Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa
File:                     3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (raw, json)
Hash identifier:          7ETsMsldfe5UrsfaSRsi4x54y8+ydy+yp/J35qzk+sc=
Subject key identifier:   A5:EC:A0:01:54:96:D7:A5:F1:3D:70:12:B2:40:5C:84:6F:19:B1:4F
Certificate issuer:       /CN=357778A786AA1E6854673B0A6AAAA40B85254E94
Certificate serial:       68C26811926700DE514B4BE27B9065027B6153CD
Authority key identifier: 35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa
Signing time:             Sun 03 May 2026 02:44:53 +0000
ROA not before:           Sun 03 May 2026 02:39:53 +0000
ROA not after:            Sun 02 May 2027 02:44:53 +0000
asID:                     147101
IP address blocks:        103.174.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl
                          rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c2:68:11:92:67:00:de:51:4b:4b:e2:7b:90:65:02:7b:61:53:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357778A786AA1E6854673B0A6AAAA40B85254E94
        Validity
            Not Before: May  3 02:39:53 2026 GMT
            Not After : May  2 02:44:53 2027 GMT
        Subject: CN=A5ECA0015496D7A5F13D7012B2405C846F19B14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:1e:6d:1a:ad:6e:97:95:d8:88:a1:5f:26:
                    8f:0f:39:c0:be:c8:2b:57:81:99:46:83:81:87:9d:
                    33:a7:57:6a:60:be:e4:5b:de:9b:56:77:9e:a1:ea:
                    c6:69:14:82:65:62:d1:a0:45:71:e8:fb:4d:80:c7:
                    dc:f8:46:14:71:53:fc:26:0c:08:a7:a6:d1:da:c5:
                    0f:aa:b9:74:f4:36:c0:b2:f8:e6:d9:e5:81:31:69:
                    00:28:75:6a:71:55:5d:1b:86:ae:50:d8:fe:42:d8:
                    eb:07:40:74:8a:31:84:5f:83:98:4c:52:4c:7a:e6:
                    57:dc:af:99:90:8e:9a:bb:0a:ef:6f:78:30:37:e2:
                    36:38:7f:8d:03:9b:ff:bc:15:17:b0:05:5a:4a:c9:
                    20:e4:d0:c5:e3:b9:a3:36:e3:d1:0a:51:e9:c1:03:
                    93:88:f3:1f:fe:b3:f3:30:a9:3d:a2:c4:bb:35:3e:
                    f5:c2:5f:88:cb:28:96:40:73:7c:59:12:79:ca:38:
                    50:75:28:1f:17:dc:06:95:27:e8:6b:c8:db:3b:15:
                    da:c0:cb:cf:8e:1d:7f:a4:22:d7:a6:be:49:cb:82:
                    58:41:4a:7c:ec:3b:a7:8f:7b:54:dc:cd:38:2c:bb:
                    b2:46:79:17:1d:15:65:65:ea:0d:61:02:81:78:f4:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:A0:01:54:96:D7:A5:F1:3D:70:12:B2:40:5C:84:6F:19:B1:4F
            X509v3 Authority Key Identifier:
                keyid:35:77:78:A7:86:AA:1E:68:54:67:3B:0A:6A:AA:A4:0B:85:25:4E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/357778A786AA1E6854673B0A6AAAA40B85254E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/357778A786AA1E6854673B0A6AAAA40B85254E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:89:fa:4b:20:15:2b:0b:95:29:ad:9c:62:1e:c6:00:c1:
         ad:11:62:08:1e:88:96:15:49:e9:5a:75:a2:3e:80:1a:23:a8:
         e0:7f:68:dd:b5:29:b3:4d:71:94:93:c3:e8:1e:ea:b6:cf:29:
         70:71:fa:0e:22:e5:4a:73:79:81:78:5b:dc:47:b5:c0:91:e7:
         fe:27:27:17:4c:26:94:c8:b1:f5:9f:05:9b:a9:64:d2:9c:2d:
         ec:2e:e3:2f:7d:db:8b:f8:4a:16:05:ed:61:c4:ef:d8:e5:c3:
         9c:0e:a6:75:a1:51:27:d7:61:ec:40:a2:18:32:06:a3:0d:48:
         1c:5b:53:4c:73:4e:97:5f:27:c8:cf:7c:83:7f:2e:16:b0:1a:
         84:5c:dc:b9:37:21:01:77:ce:c4:88:bf:4a:cf:22:e7:ac:49:
         05:11:31:1b:e9:90:a2:1f:4a:13:e6:07:93:ae:43:3f:9c:9f:
         04:69:ac:14:19:46:0c:cb:14:45:68:74:67:7d:33:5c:0a:9a:
         df:79:50:cc:41:4d:1b:1c:30:d7:c0:4a:fb:0f:f2:e7:8e:69:
         1e:c0:d5:d6:15:ab:90:ab:03:54:4b:8c:c1:e3:15:f4:09:60:
         ea:f1:a6:ff:6d:e7:ba:29:3c:0a:b3:0b:ea:e6:cb:fd:7d:aa:
         c5:46:88:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:11 2026 by rpki-client