Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa
File:                     3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa (raw, json)
Hash identifier:          /gZ4/45D54iPNl3rFwLqcXjfv+fGeCZ/kGOEYCstAaw=
Subject key identifier:   A7:56:9A:C2:83:23:E3:22:F1:92:3B:BC:CC:2D:9B:D7:D6:B5:EB:50
Certificate issuer:       /CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
Certificate serial:       3307FA64F99B304894896A87FF0DF658EB848826
Authority key identifier: 24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa
Signing time:             Sun 03 May 2026 02:49:58 +0000
ROA not before:           Sun 03 May 2026 02:44:58 +0000
ROA not after:            Sun 02 May 2027 02:49:58 +0000
asID:                     137334
IP address blocks:        103.112.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl
                          rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:07:fa:64:f9:9b:30:48:94:89:6a:87:ff:0d:f6:58:eb:84:88:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2479BECD79D87972D2E64A75818044EA49B2F7AB
        Validity
            Not Before: May  3 02:44:58 2026 GMT
            Not After : May  2 02:49:58 2027 GMT
        Subject: CN=A7569AC28323E322F1923BBCCC2D9BD7D6B5EB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:ae:99:d6:84:c3:b3:13:77:e9:36:28:2a:
                    ba:25:35:8a:a9:42:68:e0:3c:e0:b8:c9:f2:2b:d8:
                    48:60:be:68:c6:5e:4c:c3:da:7e:3b:81:f8:54:54:
                    2e:8e:1b:6c:a5:ea:1e:25:8f:60:67:53:62:9e:9f:
                    47:20:91:b6:6a:c7:41:30:25:39:78:e6:45:ba:4e:
                    94:59:da:a6:57:06:b6:d3:2d:00:7e:77:de:ee:74:
                    f2:11:8f:6c:aa:5c:61:cb:eb:47:31:a3:24:89:8e:
                    8a:03:7d:89:69:9f:6c:81:0d:86:2b:dd:83:6a:f4:
                    0a:7e:71:d7:9e:29:a2:d0:a8:14:96:4a:7e:2e:31:
                    f3:04:17:00:c5:ac:dd:16:ef:cd:12:96:8b:b5:9f:
                    23:b6:dd:ed:d8:b9:88:79:e8:9e:51:7c:d0:3a:1f:
                    2e:ed:1f:6f:70:1c:ef:cf:13:69:32:b4:0b:3d:3c:
                    f3:b8:4f:6e:87:13:29:15:6b:0a:82:39:7c:7c:f1:
                    e4:bb:f8:df:a4:e3:56:8c:92:94:24:f1:c1:77:39:
                    b0:ee:78:48:d9:72:0a:71:8f:d6:97:8a:d9:4f:28:
                    05:bc:f9:29:57:34:a4:5b:21:e2:ea:27:79:ec:5e:
                    2d:59:8a:f4:d3:ce:0f:9d:72:bd:28:f0:2b:a8:b2:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:9A:C2:83:23:E3:22:F1:92:3B:BC:CC:2D:9B:D7:D6:B5:EB:50
            X509v3 Authority Key Identifier:
                keyid:24:79:BE:CD:79:D8:79:72:D2:E6:4A:75:81:80:44:EA:49:B2:F7:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/2479BECD79D87972D2E64A75818044EA49B2F7AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2479BECD79D87972D2E64A75818044EA49B2F7AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/3130332e3131322e3134352e302f32342d3234203d3e20313337333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:77:8b:c9:3d:2a:4a:c1:0a:bf:fb:96:5f:cf:88:bf:88:9a:
         52:4e:91:c1:87:45:39:8f:bc:e8:95:ce:71:c2:69:6c:f8:ad:
         88:de:c4:5f:4a:f4:97:11:1d:34:eb:01:10:9a:d1:55:11:d6:
         cf:e6:8f:77:d7:b0:16:b5:d8:9e:81:a9:91:64:32:90:8d:93:
         e1:91:da:63:d1:76:27:b2:1a:69:52:03:5c:84:a6:6c:32:c3:
         9a:73:0d:47:b4:39:03:bf:45:29:48:cb:96:aa:80:e1:2b:d0:
         3c:4b:5a:05:b2:5b:e6:c8:5f:71:26:bb:f3:25:39:87:70:55:
         5f:04:b2:52:b8:cb:9e:7e:0e:8c:bc:18:d4:62:b0:dd:f0:38:
         9b:4c:5a:29:aa:26:01:ee:6a:17:7f:f5:f9:c7:c2:46:fa:05:
         c5:8f:5e:30:1f:59:ec:a6:c1:a5:54:94:53:28:84:db:7f:17:
         66:8d:8f:91:c5:f5:54:18:b4:ec:1c:2e:5b:20:65:6c:2e:81:
         8d:28:95:9b:08:a0:06:be:85:08:c6:ff:0a:37:04:3a:73:c5:
         fb:92:5b:ad:3d:31:8d:65:5c:90:db:e2:5f:0b:1e:95:74:59:
         67:2d:b3:b1:59:2e:77:dd:34:38:2e:92:b6:43:48:d8:03:ac:
         c4:dc:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:49 2026 by rpki-client