Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa
File:                     3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          H4QyDpAYJgb2cSZHnPV/4PL7jlc0wOLp4dMIreHw0fQ=
Subject key identifier:   0A:3E:07:2F:5F:0B:53:02:BA:25:AF:C7:23:9A:38:A0:7E:AB:3E:E2
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       12AA3417195CFE1E2560518C938E6DE91A4A3CA7
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:57:01 +0000
ROA not before:           Sun 03 May 2026 02:52:01 +0000
ROA not after:            Sun 02 May 2027 02:57:01 +0000
asID:                     132647
IP address blocks:        103.19.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:34:17:19:5c:fe:1e:25:60:51:8c:93:8e:6d:e9:1a:4a:3c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:52:01 2026 GMT
            Not After : May  2 02:57:01 2027 GMT
        Subject: CN=0A3E072F5F0B5302BA25AFC7239A38A07EAB3EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:d7:6d:f9:c8:a4:7d:cd:9f:ab:46:88:1f:
                    d8:74:ba:3e:df:e8:0a:c1:b5:31:8a:8c:08:df:00:
                    fb:9c:e5:08:ab:03:73:e0:e6:70:44:a0:25:72:b1:
                    73:f4:84:cf:9b:93:84:e2:70:39:aa:4f:8b:ee:a1:
                    57:b8:f2:4d:f2:a3:9d:d4:f7:24:db:58:47:8e:a3:
                    0e:42:00:a6:d5:9c:97:1c:a0:0f:d2:f4:cd:9e:39:
                    70:27:ad:94:45:9f:bb:d5:62:a1:56:82:14:a8:af:
                    37:a9:e3:f6:05:82:44:fa:cf:7b:6f:0b:4f:c2:d2:
                    22:83:ae:37:e5:db:eb:26:ee:96:14:c8:e4:63:b2:
                    00:b1:12:50:b6:73:3c:88:f2:15:c7:b6:e7:93:f5:
                    93:1e:61:49:76:66:7e:dc:e2:81:56:2e:c8:49:ce:
                    e3:db:df:e9:24:96:ed:9f:31:13:3a:7d:03:c3:29:
                    ec:50:d8:cb:f6:06:a2:a7:e3:3f:4e:54:d4:3e:0c:
                    f4:d8:1f:90:07:1d:dc:c0:46:6d:a5:2b:e4:b1:49:
                    82:bf:a0:b2:26:60:d9:37:4b:74:2d:0e:9e:c0:ca:
                    aa:48:4f:bb:68:3a:9f:5b:4d:55:83:52:89:ac:62:
                    99:22:05:91:1c:e8:02:ee:08:9d:11:06:04:30:46:
                    23:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3E:07:2F:5F:0B:53:02:BA:25:AF:C7:23:9A:38:A0:7E:AB:3E:E2
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32332d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:f3:60:f3:f2:52:34:72:97:05:cd:74:93:1c:ed:e6:57:bf:
         db:f4:c3:f0:b7:01:a0:29:31:68:74:17:a1:b5:98:db:e8:3d:
         af:e1:a1:2b:b0:15:56:39:42:cc:f6:89:bb:d4:b4:c0:c0:b1:
         91:a6:8b:36:84:5f:f7:aa:6b:36:d4:25:0c:f7:ae:45:b9:c2:
         84:97:ec:b8:9a:d3:c2:46:8b:ea:df:8c:85:bd:95:35:7d:90:
         10:cc:c0:a5:e5:4c:00:e7:89:06:3b:d8:c3:6d:58:d0:d6:0c:
         7f:61:9c:ac:a4:d8:11:a6:44:73:e9:51:fd:8e:b4:5c:41:8b:
         b0:0d:2b:94:f8:70:e6:4e:01:b1:3b:ad:54:63:30:08:cb:98:
         6c:cd:23:4b:01:17:9f:08:ad:b4:a1:ff:d2:6b:7a:eb:7d:3e:
         c6:88:36:5c:19:c8:ec:9d:23:fe:f9:e9:b4:7a:03:26:7e:c9:
         5e:3d:82:1b:75:dd:43:89:ff:4b:6d:3d:6f:f8:b0:2b:51:ec:
         9b:ad:00:6a:50:40:f7:66:a0:c1:bf:47:96:41:58:7d:16:35:
         88:3a:bd:99:c6:b2:ed:66:aa:48:57:18:e8:53:d2:01:e4:1c:
         75:5f:5d:51:70:e9:aa:fe:4d:86:bf:69:ad:6f:fa:1c:9a:a8:
         f8:20:82:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:21 2026 by rpki-client