Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
File:                     3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (raw, json)
Hash identifier:          Tts8f+N485CFXeqo33btYWO7LgUOuaCh8Px0kKwHoiY=
Subject key identifier:   DC:0D:9D:52:A9:4B:53:06:71:E4:A2:A1:16:DF:A6:E2:68:C4:64:BF
Certificate issuer:       /CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D
Certificate serial:       618EBE8B672D12DC06D0210437524AC6F1606C08
Authority key identifier: E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa
Signing time:             Sun 03 May 2026 02:48:21 +0000
ROA not before:           Sun 03 May 2026 02:43:21 +0000
ROA not after:            Sun 02 May 2027 02:48:21 +0000
asID:                     147097
IP address blocks:        103.174.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl
                          rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8e:be:8b:67:2d:12:dc:06:d0:21:04:37:52:4a:c6:f1:60:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E035D5F5D70206748D3C087B30BFBCD15ECF196D
        Validity
            Not Before: May  3 02:43:21 2026 GMT
            Not After : May  2 02:48:21 2027 GMT
        Subject: CN=DC0D9D52A94B530671E4A2A116DFA6E268C464BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:c6:35:fb:c3:b1:92:0b:ac:f7:cc:73:1d:
                    8a:f9:d1:85:b6:05:02:b1:21:36:ca:40:cd:83:22:
                    2c:d0:5c:42:2c:08:09:d2:ff:d8:c9:9c:53:e8:6d:
                    53:d5:45:6f:a6:3d:f1:0a:39:29:26:50:a2:4f:4f:
                    c2:d4:8c:70:33:33:a2:2e:59:a0:67:c9:7b:76:28:
                    51:f4:a7:55:52:d8:60:ee:da:49:37:7e:7f:41:12:
                    35:97:ff:f3:76:3b:9f:7d:d6:c4:50:21:86:34:11:
                    8d:30:45:e0:14:7d:4c:6a:d0:5a:9a:5e:26:a5:a9:
                    c1:11:1e:b3:67:83:e9:4f:3d:da:ea:b1:a6:ab:5e:
                    7b:ff:86:cd:54:c8:1a:e3:9b:f1:b6:1c:79:d6:85:
                    d0:fa:06:7c:50:d9:70:8b:4d:e9:21:3a:71:44:88:
                    1d:aa:86:e8:18:de:8c:ca:fe:7a:18:58:2e:fa:ab:
                    f4:f2:1e:28:a6:da:ab:5f:83:41:96:0c:e0:16:bd:
                    11:0c:48:c8:c0:ac:e6:aa:24:42:5e:55:7c:87:cf:
                    6b:d6:75:3f:d7:64:9d:7f:4f:36:f3:8e:b4:41:c2:
                    1f:cf:f6:60:41:40:f8:be:cc:64:ff:64:0e:c3:02:
                    98:88:bb:b5:db:00:e9:91:89:32:1c:49:33:02:f4:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0D:9D:52:A9:4B:53:06:71:E4:A2:A1:16:DF:A6:E2:68:C4:64:BF
            X509v3 Authority Key Identifier:
                keyid:E0:35:D5:F5:D7:02:06:74:8D:3C:08:7B:30:BF:BC:D1:5E:CF:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/E035D5F5D70206748D3C087B30BFBCD15ECF196D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E035D5F5D70206748D3C087B30BFBCD15ECF196D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:22:24:a5:51:06:81:b4:90:31:ac:22:0f:dd:9c:f2:4d:f6:
         e5:50:70:55:21:6f:77:8d:0c:b5:26:ab:ca:8f:8d:38:f7:df:
         1a:61:2c:bf:36:98:03:87:1c:39:9b:90:ca:43:55:d1:79:97:
         76:d9:90:09:97:f4:65:d4:cd:e0:ff:5e:66:5f:c4:c5:50:c3:
         e7:66:fa:c4:d8:8c:37:e7:c1:f6:e1:7b:62:1e:cd:aa:b0:fb:
         ef:5f:cb:fa:71:68:5e:8d:c7:ac:77:c0:69:7a:ae:71:db:c6:
         d3:f1:df:3a:65:56:97:4b:81:fd:bb:2c:04:27:d0:32:96:35:
         5c:c2:b7:2a:66:26:a8:2c:d4:0f:95:1a:d6:14:6c:97:d1:00:
         21:6f:de:21:5d:38:09:2f:2f:b1:ed:d2:c5:3a:68:16:1a:18:
         8b:60:29:dd:61:ca:a8:3a:f1:56:91:03:f8:b1:84:39:b8:c6:
         8a:c9:30:07:45:ac:77:30:b8:5e:8e:e5:99:16:fa:12:ac:5a:
         04:01:31:8e:e3:93:ae:a6:69:fc:cf:e1:0a:b2:5e:3a:ab:3b:
         56:84:dc:aa:d3:6d:41:90:21:5e:c7:f5:a3:d9:97:02:cd:be:
         07:c8:2d:61:b0:9b:05:33:9c:87:12:18:4b:a7:be:0d:d8:fd:
         29:91:c6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:12 2026 by rpki-client