Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
File:                     3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (raw, json)
Hash identifier:          RX42n1sKvH6RuNxwR829dnAhCVM69IdefkYN8dkI7/c=
Subject key identifier:   13:B9:E1:0D:3F:0A:61:F4:66:90:30:BF:00:59:37:5E:5F:1F:48:4D
Certificate issuer:       /CN=D280C077A9E801FBA933C9D0085012E09D686927
Certificate serial:       02145322EE5B2E45ADD315A1B8AF8925F06BAB3E
Authority key identifier: D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
Signing time:             Sun 03 May 2026 02:47:21 +0000
ROA not before:           Sun 03 May 2026 02:42:21 +0000
ROA not after:            Sun 02 May 2027 02:47:21 +0000
asID:                     63878
IP address blocks:        103.187.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl
                          rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:26:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:14:53:22:ee:5b:2e:45:ad:d3:15:a1:b8:af:89:25:f0:6b:ab:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D280C077A9E801FBA933C9D0085012E09D686927
        Validity
            Not Before: May  3 02:42:21 2026 GMT
            Not After : May  2 02:47:21 2027 GMT
        Subject: CN=13B9E10D3F0A61F4669030BF0059375E5F1F484D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:93:8c:9c:9e:a6:5f:21:4c:1f:d7:3c:20:
                    5a:2f:4c:cc:7c:f7:ef:4e:c7:a9:68:11:08:a8:91:
                    70:0d:81:26:fe:89:3f:d8:9c:0e:49:72:5a:41:dc:
                    d1:7f:d6:18:69:6f:1c:ab:da:e4:2c:bd:3f:91:37:
                    d6:54:22:7d:a2:97:18:a2:ad:df:39:16:08:68:35:
                    be:43:2c:64:8b:d1:6a:c4:bc:23:fe:b2:c0:8b:b0:
                    32:0a:0c:55:a1:2d:34:79:a9:b8:78:43:fd:ed:89:
                    42:62:ae:b9:6c:a9:81:26:2a:50:be:d8:d7:9b:0c:
                    36:9d:05:ed:9f:00:0a:a3:6c:6a:99:f3:68:8b:da:
                    1c:0a:ea:69:36:e8:ef:d7:7b:0c:d1:c0:17:35:66:
                    fb:40:30:fd:68:a1:65:90:b6:ad:74:d5:f8:70:8e:
                    eb:a5:6c:dc:64:dc:50:22:70:6e:72:49:fe:93:5d:
                    d6:1c:cf:6e:ca:9d:0d:dc:96:91:72:6c:72:bf:9a:
                    4e:a0:57:40:4d:d2:97:6e:19:c4:91:95:25:59:83:
                    ee:ae:dd:2d:3d:90:d8:c9:80:e2:73:a9:3b:e3:96:
                    61:93:74:27:42:1c:82:ba:ea:9d:21:a5:b4:5f:a7:
                    d5:5f:46:b4:4b:c1:98:46:ed:0e:8f:d2:26:e2:2d:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B9:E1:0D:3F:0A:61:F4:66:90:30:BF:00:59:37:5E:5F:1F:48:4D
            X509v3 Authority Key Identifier:
                keyid:D2:80:C0:77:A9:E8:01:FB:A9:33:C9:D0:08:50:12:E0:9D:68:69:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/D280C077A9E801FBA933C9D0085012E09D686927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D280C077A9E801FBA933C9D0085012E09D686927.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:50:15:a1:3e:6e:8d:c2:7a:6e:34:b1:01:91:c5:86:d6:f1:
         f5:25:1a:c0:c0:27:8a:79:65:1b:5c:da:68:be:1a:75:d8:12:
         c5:0f:55:c8:09:fe:ff:eb:9f:48:3b:44:a9:fb:8c:d3:70:a5:
         10:a1:62:bd:93:f7:9d:51:cd:b4:81:b8:e1:e4:f6:07:de:15:
         9a:9a:c0:b9:b2:e4:f2:97:9d:18:79:7a:d4:2b:93:ca:65:79:
         fc:2c:c6:bc:74:8b:0c:3a:7b:17:74:54:73:6a:bd:54:76:ef:
         d0:18:04:e5:a3:e1:b7:b4:7f:36:c3:5c:16:af:ec:b6:60:ae:
         91:9c:b7:78:9b:69:d6:81:52:60:9c:4b:37:aa:7a:20:10:b5:
         e4:b0:a0:e9:58:c7:78:e6:55:69:86:f8:03:f6:69:5c:68:4b:
         43:c9:fa:9c:06:02:78:d9:ff:00:1e:9d:98:28:c4:1b:a4:3d:
         ec:3b:72:1a:6a:41:3f:df:35:1b:67:9b:67:47:02:ba:31:bb:
         f3:33:62:7c:d7:5e:08:72:f3:07:20:43:be:dc:6d:34:cc:6a:
         8c:c3:39:0f:8e:5d:78:a9:fe:30:da:94:7b:14:9e:42:be:5f:
         18:49:b2:8b:44:cb:ad:8d:d5:1e:85:49:d2:28:02:7b:0e:05:
         d4:2d:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:47 2026 by rpki-client