Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa
File:                     3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (raw, json)
Hash identifier:          psydRP9iI2xqdgTYldVyaNuPRMq6F5KFPK4XNBT7jw0=
Subject key identifier:   F2:81:29:27:B7:24:B2:88:86:F8:13:59:AF:0B:14:94:E6:6E:98:20
Certificate issuer:       /CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE
Certificate serial:       74FE14F636289A868693E45C52667D8EE005653E
Authority key identifier: 42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa
Signing time:             Sun 03 May 2026 02:53:13 +0000
ROA not before:           Sun 03 May 2026 02:48:13 +0000
ROA not after:            Sun 02 May 2027 02:53:13 +0000
asID:                     147152
IP address blocks:        103.177.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl
                          rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fe:14:f6:36:28:9a:86:86:93:e4:5c:52:66:7d:8e:e0:05:65:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4272D349E04B3A5D02561EE19295E0FD26B37CBE
        Validity
            Not Before: May  3 02:48:13 2026 GMT
            Not After : May  2 02:53:13 2027 GMT
        Subject: CN=F2812927B724B28886F81359AF0B1494E66E9820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e3:b7:01:df:6e:d9:ed:02:ed:d4:79:86:66:
                    c5:1a:25:22:62:02:c1:0e:33:3c:c6:68:94:ca:dd:
                    f5:d7:49:14:b6:7b:de:0b:25:85:69:1f:32:9b:0b:
                    59:25:f2:e1:36:46:1d:5e:31:7a:f8:59:7e:ff:30:
                    7d:38:fd:ca:99:3d:fb:a6:24:2d:4e:72:78:22:b9:
                    0e:87:6d:3a:27:7b:a0:51:98:79:27:6c:67:ea:de:
                    91:36:9b:63:4a:5c:21:a9:7d:ba:f4:eb:69:55:ec:
                    80:5f:69:60:5c:45:18:33:07:7b:c5:e9:f8:a2:8b:
                    62:dc:11:ae:f1:8f:e5:8a:ba:25:c1:84:c4:50:b6:
                    32:b0:22:e2:eb:a5:d5:66:cf:f5:f0:48:2b:07:69:
                    5e:63:07:ec:d9:75:25:08:7f:a6:92:12:1b:fa:66:
                    7e:9a:75:73:d7:c5:cc:76:ef:ca:7e:4d:ae:d4:f5:
                    57:60:6e:f7:cc:a8:dc:92:fd:ea:75:06:e8:26:10:
                    2b:42:e9:67:39:eb:37:b0:80:e0:c8:01:2f:56:c6:
                    ae:bc:5b:1a:5a:d9:16:e1:b2:5b:e7:08:22:27:3e:
                    15:bf:4d:3b:4f:95:70:98:bf:7c:77:7f:a1:9b:9d:
                    0e:30:6b:cd:d3:22:aa:b1:c4:b8:51:74:87:bd:96:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:29:27:B7:24:B2:88:86:F8:13:59:AF:0B:14:94:E6:6E:98:20
            X509v3 Authority Key Identifier:
                keyid:42:72:D3:49:E0:4B:3A:5D:02:56:1E:E1:92:95:E0:FD:26:B3:7C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/4272D349E04B3A5D02561EE19295E0FD26B37CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4272D349E04B3A5D02561EE19295E0FD26B37CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:62:c4:55:73:bc:bc:d8:c2:d1:3a:e6:1a:fc:6d:05:dc:
         6b:e9:28:e4:95:c7:28:6a:68:b1:75:d9:9b:8a:9c:e8:92:c3:
         32:45:84:23:bb:92:19:ba:6e:48:58:14:9c:3e:8c:44:0f:ab:
         c4:a0:e1:4a:9e:2d:43:69:87:8f:3a:41:e9:c9:67:dd:24:a1:
         4c:75:be:82:37:8d:76:57:f9:ea:58:07:8a:ca:ba:cd:72:31:
         8f:37:77:3f:0f:fa:5d:67:e1:57:74:f0:91:98:93:98:e9:0a:
         8b:94:25:16:72:84:58:ed:da:35:e2:0a:56:e5:eb:35:d4:89:
         86:df:6a:ee:f2:a4:2c:f6:b2:cc:33:02:8c:24:73:e5:81:2e:
         10:d0:d7:fb:79:7f:99:c8:d9:dd:c3:35:fe:ea:fb:cf:d7:6c:
         e4:5e:c5:08:95:25:ab:a2:81:b0:67:0f:ba:32:5d:ba:c7:44:
         c4:60:e1:7f:cb:9a:c8:ba:81:d6:15:c6:4b:c5:ba:d8:bb:5e:
         11:d6:09:3e:c1:fd:89:ce:2f:23:56:d3:9c:f2:b9:28:ca:40:
         70:73:c1:3e:a2:47:c5:d9:47:29:db:86:be:2e:4e:ec:ed:cd:
         b3:00:24:d0:0b:52:92:6a:ad:bd:57:1e:2f:fc:6d:98:44:53:
         6c:67:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:18 2026 by rpki-client