Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa
File:                     3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (raw, json)
Hash identifier:          5ruPZLXOx5EYeaSuNCjm5La9e7w8hzod2dtunu/cpyk=
Subject key identifier:   6F:C3:DC:F9:E9:EA:F4:CD:23:05:00:A0:C5:F5:BE:29:05:05:76:26
Certificate issuer:       /CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
Certificate serial:       49CD778019729E265CCEAF647EAEC11C5CD96FD4
Authority key identifier: 47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa
Signing time:             Sun 03 May 2026 02:56:48 +0000
ROA not before:           Sun 03 May 2026 02:51:48 +0000
ROA not after:            Sun 02 May 2027 02:56:48 +0000
asID:                     135450
IP address blocks:        103.77.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl
                          rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cd:77:80:19:72:9e:26:5c:ce:af:64:7e:ae:c1:1c:5c:d9:6f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0
        Validity
            Not Before: May  3 02:51:48 2026 GMT
            Not After : May  2 02:56:48 2027 GMT
        Subject: CN=6FC3DCF9E9EAF4CD230500A0C5F5BE2905057626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:91:18:f5:4f:9f:dc:bd:57:83:27:e7:20:
                    30:0b:79:3d:aa:54:73:b5:6a:a9:66:08:9e:9b:3f:
                    99:9e:23:3a:af:49:95:5e:e9:26:30:1e:d0:8f:c0:
                    99:06:12:9e:53:3b:5a:4c:90:9b:1d:e5:d6:41:6e:
                    8d:39:5b:7f:30:10:d2:0c:c2:69:ce:22:af:1e:9d:
                    35:f0:18:c5:21:20:dc:b3:a6:55:7e:ab:7f:7c:37:
                    22:fd:87:75:e9:73:7b:a6:31:a9:7e:71:79:e9:63:
                    2b:5f:53:db:a5:fa:f3:76:ea:5c:26:e1:99:36:c1:
                    50:7f:56:a1:08:e5:2b:91:83:bf:bb:87:77:d9:fa:
                    56:f9:7e:e9:78:58:34:4e:bb:c1:6f:9c:db:59:3a:
                    03:73:14:0e:28:06:5e:44:c4:aa:25:62:a4:cf:b0:
                    d0:e9:a1:82:09:7f:65:8b:b2:12:43:e0:ef:a9:6e:
                    18:28:62:98:f4:86:6a:59:14:fc:1c:c6:c4:10:b8:
                    98:5b:0a:8c:a8:c3:52:3c:78:f6:86:31:de:6c:d1:
                    f5:d2:53:36:44:17:fa:62:04:4e:1e:e7:df:2b:f1:
                    90:62:1d:47:1c:9e:28:6a:1c:43:ed:fb:59:4c:7c:
                    fc:8d:36:e2:6b:f9:0b:a6:d3:b0:59:10:0f:9e:4d:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:DC:F9:E9:EA:F4:CD:23:05:00:A0:C5:F5:BE:29:05:05:76:26
            X509v3 Authority Key Identifier:
                keyid:47:EC:88:4D:5F:79:35:82:3E:07:4E:6D:CD:D2:B2:B7:5A:B4:CB:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EC884D5F7935823E074E6DCDD2B2B75AB4CBA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:6f:95:ea:1d:b9:a6:1f:0c:7a:72:54:1b:ce:59:be:af:4d:
         62:83:aa:5f:92:54:a9:f4:57:5e:3b:a7:47:b7:6f:be:b1:53:
         8c:71:ed:8a:01:06:de:ef:c6:53:3b:0b:b1:b8:55:cb:51:55:
         c8:f2:1d:0d:6b:96:3d:43:77:fa:83:4f:61:2c:00:14:cc:25:
         5d:f7:53:72:98:a0:80:e3:72:27:35:ef:79:e6:fd:5c:5e:2a:
         13:9b:e4:db:3f:54:dc:b6:af:a5:de:2c:a2:fc:db:92:bc:99:
         76:a0:be:6f:0e:01:cf:2e:1f:b4:02:59:a4:57:c1:47:a5:05:
         c8:80:41:d2:ae:a7:94:0f:8d:37:a0:24:24:87:d1:b3:ae:49:
         f2:64:82:b6:59:c2:71:ee:01:08:81:09:9d:44:13:fc:53:81:
         53:c0:3d:29:02:83:54:af:0c:b6:6e:b5:bd:81:a6:ab:1f:7c:
         6d:19:eb:c5:d4:ba:15:a5:2b:db:80:a2:eb:a7:a9:7a:63:7a:
         c1:b3:bc:cb:b2:70:c6:d5:cb:50:6a:0c:d4:c0:88:4b:3c:9a:
         9d:8f:34:63:d7:ad:de:b5:8f:0b:8f:47:bc:15:10:9d:00:ab:
         fc:f8:06:e3:58:f7:04:65:13:4c:ae:42:22:84:d8:6d:1f:d4:
         a8:f4:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:15 2026 by rpki-client