Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
File:                     3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (raw, json)
Hash identifier:          dqW6TWRtsltPNTEFRMpYh1GeX5vPLKOWuyjNksoCBu4=
Subject key identifier:   83:A5:77:35:62:FA:82:1C:2E:D7:14:C2:4B:31:ED:4F:C1:0E:00:73
Certificate issuer:       /CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
Certificate serial:       6E8AC32D918969ADDF66CACF633AB47A837579DF
Authority key identifier: D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
Signing time:             Sun 03 May 2026 02:48:59 +0000
ROA not before:           Sun 03 May 2026 02:43:59 +0000
ROA not after:            Sun 02 May 2027 02:48:59 +0000
asID:                     147077
IP address blocks:        103.172.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl
                          rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:8a:c3:2d:91:89:69:ad:df:66:ca:cf:63:3a:b4:7a:83:75:79:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D469E6C482F05DFD528EB9D1E137A98986C2AA64
        Validity
            Not Before: May  3 02:43:59 2026 GMT
            Not After : May  2 02:48:59 2027 GMT
        Subject: CN=83A5773562FA821C2ED714C24B31ED4FC10E0073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:6a:ec:87:42:81:c5:fe:6d:d8:aa:3e:bf:
                    03:c3:25:2c:d0:1f:62:96:7b:4a:b8:07:81:42:e1:
                    53:b2:e2:a9:c8:9a:c1:64:5a:8a:de:5d:1e:5a:02:
                    80:b9:0d:d9:fc:ac:16:0f:ac:08:0c:2d:25:03:94:
                    bc:c3:c0:56:70:d1:82:5e:bb:3b:1a:51:73:ec:5d:
                    43:5f:3c:bd:cc:d2:8f:a9:17:19:7b:a1:a4:cc:0c:
                    70:33:78:60:13:ea:6b:14:ca:10:c5:f3:63:8e:8a:
                    d6:72:f3:3f:2b:64:7c:80:b1:4b:df:1e:8e:40:29:
                    41:b7:1b:34:3b:a5:35:58:24:de:b0:04:58:2b:4b:
                    a4:cf:ca:3c:98:32:f5:aa:0d:8c:eb:ad:13:ee:20:
                    f5:e9:fb:1a:b9:c7:f3:4a:6e:ca:e9:36:15:89:65:
                    71:3d:22:f3:1f:64:72:d5:7f:ab:9d:17:3a:b8:3d:
                    9a:38:ff:69:46:25:0f:ab:0a:f7:44:17:a8:48:0a:
                    30:57:7e:e5:bb:33:e4:49:48:91:86:cb:4c:43:4e:
                    bd:89:7b:2d:d3:3f:c9:63:e4:52:d6:2f:10:18:9c:
                    3a:f7:24:a0:11:9a:a0:4c:8d:17:31:59:ae:90:e5:
                    6a:4b:fe:07:6a:72:cf:ab:53:2d:dc:52:4e:b0:58:
                    0f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:77:35:62:FA:82:1C:2E:D7:14:C2:4B:31:ED:4F:C1:0E:00:73
            X509v3 Authority Key Identifier:
                keyid:D4:69:E6:C4:82:F0:5D:FD:52:8E:B9:D1:E1:37:A9:89:86:C2:AA:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/D469E6C482F05DFD528EB9D1E137A98986C2AA64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D469E6C482F05DFD528EB9D1E137A98986C2AA64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:76:b2:39:1c:74:e0:4c:26:f8:a6:43:a5:cf:8f:c5:96:a6:
         3e:6a:c2:15:9d:98:f0:24:a5:e7:70:0d:52:82:4b:cf:cc:9d:
         34:8e:10:66:53:26:d1:89:38:4f:a3:e2:03:02:bc:5f:0f:aa:
         4a:40:61:f1:1f:ac:36:bc:5c:78:1a:bc:e6:bf:88:37:3f:22:
         33:e1:86:2a:dc:f1:8f:95:4e:31:a9:ca:9e:c9:fc:55:c1:a1:
         04:15:8b:f3:1f:7d:16:98:9e:d0:02:11:5c:d3:81:29:f5:b8:
         6b:75:9e:d6:d0:f4:60:6e:48:fe:21:75:db:f4:db:93:ed:77:
         c7:9b:a2:bb:4a:65:2c:75:ef:f7:9f:b2:d9:03:82:e2:3d:dd:
         77:ba:f6:f4:cc:bd:c8:ff:d5:dd:f0:5e:c8:0c:8d:39:f9:a1:
         a2:d1:c0:19:6e:9c:29:da:4c:04:d1:76:0a:a1:13:e8:07:55:
         aa:14:d3:51:73:05:dc:a5:cf:0b:e8:2c:31:13:5d:2a:cd:d4:
         4f:46:d4:70:ee:fc:35:e3:e0:b3:34:be:09:8a:10:38:12:45:
         03:ec:03:d1:a2:dd:2d:99:32:f2:3d:a7:f9:cc:e1:0c:bd:bc:
         cf:9f:b3:fd:a5:a4:f2:64:9a:d2:69:29:9d:ec:a9:3c:91:c6:
         81:ae:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:15 2026 by rpki-client