Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          iNJDLui3MvH+G4nBQHtpKPOOwaP9++CI/XGWFFMM0oA=
Subject key identifier:   69:A3:BE:EC:76:FD:6F:E4:8D:28:A2:ED:7B:F3:FF:69:E2:BD:6F:43
Certificate issuer:       /CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01
Certificate serial:       5252A40C51972C54174B09C1EC3041761AFD666C
Authority key identifier: 7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 02:54:40 +0000
ROA not before:           Sun 03 May 2026 02:49:40 +0000
ROA not after:            Sun 02 May 2027 02:54:40 +0000
asID:                     131111
IP address blocks:        103.177.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl
                          rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:52:a4:0c:51:97:2c:54:17:4b:09:c1:ec:30:41:76:1a:fd:66:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01
        Validity
            Not Before: May  3 02:49:40 2026 GMT
            Not After : May  2 02:54:40 2027 GMT
        Subject: CN=69A3BEEC76FD6FE48D28A2ED7BF3FF69E2BD6F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:3b:d6:c4:24:c4:8c:fe:37:f1:4b:ab:c1:
                    9b:6c:26:9b:95:ee:3e:bb:76:cb:5d:12:a2:56:99:
                    19:fe:d1:f3:e2:7b:32:90:38:e7:22:65:ce:56:02:
                    2d:77:de:1b:8c:01:29:45:1c:7b:84:eb:56:99:bd:
                    1d:97:9b:35:96:54:12:a4:20:b3:d5:41:fb:90:13:
                    9b:69:fb:c0:49:b0:65:54:d8:11:7c:5a:04:a5:e3:
                    0a:b4:b8:83:64:5a:8d:a7:95:4f:1d:0e:ce:74:39:
                    e5:2c:a4:9d:0f:ee:4b:39:92:55:97:62:fb:35:25:
                    4d:9c:ec:d1:28:77:dd:ee:e0:9c:81:84:c7:d3:46:
                    a8:22:ea:a7:c5:30:54:28:0a:8a:47:b9:46:5e:63:
                    02:76:96:e9:cb:54:2f:9e:b2:b4:9c:03:ec:c8:25:
                    fb:90:69:13:b6:c8:53:b9:d6:13:77:88:45:ae:39:
                    51:fa:ef:00:22:f3:92:21:92:6e:cc:ad:52:eb:d0:
                    57:af:30:a7:40:ad:43:f6:e9:b5:0d:16:8a:f7:03:
                    63:11:59:98:22:7d:e9:85:33:69:eb:ee:9e:d8:99:
                    e8:bb:3c:ab:52:fe:db:e5:d0:20:2e:80:1a:91:13:
                    d2:99:82:50:0e:96:04:fa:07:86:0c:6e:1e:9d:08:
                    09:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:BE:EC:76:FD:6F:E4:8D:28:A2:ED:7B:F3:FF:69:E2:BD:6F:43
            X509v3 Authority Key Identifier:
                keyid:7F:5A:37:E4:2E:0F:2B:7D:7D:44:5E:64:D5:8D:13:F9:D4:FF:FA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7F5A37E42E0F2B7D7D445E64D58D13F9D4FFFA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9ccc5f64-ed62-4848-8c38-42df48e34bb6/0/3130332e3137372e39302e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:47:18:75:ea:f9:79:3e:4c:64:be:a4:e0:34:42:88:e6:5e:
         f5:b2:e1:5c:09:a0:51:5e:6a:8e:e4:90:84:50:7f:09:59:62:
         e4:4f:f8:db:8c:c1:e5:92:3e:44:63:69:d0:11:ba:be:d6:eb:
         a5:1c:ac:6d:70:66:43:d9:3a:af:08:0c:26:2b:58:91:bf:c0:
         ca:e3:86:78:60:c1:38:97:c8:68:c4:f4:1e:14:af:41:37:e1:
         74:7b:85:86:7c:6a:c7:c2:66:45:f0:a8:3b:66:ad:75:de:a2:
         44:a8:7d:32:b8:63:1e:3a:91:3e:43:73:29:25:f2:d5:17:ce:
         61:cb:37:7b:c1:60:f5:13:7f:fa:51:72:e4:2a:da:fd:a3:fe:
         d2:66:d9:22:21:77:59:21:23:f3:dc:56:00:a9:41:15:8c:6f:
         6f:fb:db:ec:a3:e9:d4:57:09:65:51:b6:30:71:1e:d7:d7:f9:
         33:73:ea:d4:28:1e:fd:28:09:99:48:58:4d:3f:99:04:82:04:
         a9:2c:6c:ff:27:03:fe:a3:0a:66:00:aa:05:5a:f1:45:8f:b4:
         37:cd:a4:02:52:9f:15:16:ee:a5:ff:3b:58:5e:ab:ee:a5:2e:
         fc:81:2b:19:7e:96:e4:b6:2c:db:44:20:e0:91:b5:f4:3e:ee:
         e1:ec:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:48 2026 by rpki-client