Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa
File:                     3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa (raw, json)
Hash identifier:          cnrnucshQjB1HR7ilM8foFskZiCRkLLcdgQGq/I0/j4=
Subject key identifier:   C7:8B:C7:E6:E8:09:13:78:13:CD:EB:32:16:7C:D1:6C:24:41:11:B0
Certificate issuer:       /CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
Certificate serial:       0D4E792B7A7E44D28BC56B72D431DAACBCC839DE
Authority key identifier: C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa
Signing time:             Sun 03 May 2026 02:54:44 +0000
ROA not before:           Sun 03 May 2026 02:49:44 +0000
ROA not after:            Sun 02 May 2027 02:54:44 +0000
asID:                     140409
IP address blocks:        103.151.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl
                          rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4e:79:2b:7a:7e:44:d2:8b:c5:6b:72:d4:31:da:ac:bc:c8:39:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C771ADE0100457DC61EB95A71BB4E63885DC542F
        Validity
            Not Before: May  3 02:49:44 2026 GMT
            Not After : May  2 02:54:44 2027 GMT
        Subject: CN=C78BC7E6E809137813CDEB32167CD16C244111B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:04:cd:b2:ca:ff:5b:f9:1b:43:9b:df:87:
                    77:03:4e:48:aa:0a:0e:8b:25:20:c9:d4:2b:f3:76:
                    7f:6f:3e:5c:f9:7a:0f:1b:28:e3:33:65:98:a8:39:
                    74:e1:3b:49:ce:49:42:4c:49:f6:9e:9e:04:d7:de:
                    3e:01:cd:c6:82:f8:c8:33:73:ee:eb:1b:3d:7a:3f:
                    44:a4:d6:75:e4:4f:9e:dc:c8:3a:ca:ec:15:ee:72:
                    b3:68:71:36:0f:01:c0:77:e9:70:c0:52:58:d2:49:
                    f9:9a:13:20:fc:1b:81:41:2f:e7:8f:21:71:75:be:
                    17:62:0b:94:2b:71:88:2f:04:fb:57:75:57:bb:29:
                    69:8e:71:0c:90:e2:be:41:10:e2:7f:36:52:0e:29:
                    e4:15:d5:4b:ad:ba:e5:b2:91:fa:b2:07:83:6a:20:
                    bc:4b:bd:58:29:7b:5e:9f:c5:9a:cc:ed:b0:8a:52:
                    4c:a3:ee:ae:30:dd:d6:82:af:3d:18:ce:46:b1:64:
                    bd:98:2d:8d:f0:0f:3c:a2:84:98:3c:3d:22:e6:e8:
                    26:6b:9e:23:a0:10:36:4c:c0:68:0f:a5:de:53:ba:
                    69:d6:a8:f1:cf:67:b8:ef:ee:7d:35:c0:57:2a:e3:
                    f3:f3:6a:5e:ea:c8:22:b8:6a:09:e5:43:ff:06:46:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8B:C7:E6:E8:09:13:78:13:CD:EB:32:16:7C:D1:6C:24:41:11:B0
            X509v3 Authority Key Identifier:
                keyid:C7:71:AD:E0:10:04:57:DC:61:EB:95:A7:1B:B4:E6:38:85:DC:54:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/C771ADE0100457DC61EB95A71BB4E63885DC542F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C771ADE0100457DC61EB95A71BB4E63885DC542F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9d4cffe0-1f94-43d2-81ee-80030b5c3746/0/3130332e3135312e37322e302f32332d3234203d3e20313430343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:95:31:7a:24:33:8a:ef:46:4f:25:85:97:34:0c:11:79:
         3e:31:48:a4:bb:51:8a:10:d7:f0:5e:2e:1e:f8:85:53:d5:4d:
         2d:3b:79:0d:e2:6a:64:4a:7f:2f:b2:41:80:18:76:92:85:73:
         68:58:c6:7b:e4:62:a9:7e:98:23:20:b4:ce:86:98:ae:c8:87:
         50:5e:f7:e1:2d:c1:b2:47:a4:8e:51:e6:52:f8:1c:4a:57:a6:
         fe:18:38:6d:c5:43:bd:38:6f:4a:2e:c8:01:bd:74:1d:be:0b:
         2b:98:70:e4:bc:8a:68:be:b7:61:f0:0f:a2:8b:5b:43:7a:91:
         b8:d5:d6:c2:44:1c:df:74:f7:e8:06:83:4e:b6:0d:ac:ab:56:
         aa:2b:74:ca:30:d0:2b:80:9f:1a:c8:22:d4:05:da:41:bc:59:
         b8:7d:ae:b3:c0:b0:5e:20:c2:0e:77:16:ba:04:55:77:31:7e:
         fe:b9:7d:ce:e1:9a:e5:d0:9d:9c:a0:bc:e3:da:ea:cf:55:4e:
         39:7c:f0:f0:47:7c:74:f3:af:c5:3c:08:75:51:7d:4f:47:46:
         d0:cc:24:fa:fa:46:28:88:6a:9f:cf:c4:6c:0d:9b:2c:de:74:
         78:29:4f:b3:e9:f2:9f:cb:69:27:a1:12:7d:6c:3d:6f:40:29:
         f0:bf:53:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:18:52 2026 by rpki-client