Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa
File:                     3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa (raw, json)
Hash identifier:          rpGHy0jo68Uol/+mmOLB7REbf0gEZAKFJzwOTNprwy0=
Subject key identifier:   D7:F5:BD:E9:1B:32:25:0A:17:42:73:75:AD:42:9C:F4:64:8A:42:5C
Certificate issuer:       /CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F
Certificate serial:       3E36FA645EBF8903420C26754ECFBC2D5CCA260B
Authority key identifier: C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa
Signing time:             Sun 03 May 2026 02:44:01 +0000
ROA not before:           Sun 03 May 2026 02:39:01 +0000
ROA not after:            Sun 02 May 2027 02:44:01 +0000
asID:                     152017
IP address blocks:        103.255.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl
                          rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:fa:64:5e:bf:89:03:42:0c:26:75:4e:cf:bc:2d:5c:ca:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F
        Validity
            Not Before: May  3 02:39:01 2026 GMT
            Not After : May  2 02:44:01 2027 GMT
        Subject: CN=D7F5BDE91B32250A17427375AD429CF4648A425C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:93:98:54:11:6c:82:90:23:05:6a:4b:e3:
                    55:2c:88:a4:1f:db:b4:d8:df:2d:ed:d1:03:72:c0:
                    74:03:42:08:6e:97:d7:36:1a:83:a4:ae:eb:4f:13:
                    68:7e:da:53:cf:d6:0e:ab:2f:01:89:c1:81:0a:8a:
                    f9:82:0d:f1:7a:73:d0:f0:00:af:5e:5d:57:d4:aa:
                    e5:a0:a3:df:95:b8:80:be:ce:e8:ce:47:3d:a6:dc:
                    ab:c6:ee:c8:2d:f4:e4:75:e6:c7:56:fd:20:2e:cd:
                    14:d2:87:09:e7:9c:b7:1f:86:e1:a4:5f:6f:a4:6f:
                    16:1c:dd:66:6b:3a:f6:94:73:20:fc:5b:3a:a9:c5:
                    42:df:45:fa:22:3b:f5:06:00:b1:3e:2e:89:c0:5d:
                    20:b1:21:ba:6b:ca:67:f9:6d:69:0b:6c:e5:26:47:
                    08:8b:74:4d:1f:76:36:8d:7c:f4:1e:93:ad:cb:85:
                    fe:cf:31:53:87:00:03:92:1a:bd:33:de:df:93:e4:
                    ad:42:b9:19:66:71:de:b7:f8:fd:c6:76:42:65:5d:
                    2b:dd:cd:b3:6e:22:7e:3d:64:b8:37:54:ef:57:91:
                    95:3a:e0:79:fb:0f:b1:b9:f7:46:70:17:c9:2f:17:
                    5a:54:10:d9:d0:cb:1b:50:9b:95:49:80:ea:32:e2:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:BD:E9:1B:32:25:0A:17:42:73:75:AD:42:9C:F4:64:8A:42:5C
            X509v3 Authority Key Identifier:
                keyid:C7:87:E8:C7:96:2B:2E:2C:DD:5E:08:D0:7B:3B:74:FA:30:2B:A3:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C787E8C7962B2E2CDD5E08D07B3B74FA302BA32F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77742516-b459-4506-b4de-f69e193d5cde/0/3130332e3235352e3136322e302f32342d3234203d3e20313532303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:21:4a:e6:8a:68:65:dc:24:be:fa:d7:11:f9:bc:09:b6:fc:
         48:12:96:16:af:b6:fa:4d:fd:7d:bd:8a:1a:43:7e:dc:60:d1:
         8a:93:d3:94:9f:97:72:2c:7d:52:33:be:23:83:13:da:cf:67:
         e6:18:c9:f4:0a:c6:c9:3b:0a:79:3d:78:da:45:64:c3:b2:1f:
         ae:fe:90:1f:1d:ea:b2:80:c0:59:08:f5:0e:2d:3a:20:bd:5e:
         fa:00:cd:1f:60:f8:de:f8:d9:94:91:94:2b:a3:d2:c1:21:41:
         53:b7:8f:b3:22:71:94:64:98:8e:b9:75:39:cf:6d:76:2d:95:
         c4:87:31:f7:ae:11:be:42:12:97:f3:24:3b:25:b6:a9:3d:a3:
         c5:99:e1:1a:40:61:30:ad:7a:3f:59:3f:e6:bc:af:0d:99:81:
         a2:b5:8b:97:4e:e7:3c:03:9c:8b:d7:4b:7b:e8:ed:7a:0b:03:
         ef:aa:2b:07:bc:65:c2:9b:0e:44:34:e6:88:d3:e2:25:26:0d:
         5a:86:8d:86:49:f1:dd:05:2f:73:6d:c7:63:9e:cd:75:76:bd:
         b1:04:99:20:4a:3c:41:8c:28:6b:27:91:e0:48:eb:ec:9f:57:
         01:fb:78:99:23:c6:37:ec:35:83:6b:82:5f:cf:2c:95:0d:a8:
         46:de:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:38 2026 by rpki-client