Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa
File:                     3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (raw, json)
Hash identifier:          un5iMbvwLLHgZ/gVlHFbug00/xJXBrdaRm/T/UqWjVI=
Subject key identifier:   8D:55:49:78:A1:44:E3:42:92:CF:9E:A0:2F:4F:B0:50:6C:10:E7:5C
Certificate issuer:       /CN=B806053521FE6FECB8809B52E561CCCA002004C5
Certificate serial:       1985F62B2C7612DB6015E17B52D229976D07F770
Authority key identifier: B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa
Signing time:             Sun 03 May 2026 02:46:55 +0000
ROA not before:           Sun 03 May 2026 02:41:55 +0000
ROA not after:            Sun 02 May 2027 02:46:55 +0000
asID:                     147095
IP address blocks:        103.174.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl
                          rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:85:f6:2b:2c:76:12:db:60:15:e1:7b:52:d2:29:97:6d:07:f7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B806053521FE6FECB8809B52E561CCCA002004C5
        Validity
            Not Before: May  3 02:41:55 2026 GMT
            Not After : May  2 02:46:55 2027 GMT
        Subject: CN=8D554978A144E34292CF9EA02F4FB0506C10E75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:49:37:80:93:eb:6f:c2:1c:0a:b7:e1:2a:
                    0e:47:af:a9:78:8a:4e:4b:be:50:7f:50:da:ae:5a:
                    c7:a2:9e:28:fd:1d:94:8d:79:ba:5e:ad:2f:0d:69:
                    00:89:88:1a:f8:e6:42:1f:e8:ef:58:7e:32:1e:0f:
                    b9:87:58:79:ef:b3:67:52:10:2f:69:23:bf:f7:c2:
                    a0:4b:46:92:fc:ed:6c:e9:92:9b:48:8e:e5:0a:5a:
                    cc:dc:bf:c5:25:fd:8f:d2:0c:ed:d3:1a:73:43:95:
                    a7:c7:aa:d5:9c:c6:1d:27:56:32:10:58:24:e6:96:
                    12:7f:f6:e4:1b:a7:8b:12:e2:d3:4c:33:58:e7:81:
                    86:d9:6f:28:e7:39:ed:d2:09:42:2d:bb:f5:03:8a:
                    84:41:b1:b8:1f:fe:22:80:84:45:42:a7:39:9c:ca:
                    9f:33:16:ad:ac:b2:45:92:c5:26:50:36:84:66:72:
                    f9:fb:32:50:b9:20:2e:92:e2:75:91:4c:92:e6:d4:
                    51:95:55:50:47:8b:66:07:72:17:a0:eb:f8:d6:f5:
                    72:0f:f4:0a:29:21:70:31:4c:27:f5:00:02:04:25:
                    d5:e5:31:c1:2f:79:80:b5:a9:40:b7:32:ab:7b:89:
                    94:48:26:c9:6f:49:5f:46:d1:38:2f:67:c1:d8:3b:
                    cc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:55:49:78:A1:44:E3:42:92:CF:9E:A0:2F:4F:B0:50:6C:10:E7:5C
            X509v3 Authority Key Identifier:
                keyid:B8:06:05:35:21:FE:6F:EC:B8:80:9B:52:E5:61:CC:CA:00:20:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/B806053521FE6FECB8809B52E561CCCA002004C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B806053521FE6FECB8809B52E561CCCA002004C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:f0:18:b0:70:98:18:02:c0:fd:0c:61:fb:16:97:0f:42:
         46:2b:0f:4b:55:94:e4:5d:45:24:07:51:91:46:49:ff:e9:a9:
         5e:09:d4:7e:5f:1d:ac:f0:68:d5:0c:23:1d:d3:32:43:25:f5:
         af:84:76:0c:03:33:8c:df:67:3f:27:1b:ad:fc:95:23:94:26:
         cb:22:44:c0:73:dd:df:1b:43:e0:d0:62:72:9f:3a:14:b0:0a:
         14:e4:96:1c:52:2e:57:57:a0:33:b7:d2:79:6f:d2:a5:11:b4:
         0f:86:27:42:4d:9a:13:d1:64:f1:ef:32:fa:e2:cd:e7:0b:c9:
         3d:22:26:45:dd:2e:0d:06:3a:78:0b:da:a2:02:a8:65:3a:0a:
         7d:7b:07:cc:2f:61:4b:1e:e6:59:34:27:43:4d:e1:0e:7c:80:
         98:9f:c8:03:5e:80:bf:11:33:6a:ea:dc:e5:85:41:3d:c3:f5:
         bc:d7:da:c0:76:d3:1d:9e:7a:45:02:40:57:11:63:e7:99:35:
         44:92:23:95:15:c1:7f:b4:45:73:28:eb:b3:79:1b:63:66:f3:
         07:08:6a:6b:ce:62:64:69:d4:9e:6f:84:cd:e9:8c:49:b3:2b:
         a5:76:79:ab:cf:b8:73:89:e0:3c:bf:3e:0d:9a:5a:62:11:d2:
         21:33:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:15 2026 by rpki-client