Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          fH8oSgU7fmQVwzRayIdktJrCM/nMbyH0Ngj6vCl4r/k=
Subject key identifier:   DA:62:AD:B7:07:F8:68:8E:41:C0:3D:C5:CB:E8:82:09:E0:BC:20:62
Certificate issuer:       /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial:       50D5F1EAC6764B7F5CC3DD0349E833C13840777E
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:58:03 +0000
ROA not before:           Sun 03 May 2026 02:53:03 +0000
ROA not after:            Sun 02 May 2027 02:58:03 +0000
asID:                     38320
IP address blocks:        175.103.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
                          rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d5:f1:ea:c6:76:4b:7f:5c:c3:dd:03:49:e8:33:c1:38:40:77:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
        Validity
            Not Before: May  3 02:53:03 2026 GMT
            Not After : May  2 02:58:03 2027 GMT
        Subject: CN=DA62ADB707F8688E41C03DC5CBE88209E0BC2062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b6:1a:7f:8b:12:67:21:09:64:f7:1f:07:25:
                    04:40:04:dc:03:d1:ab:25:d2:34:90:79:df:6f:d4:
                    d7:12:ee:b4:17:ed:55:5e:8d:61:84:1e:35:04:79:
                    7a:55:66:23:89:5d:68:72:1f:a3:53:99:c9:3e:6d:
                    b8:7f:b5:01:4c:f3:39:71:ea:e5:af:ac:21:66:93:
                    8a:cd:2a:7a:de:12:03:a4:a2:21:cb:7c:11:42:0d:
                    31:4b:cd:13:f0:9b:4b:ab:49:98:e4:64:0d:d8:ef:
                    e5:71:0d:0b:bb:6c:ae:3f:96:2f:18:14:bf:e7:b9:
                    8d:05:45:30:ea:db:46:85:70:eb:a0:8b:08:d4:d6:
                    81:98:3d:1e:30:84:05:2f:0d:c7:9f:46:11:0d:a0:
                    d5:81:00:c3:63:c1:07:7b:99:fa:4d:96:3b:91:a5:
                    8b:89:f7:78:2b:5c:2f:8c:15:e9:14:57:c6:73:d3:
                    e7:89:71:5c:5e:59:e9:f0:90:62:6d:7e:63:a1:a1:
                    13:00:ba:4e:ef:dc:a3:13:ee:f8:0e:17:4e:95:3b:
                    d1:98:1c:bf:88:e2:fc:a5:f6:ce:36:fe:49:fe:08:
                    6d:9a:bf:29:43:4e:ea:b2:fa:08:55:42:c3:23:55:
                    72:34:e6:6b:28:3b:93:45:84:0c:c6:dd:46:cd:17:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:62:AD:B7:07:F8:68:8E:41:C0:3D:C5:CB:E8:82:09:E0:BC:20:62
            X509v3 Authority Key Identifier:
                keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33332e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:6f:06:d8:39:b9:2d:16:92:14:b2:56:5b:aa:a1:50:c2:
         2f:15:00:3b:e9:c7:9c:ce:f4:48:50:d2:82:9c:05:af:49:12:
         41:f0:38:3f:4a:cc:04:ef:00:11:6b:04:6e:59:8a:d7:0a:93:
         d9:3b:d4:98:a5:64:a1:fe:00:3a:1a:96:fc:71:7f:e8:c8:2a:
         80:9d:d0:f3:ed:1c:25:82:d3:de:85:4e:ab:ee:ed:23:2e:9f:
         90:71:34:02:a2:f9:b5:d3:02:37:a8:4e:70:37:2e:05:be:51:
         24:35:c1:ae:b9:fb:cc:06:89:82:b3:0e:03:65:65:c2:c2:8d:
         13:46:df:b0:a2:d1:14:31:4d:b9:a3:74:85:5b:33:5f:64:1b:
         f2:2f:45:22:24:21:23:d2:2e:8f:d6:be:6d:dc:a0:f7:91:80:
         f6:c6:2d:16:c0:e1:38:6c:b8:21:15:df:df:09:4b:0c:a0:fd:
         14:f5:ea:73:31:6b:c1:b8:9e:c9:4d:19:b0:93:2d:43:f5:7b:
         70:ca:b4:b4:e4:85:b7:c3:e1:a8:f1:6f:69:21:f5:ea:ac:76:
         7b:b3:89:7d:b4:ba:cf:cf:b4:d0:9f:4b:8a:1a:2e:8f:48:49:
         87:13:17:d1:fa:77:5e:ec:67:ab:c7:41:93:82:fd:47:4b:64:
         7f:43:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:09 2026 by rpki-client