C:B4:80:40:5E:C8:FC:9E:AC:4A:5A:83:E5:FD:B1:58:F2:07:9F
            X509v3 Authority Key Identifier:
                keyid:4D:71:5D:E6:E2:5B:74:B3:A6:77:BA:ED:7C:E8:1E:31:19:00:71:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/4D715DE6E25B74B3A677BAED7CE81E31190071F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D715DE6E25B74B3A677BAED7CE81E31190071F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:49:c4:16:5c:5c:29:f1:c2:d9:ef:5b:8f:3e:42:47:7c:
         4a:0d:4d:20:b5:3f:a8:b4:1f:f5:a0:fa:03:6b:42:a3:5f:e3:
         ee:c3:92:a8:95:ee:cf:1d:64:2f:f6:ad:1a:ce:cf:9b:c6:7f:
         9f:48:03:d0:0b:22:f1:db:61:b3:9f:dc:f8:91:cb:39:1a:dd:
         57:13:94:ce:6d:3f:9f:2c:f3:3e:08:d5:a3:af:64:0d:e9:80:
         41:0e:24:17:b0:4b:e7:c8:a4:47:38:51:e0:dc:ec:36:eb:7b:
         b2:f5:64:80:bc:0f:8d:6b:7f:af:7b:5a:a0:f9:71:9d:88:e3:
         f5:38:4d:99:57:7c:e2:ff:b7:51:60:5e:58:b3:70:af:a7:25:
         20:a0:62:a2:62:9c:cf:15:4f:54:b2:38:b8:98:14:e2:c0:85:
         a8:5a:1c:bb:54:81:48:27:d6:81:f7:8c:11:55:b9:92:fb:3d:
         7f:36:63:d2:db:d3:bb:1a:ce:59:03:dc:dd:a3:2b:60:d7:69:
         ca:a9:d6:65:d7:ab:6c:70:f6:74:b1:29:fe:f0:7c:3f:21:cc:
         ef:14:5e:24:5f:62:c1:f3:b0:8a:72:ac:f4:80:ac:2c:26:ab:
         f9:5e:d3:d9:50:7a:8d:25:eb:78:68:d0:09:d0:21:6d:a8:a4:
         ba:4c:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:47 2026 by rpki-client