Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa
File:                     3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa (raw, json)
Hash identifier:          AWDTDU1uK2yBZAsT7txzvxIXXk3Q8Vz2Xvi0KaFLsOk=
Subject key identifier:   83:63:8F:94:F5:A7:18:8E:EF:F4:F2:39:9E:B2:F2:D6:F8:F0:A4:09
Certificate issuer:       /CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
Certificate serial:       72833DB2FCB30EDBB8E67CA49FAA946154EA5CC5
Authority key identifier: BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa
Signing time:             Sun 03 May 2026 02:56:59 +0000
ROA not before:           Sun 03 May 2026 02:51:59 +0000
ROA not after:            Sun 02 May 2027 02:56:59 +0000
asID:                     132647
IP address blocks:        103.19.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl
                          rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:83:3d:b2:fc:b3:0e:db:b8:e6:7c:a4:9f:aa:94:61:54:ea:5c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB576835ED8A46E30FB8DDF566ABC47765537EB6
        Validity
            Not Before: May  3 02:51:59 2026 GMT
            Not After : May  2 02:56:59 2027 GMT
        Subject: CN=83638F94F5A7188EEFF4F2399EB2F2D6F8F0A409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:d6:a9:0a:3f:0f:ee:2c:4e:9d:c8:36:da:
                    fc:42:72:88:4e:37:92:9d:73:b0:6a:e1:e8:05:6a:
                    f8:60:77:51:93:92:93:cd:eb:ea:61:ff:a5:1b:17:
                    c5:10:9a:a0:14:73:fa:02:3b:90:1e:ef:7e:94:f5:
                    6b:b8:eb:a3:50:b6:5f:c5:4c:bb:1e:ac:08:b0:b7:
                    2d:be:c9:ec:dc:d5:2f:8e:24:e2:01:e4:6e:4d:b5:
                    54:c1:5f:cd:a9:cb:f1:ff:e4:85:87:b1:00:8a:5d:
                    39:8a:33:44:5a:aa:2e:16:39:bd:a6:60:8e:f1:21:
                    6c:fe:91:79:ca:0c:17:07:31:c9:b1:27:19:5b:53:
                    2f:8d:b8:64:fe:a7:cc:e5:82:a7:e6:89:17:01:8e:
                    42:d4:31:d9:77:88:e5:23:13:f4:3f:e6:63:f2:f4:
                    67:44:9e:2c:33:de:d7:16:9c:b5:35:53:ec:4c:4e:
                    bc:b9:df:ef:98:d6:df:cd:48:c1:74:55:69:78:73:
                    11:71:e1:15:cd:45:db:7d:e9:f2:5e:0f:e8:40:51:
                    c8:b5:d4:60:a1:76:e7:a2:c5:a5:5e:5f:13:05:d7:
                    1b:f3:be:43:90:29:77:07:fb:a6:85:84:ce:6e:63:
                    5b:41:1b:86:cd:34:79:a9:1a:6e:71:b3:40:a8:4e:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:63:8F:94:F5:A7:18:8E:EF:F4:F2:39:9E:B2:F2:D6:F8:F0:A4:09
            X509v3 Authority Key Identifier:
                keyid:BB:57:68:35:ED:8A:46:E3:0F:B8:DD:F5:66:AB:C4:77:65:53:7E:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/BB576835ED8A46E30FB8DDF566ABC47765537EB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB576835ED8A46E30FB8DDF566ABC47765537EB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/3130332e31392e3137382e302f32342d3234203d3e20313332363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:23:42:44:c3:c0:50:d2:22:15:4d:ed:e2:27:0b:2b:9e:34:
         ba:0c:e0:1a:27:15:63:fa:b9:0f:94:8c:40:c0:39:0f:4f:fe:
         00:09:54:fc:98:a7:bd:b3:8f:81:e3:27:1c:bb:02:85:95:6f:
         3f:39:da:9f:5b:68:0e:d6:27:7f:c0:2e:d7:39:18:71:4e:9c:
         ff:f3:60:84:a1:da:4d:a2:cd:ac:f0:66:f0:a1:09:52:de:90:
         e2:9f:83:3c:c6:53:1e:6c:8c:c5:23:46:59:d0:36:38:86:de:
         84:91:dd:85:db:d2:5c:88:74:fc:a2:20:12:09:b3:2e:e5:88:
         88:68:cf:5b:ce:06:ab:0b:36:a8:2e:55:44:b4:65:84:b6:2f:
         1d:14:ab:b7:90:80:b0:c0:3e:9b:7a:bd:ea:df:dd:0f:2a:b7:
         43:d0:b0:f7:2f:30:91:1a:30:eb:10:2a:d5:2a:82:17:97:14:
         37:20:3f:8b:59:46:35:02:6b:fe:91:5c:06:2c:58:3d:b5:9b:
         55:7a:2d:b8:06:11:d6:da:14:e2:c4:5b:0e:30:4d:5c:67:92:
         25:ff:d1:d5:82:a9:45:da:b3:cc:95:d9:85:82:84:9c:a5:35:
         e2:cd:c6:ea:42:b8:99:33:cf:9e:80:c8:fc:68:87:e3:df:60:
         2a:84:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:06 2026 by rpki-client