Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa
File:                     3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          qw6OlEu48FrPsEmKgwHPSjOidfOJLUIet7s/2iStFrA=
Subject key identifier:   F1:26:44:D1:2D:11:67:3D:65:89:FA:25:F2:42:97:5C:B1:1D:65:90
Certificate issuer:       /CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
Certificate serial:       78783F1FC8D43E48C23758E03A8898C8FB085748
Authority key identifier: EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa
Signing time:             Sun 03 May 2026 02:57:37 +0000
ROA not before:           Sun 03 May 2026 02:52:37 +0000
ROA not after:            Sun 02 May 2027 02:57:37 +0000
asID:                     135477
IP address blocks:        103.76.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl
                          rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:78:3f:1f:c8:d4:3e:48:c2:37:58:e0:3a:88:98:c8:fb:08:57:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAF1BBC2E7852A08EC9726DF037B7A90020F613C
        Validity
            Not Before: May  3 02:52:37 2026 GMT
            Not After : May  2 02:57:37 2027 GMT
        Subject: CN=F12644D12D11673D6589FA25F242975CB11D6590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:fb:16:c7:99:59:0e:a9:4e:b8:93:4c:87:
                    e3:a9:a7:2f:38:24:5a:49:40:c7:77:d0:ff:66:d7:
                    d0:79:3e:e8:5e:53:51:3f:fc:d9:90:97:0c:3f:16:
                    a2:2c:42:49:ff:a0:38:42:e7:c5:3e:50:38:1a:a0:
                    02:c5:2d:40:d5:cf:86:1a:1c:18:14:86:3b:cb:ce:
                    8c:27:0c:60:ca:f1:b4:d6:a6:af:78:42:bd:41:ab:
                    08:fe:7a:ed:55:0e:cf:07:b9:6a:16:df:83:30:9e:
                    be:24:4c:70:12:7b:1b:cf:2c:74:be:fa:a4:74:c3:
                    a6:08:32:24:4a:a0:16:bb:ad:e1:b2:81:32:2b:c5:
                    ee:5c:69:9e:bc:0e:a8:28:09:15:aa:a4:4e:e2:99:
                    84:3c:9f:8d:32:5e:bb:30:11:2d:9d:13:5a:1e:5e:
                    19:d0:8b:98:db:4b:cb:23:1e:5a:23:51:9a:5c:7e:
                    20:89:7d:93:0c:9d:e7:96:fa:b0:26:23:59:44:eb:
                    b7:89:17:9d:fe:54:40:3a:9d:d9:f6:7a:87:ac:bb:
                    58:c8:fd:66:b9:f9:da:70:93:35:ac:a2:dd:89:80:
                    fd:78:e2:1e:0e:59:5a:a8:ca:1c:78:93:11:67:99:
                    66:88:18:07:cf:4d:03:3b:4b:2e:4d:6d:8e:af:0f:
                    f3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:26:44:D1:2D:11:67:3D:65:89:FA:25:F2:42:97:5C:B1:1D:65:90
            X509v3 Authority Key Identifier:
                keyid:EA:F1:BB:C2:E7:85:2A:08:EC:97:26:DF:03:7B:7A:90:02:0F:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAF1BBC2E7852A08EC9726DF037B7A90020F613C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e37362e3135312e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:1b:b1:3e:5b:45:a6:2a:41:bb:8a:7e:b0:24:27:e8:21:
         04:e7:56:51:2b:9e:64:cf:c4:83:17:70:c7:71:45:e6:68:d1:
         71:75:06:d4:dc:29:93:6b:ab:eb:0b:f3:fb:6f:b1:6b:0a:ea:
         09:0d:72:e8:62:bd:97:30:34:14:ca:22:12:39:f1:de:97:7b:
         10:37:b4:76:0d:36:63:03:59:92:b6:af:dc:8d:85:cb:76:91:
         1f:87:36:f4:a1:ef:77:8b:be:70:31:0b:a5:0a:4a:5e:b2:de:
         ab:e4:c7:1a:b0:cf:67:46:59:1c:8a:d4:0e:60:d3:ec:08:01:
         b8:b5:fd:6a:4a:e1:1b:58:97:79:96:cf:51:6c:eb:5d:22:cc:
         e8:93:23:6b:d5:d4:7e:9b:66:b8:d5:cb:2c:22:7f:54:bc:53:
         d8:c9:97:5b:07:d8:12:7b:99:68:db:eb:34:f4:70:6a:0d:6c:
         bc:94:7c:15:76:2f:40:8a:ab:d0:25:fe:56:86:3e:13:09:14:
         dc:9d:97:af:88:b3:da:25:78:aa:f7:98:a2:c2:39:b2:af:6a:
         a9:6f:58:7a:91:cb:25:f5:4f:cd:e2:75:f4:ed:fa:5c:0f:38:
         30:0b:5e:4f:ba:08:da:12:fe:f4:db:ec:d6:e7:e8:6c:5e:17:
         11:ed:e3:7b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeHg/H8jUPkjCN1jgOoiYyPsIV0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFGMUJCQzJFNzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAw
MjBGNjEzQzAeFw0yNjA1MDMwMjUyMzdaFw0yNzA1MDIwMjU3MzdaMDMxMTAvBgNV
BAMTKEYxMjY0NEQxMkQxMTY3M0Q2NTg5RkEyNUYyNDI5NzVDQjExRDY1OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrV/sWx5lZDqlOuJNMh+Oppy84
JFpJQMd30P9m19B5PuheU1E//NmQlww/FqIsQkn/oDhC58U+UDgaoALFLUDVz4Ya
HBgUhjvLzownDGDK8bTWpq94Qr1Bqwj+eu1VDs8HuWoW34Mwnr4kTHASexvPLHS+
+qR0w6YIMiRKoBa7reGygTIrxe5caZ68DqgoCRWqpE7imYQ8n40yXrswES2dE1oe
XhnQi5jbS8sjHlojUZpcfiCJfZMMneeW+rAmI1lE67eJF53+VEA6ndn2eoesu1jI
/Wa5+dpwkzWsot2JgP144h4OWVqoyhx4kxFnmWaIGAfPTQM7Sy5NbY6vD/NNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU8SZE0S0RZz1lifol8kKXXLEdZZAwHwYDVR0j
BBgwFoAU6vG7wueFKgjslybfA3t6kAIPYTwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTdmZGY0M2UtNGE0Yy00ZGJjLWI3ODUtZGQ3Y2JmMWE2N2I3LzAvRUFGMUJCQzJF
Nzg1MkEwOEVDOTcyNkRGMDM3QjdBOTAwMjBGNjEzQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUYxQkJDMkU3ODUyQTA4RUM5NzI2REYwMzdCN0E5MDAyMEY2
MTNDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E3ZmRmNDNlLTRhNGMtNGRiYy1i
Nzg1LWRkN2NiZjFhNjdiNy8wLzMxMzAzMzJlMzczNjJlMzEzNTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0yXMA0GCSqG
SIb3DQEBCwUAA4IBAQAjHhuxPltFpipBu4p+sCQn6CEE51ZRK55kz8SDF3DHcUXm
aNFxdQbU3CmTa6vrC/P7b7FrCuoJDXLoYr2XMDQUyiISOfHel3sQN7R2DTZjA1mS
tq/cjYXLdpEfhzb0oe93i75wMQulCkpest6r5McasM9nRlkcitQOYNPsCAG4tf1q
SuEbWJd5ls9RbOtdIszokyNr1dR+m2a41cssIn9UvFPYyZdbB9gSe5lo2+s09HBq
DWy8lHwVdi9AiqvQJf5Whj4TCRTcnZeviLPaJXiq95iiwjmyr2qpb1h6kcsl9U/N
4nX07fpcDzgwC15PugjaEv702+zW5+hsXhcR7eN7
-----END CERTIFICATE-----
Generated at Wed May 13 01:41:30 2026 by rpki-client