Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
File:                     3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (raw, json)
Hash identifier:          LAcZPQ3pIGaKXvi5jmwicJ2UjFgOejfsE6ysoM3HtpY=
Subject key identifier:   24:17:0F:DC:68:A5:CA:5D:D2:3F:71:99:B7:37:15:FF:D8:26:D2:83
Certificate issuer:       /CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA
Certificate serial:       059715900B6A0FA36F107226B3D30C079E6A14C1
Authority key identifier: 1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa
Signing time:             Sun 03 May 2026 02:45:50 +0000
ROA not before:           Sun 03 May 2026 02:40:50 +0000
ROA not after:            Sun 02 May 2027 02:45:50 +0000
asID:                     149320
IP address blocks:        103.178.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl
                          rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:97:15:90:0b:6a:0f:a3:6f:10:72:26:b3:d3:0c:07:9e:6a:14:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEFF70E4C2A60C7CE99DCD5A719E121508601BA
        Validity
            Not Before: May  3 02:40:50 2026 GMT
            Not After : May  2 02:45:50 2027 GMT
        Subject: CN=24170FDC68A5CA5DD23F7199B73715FFD826D283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:1c:ac:6a:20:3b:ad:ad:c6:bb:00:93:1f:
                    4c:08:0c:d7:87:b0:f9:9f:3f:21:f2:f3:85:56:ba:
                    31:b2:e9:fa:2a:0e:82:fb:01:43:f3:78:5b:73:28:
                    80:64:7e:a3:d5:ba:22:86:22:fe:d6:39:93:fc:b3:
                    01:7d:72:59:7f:e2:de:84:8f:13:9a:c8:2c:27:68:
                    ae:eb:89:4b:19:24:62:5e:15:5d:f3:cb:5e:23:04:
                    5c:6b:93:17:8e:e2:e0:f7:6b:f5:b7:be:0d:1f:e7:
                    72:d3:91:16:9a:fd:8b:e0:2c:31:b4:6d:f5:9e:8e:
                    dd:b5:05:29:b1:ea:23:44:d3:be:6b:b6:60:75:c1:
                    22:54:44:9a:7d:12:a5:df:3d:eb:72:24:a3:98:c4:
                    16:bb:b2:72:7d:87:83:7b:35:9f:39:63:26:2e:73:
                    df:d7:0d:de:2e:ed:91:fb:2a:c1:e9:f1:1e:e0:17:
                    04:5d:2c:e8:cf:18:a7:94:5b:0d:9f:02:44:97:b6:
                    28:df:87:f4:2f:c7:62:84:d1:95:82:a7:51:8b:a8:
                    0a:e5:f0:8d:86:f4:5d:c9:cd:be:3d:fd:b0:c9:b5:
                    61:69:bf:97:e7:ba:f1:e0:3c:88:1d:55:31:13:8a:
                    5e:09:df:7e:19:5f:c2:0b:0c:90:32:fb:2f:f9:e7:
                    e4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:17:0F:DC:68:A5:CA:5D:D2:3F:71:99:B7:37:15:FF:D8:26:D2:83
            X509v3 Authority Key Identifier:
                keyid:1E:EF:F7:0E:4C:2A:60:C7:CE:99:DC:D5:A7:19:E1:21:50:86:01:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EEFF70E4C2A60C7CE99DCD5A719E121508601BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:14:3e:02:42:76:a6:fb:3f:08:c4:d2:04:e0:c4:01:19:d4:
         90:07:85:41:ff:49:49:1e:1b:f4:cd:fc:96:83:64:b7:c2:f8:
         12:a0:9b:e7:3e:a1:6f:4e:41:d5:88:da:38:5a:0a:44:8b:81:
         6a:de:c4:34:9f:e2:63:61:d7:75:c5:09:71:c8:81:c6:c8:fc:
         6e:79:ad:43:af:90:3c:49:0c:81:9e:d7:52:03:c3:93:af:82:
         16:9a:c1:83:d5:64:bb:5a:8b:26:e0:e1:69:b0:35:a8:bc:46:
         de:09:6f:35:cd:b9:a7:d4:a2:62:ec:4f:bb:e6:78:c9:c8:bb:
         52:21:81:d1:24:e4:80:fa:75:57:de:00:f8:4c:7d:5f:7a:e2:
         c3:71:55:64:1b:e1:ff:ed:ad:c7:7f:d4:e6:99:26:9c:b8:e2:
         e0:3e:fd:fd:2e:44:55:50:1e:41:75:5b:1e:7c:a2:f7:c9:28:
         fc:39:2b:2d:ad:01:03:b0:21:c4:c2:72:6a:5a:b2:79:00:5d:
         b6:86:92:fe:8b:6f:db:f8:29:50:02:c3:4b:40:20:e0:fc:6e:
         9d:6d:b3:68:5c:a0:6d:63:65:9a:f5:a9:16:dd:73:d2:41:0e:
         cd:32:ce:74:50:b0:e8:fd:2d:fb:47:19:1e:a0:f6:7c:05:ec:
         60:83:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:13 2026 by rpki-client