Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          WZ2rZfWHM+5AVHUgxrQmHoSf+QoldV5jQTdF+VqMoGE=
Subject key identifier:   B4:EF:97:C8:C6:2A:CC:66:20:D7:1E:92:67:88:9A:D0:E3:9A:37:4C
Certificate issuer:       /CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
Certificate serial:       2792E94C27BD67945A2B6F81C4273BED5966956C
Authority key identifier: EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa
Signing time:             Sun 03 May 2026 02:49:25 +0000
ROA not before:           Sun 03 May 2026 02:44:25 +0000
ROA not after:            Sun 02 May 2027 02:49:25 +0000
asID:                     140443
IP address blocks:        103.149.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl
                          rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:92:e9:4c:27:bd:67:94:5a:2b:6f:81:c4:27:3b:ed:59:66:95:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE29DD3D4C17A8E871BACA69DF584CA52283E269
        Validity
            Not Before: May  3 02:44:25 2026 GMT
            Not After : May  2 02:49:25 2027 GMT
        Subject: CN=B4EF97C8C62ACC6620D71E9267889AD0E39A374C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:01:dd:e6:9d:1d:2c:18:77:76:82:f5:f4:
                    7d:45:53:b4:d7:20:2a:bd:16:8f:f1:be:3e:c7:a5:
                    45:f0:7b:b9:9a:7c:c6:67:4a:41:05:0f:55:74:4d:
                    67:80:32:f2:89:98:f3:55:a5:a0:10:72:ad:68:a0:
                    ed:57:02:e4:ec:1c:57:05:3e:77:77:31:b3:b2:90:
                    8d:60:f6:3b:af:5c:a9:17:9f:2f:0f:a1:41:28:e5:
                    18:8d:c3:e5:23:8a:66:8c:4b:f5:8c:16:b4:23:85:
                    b2:f6:4c:93:77:e5:21:5f:b4:f6:0d:da:0b:c0:53:
                    05:e1:29:3c:17:07:f5:74:2c:29:d3:6b:4d:eb:13:
                    bb:fc:7c:7f:44:65:80:89:38:0d:38:a7:d2:c9:9e:
                    83:ca:0c:a2:e8:45:54:e5:2c:f9:41:e5:e5:8b:1f:
                    ef:b0:4a:96:a7:d9:0f:80:5e:35:08:d8:92:f7:c6:
                    da:1a:cd:31:f9:82:66:b8:44:32:5a:79:81:50:b6:
                    b6:11:8c:6b:bc:62:dd:61:fc:e8:73:f4:66:07:d4:
                    46:02:9d:18:36:34:68:70:e0:af:ca:92:40:82:d6:
                    24:9a:d6:fb:a2:2a:40:f0:d6:25:1e:d6:bf:db:02:
                    4c:fb:0e:71:11:78:e0:86:57:65:1e:e4:98:52:cc:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EF:97:C8:C6:2A:CC:66:20:D7:1E:92:67:88:9A:D0:E3:9A:37:4C
            X509v3 Authority Key Identifier:
                keyid:EE:29:DD:3D:4C:17:A8:E8:71:BA:CA:69:DF:58:4C:A5:22:83:E2:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/EE29DD3D4C17A8E871BACA69DF584CA52283E269.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EE29DD3D4C17A8E871BACA69DF584CA52283E269.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:99:36:ec:51:05:25:7f:4c:68:f3:a7:be:e2:a3:c3:5a:d3:
         db:2a:df:06:3c:46:81:eb:cc:39:8c:06:e8:c5:3d:5a:e8:e5:
         ea:ef:9f:10:ef:b3:ce:c9:64:b2:04:30:f2:0f:6a:c5:9c:f5:
         8e:a1:b8:37:e4:63:a1:32:ef:f7:f7:00:83:17:bb:98:be:84:
         59:2a:64:9f:fe:30:37:bd:67:8b:1f:af:e7:4f:87:e9:6a:51:
         53:23:e5:e4:a9:3f:22:cb:5f:ae:be:c9:f7:9a:2e:16:6f:93:
         fb:63:23:08:a0:1c:fe:74:39:ce:e5:4e:c0:0f:d9:9c:a9:48:
         3d:e9:72:cd:18:db:d7:2a:fb:8c:3c:92:53:e3:a9:06:da:55:
         c8:78:90:91:ed:a9:6b:95:dc:6b:e2:d7:b6:0f:4b:d6:68:2c:
         6b:74:71:5e:59:2d:5d:ae:ae:fb:a6:33:b3:b8:ef:2f:2f:4c:
         88:a7:15:f9:9c:d3:5e:42:5f:fc:18:71:62:64:70:15:4d:af:
         d4:9b:13:62:2c:b3:b7:b4:cc:41:5d:9c:bd:c1:27:ac:0d:c6:
         7c:b3:32:ac:b7:80:d6:cf:db:4a:d9:c5:53:0d:79:6f:42:ac:
         44:85:b7:66:ae:b9:7f:88:54:c9:ed:b6:17:c1:d0:06:1b:e1:
         30:19:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:02 2026 by rpki-client