Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa
File:                     3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (raw, json)
Hash identifier:          vm98v9W8rSeQ8Av1Tc7EkqP0Z8ZuAgCRGwku9YNKDo0=
Subject key identifier:   02:D2:4D:F4:BB:9D:94:23:C2:AA:AC:9C:FB:9B:89:8E:22:09:9A:84
Certificate issuer:       /CN=B806053521FE6FECB8809B52E561CCCA002004C5
Certificate serial:       76431C1A041B09B69B4D85F7CD39B7467918BBDA
Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa
Signing time:             Sun 03 May 2026 02:46:56 +0000
ROA not before:           Sun 03 May 2026 02:41:56 +0000
ROA not after:            Sun 02 May 2027 02:46:56 +0000
asID:                     147095
IP address blocks:        103.174.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl
                          rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:43:1c:1a:04:1b:09:b6:9b:4d:85:f7:cd:39:b7:46:79:18:bb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5
        Validity
            Not Before: May  3 02:41:56 2026 GMT
            Not After : May  2 02:46:56 2027 GMT
        Subject: CN=02D24DF4BB9D9423C2AAAC9CFB9B898E22099A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:3f:d1:16:32:25:46:7c:72:ba:03:90:f8:
                    1d:c1:c1:f8:4a:78:90:6e:83:35:33:9f:ab:98:7b:
                    13:9a:28:fb:36:98:ec:fc:f2:ac:ad:95:a9:69:d5:
                    b9:26:e9:34:fa:1f:29:07:45:73:bc:d8:ff:a3:40:
                    16:76:2d:55:f7:64:2a:65:46:ca:77:32:c1:74:ab:
                    31:6f:44:a3:d1:28:fd:b7:d6:dc:3c:58:cc:5a:c2:
                    d1:39:bd:b8:20:83:00:06:fe:96:32:a8:cc:b8:f8:
                    1f:a7:03:8b:c5:d0:3f:23:04:d3:1a:6e:92:91:bf:
                    be:1a:6a:07:94:ef:3b:25:9a:d5:ff:69:a5:86:f6:
                    6e:65:f9:f5:e6:45:90:99:83:4a:7c:75:58:9d:0b:
                    e8:ce:d4:1c:f7:96:f8:e9:f5:a2:7d:ff:2c:e2:7c:
                    92:ed:1c:37:f9:67:f2:ec:a8:54:d7:99:1d:e0:0b:
                    40:5f:46:84:d7:a4:8c:78:d9:42:67:2c:f0:df:98:
                    4b:46:32:dc:ad:81:3c:ed:da:3b:85:ee:24:68:8b:
                    c3:ac:3b:36:ef:e1:12:46:00:fa:50:96:97:83:68:
                    bc:d7:f2:f9:7c:51:e9:31:c7:92:68:5a:a4:59:73:
                    57:f4:c4:56:bf:76:ac:aa:ff:bd:c6:04:a2:a1:e3:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:4D:F4:BB:9D:94:23:C2:AA:AC:9C:FB:9B:89:8E:22:09:9A:84
            X509v3 Authority Key Identifier:
                keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:42:28:11:ed:bc:9a:ce:d0:8f:31:fc:55:77:d8:52:3e:98:
         04:cc:d2:13:0d:99:a1:40:e9:22:96:b6:a2:5c:7e:b4:95:c7:
         af:06:ca:19:90:eb:6b:91:3d:b8:38:bf:69:75:27:a2:8c:48:
         9f:85:67:85:c7:9b:4a:e7:9e:6a:83:e3:dc:a5:e3:94:6f:f5:
         3b:f0:44:1c:30:37:00:af:9e:46:7f:b5:f7:69:9c:1e:27:ec:
         35:d0:ca:1f:68:07:b9:01:1b:9f:30:19:c3:a0:09:5a:a5:65:
         5f:ff:0d:cb:6a:25:45:b2:d7:20:b9:ef:2b:4b:29:ea:5b:bd:
         ce:bf:07:6c:6c:47:d6:4c:cd:03:50:e0:2d:03:fd:2c:a8:16:
         f6:08:14:16:1e:2a:a2:b8:57:3a:07:0c:8a:ee:52:e8:f8:2d:
         31:cf:80:d0:08:fd:df:7e:19:9c:5c:9e:d6:0b:76:54:07:a9:
         8a:e1:cf:02:fd:b1:d3:54:10:b4:ab:2c:b9:2c:b9:02:16:0e:
         4f:f8:2b:7d:ce:47:7d:d6:75:a0:6c:32:9d:ce:95:04:7d:08:
         66:72:f7:d2:d4:bb:ee:a5:17:9c:1d:ea:47:32:52:ab:8c:00:
         db:5d:c8:94:b3:56:f2:a0:40:b8:6e:73:3d:b3:e3:88:d0:c8:
         65:94:a8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:29 2026 by rpki-client