Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa
File:                     3130332e3137372e362e302f32332d3234203d3e20313437313430.roa (raw, json)
Hash identifier:          sv7PvNJnnZ10opw+lXUbBT0PVWMEcNTxqWez029VNl0=
Subject key identifier:   CB:BC:EA:44:FD:71:C3:F6:99:37:12:90:C9:34:FE:79:F3:3B:B7:AE
Certificate issuer:       /CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
Certificate serial:       4964F4C0E0034355B019FE6C6AE62BA610A24D3D
Authority key identifier: 97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa
Signing time:             Sun 03 May 2026 02:45:09 +0000
ROA not before:           Sun 03 May 2026 02:40:09 +0000
ROA not after:            Sun 02 May 2027 02:45:09 +0000
asID:                     147140
IP address blocks:        103.177.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl
                          rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:64:f4:c0:e0:03:43:55:b0:19:fe:6c:6a:e6:2b:a6:10:a2:4d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A
        Validity
            Not Before: May  3 02:40:09 2026 GMT
            Not After : May  2 02:45:09 2027 GMT
        Subject: CN=CBBCEA44FD71C3F699371290C934FE79F33BB7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:bd:31:37:1e:49:ec:29:36:a0:fd:44:0b:
                    78:aa:e1:24:cc:45:9d:f8:2b:01:e2:7d:3e:57:a5:
                    ba:bf:cb:06:4c:12:2c:d7:39:7e:13:c9:0a:09:5a:
                    35:04:60:c4:70:c5:c3:4a:3d:d5:2f:12:37:f3:4d:
                    1d:e0:8a:d5:10:35:0e:25:c7:ee:08:87:48:ee:c8:
                    b7:ec:16:13:a5:f5:2c:b9:b9:99:4a:37:b7:51:6f:
                    4b:f4:fa:36:7d:d0:47:d6:13:b1:4b:0a:07:ff:0d:
                    9c:3d:b1:59:4e:7a:86:43:d4:23:d3:89:f3:a6:f2:
                    c1:29:be:d1:6a:d0:76:6f:df:7b:57:f6:e3:b8:9a:
                    95:a1:95:40:fe:61:58:73:69:6f:b4:2a:d3:0f:53:
                    f4:7f:8b:47:20:08:7e:31:a3:4d:ce:dc:15:6f:01:
                    4e:0f:32:5a:45:af:72:95:af:df:7a:f6:d4:1b:fd:
                    3f:c9:93:b7:7f:34:04:8c:a1:e7:08:ae:a0:81:ef:
                    b1:f2:76:4c:76:d2:80:4e:84:54:d1:8f:69:a5:35:
                    a9:89:ec:5d:ce:ff:b7:7b:de:44:1a:a1:70:80:e7:
                    a7:8b:10:a1:25:98:c0:d8:c6:60:98:96:1a:e1:67:
                    ee:d3:f8:b7:4e:41:09:75:5f:49:ac:e3:94:b5:d7:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BC:EA:44:FD:71:C3:F6:99:37:12:90:C9:34:FE:79:F3:3B:B7:AE
            X509v3 Authority Key Identifier:
                keyid:97:EB:2C:66:1A:5F:45:6D:CE:2A:E3:A7:3A:64:BC:1D:A0:B0:D8:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/97EB2C661A5F456DCE2AE3A73A64BC1DA0B0D81A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/3130332e3137372e362e302f32332d3234203d3e20313437313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:37:c7:17:dc:8b:f0:b9:9d:14:28:38:b2:b0:cb:40:c2:dd:
         b6:ee:5c:32:db:20:41:ec:42:ea:2a:e2:14:d5:32:0a:a9:b1:
         c6:9d:fb:5e:3f:d7:d1:38:3c:59:09:6f:4d:c7:22:e5:73:a7:
         3e:c1:a7:e7:1b:c2:ac:33:70:4c:09:67:76:21:5a:ea:c8:d1:
         c7:59:21:5e:41:bb:ae:a9:bc:1b:73:88:90:3d:3c:74:24:23:
         1f:93:34:08:d1:52:15:0e:c7:00:c7:bb:95:24:30:b9:12:2b:
         72:c9:08:e8:85:c6:d4:f3:22:cb:ba:44:65:19:f0:04:50:0b:
         bd:2e:0d:64:7e:19:10:9e:7f:5f:45:a2:85:df:c5:d5:87:a0:
         4a:ff:79:3d:19:f3:85:71:35:14:f1:fb:4f:c2:a8:78:e7:54:
         e9:8b:c6:c1:76:df:36:77:66:a9:46:b5:c9:8a:72:06:95:9d:
         07:6c:42:39:e4:2e:b2:fd:9e:fe:a8:fa:7b:ae:bb:3d:fc:26:
         8d:6c:bb:d6:e1:35:ba:5e:6f:96:01:53:35:c1:82:c2:98:ee:
         3e:53:f5:ae:80:eb:c4:e2:93:ae:75:a8:55:5d:6a:0e:d6:1d:
         72:87:65:1d:f1:8b:68:f4:61:14:ed:1a:64:77:2b:28:93:35:
         af:da:de:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:42 2026 by rpki-client