Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          zQ39zo17bNTdHhQWmkLn9luFrVhzUw3k/+vmz2gMem8=
Subject key identifier:   2B:38:C5:31:45:CF:35:3C:4D:1B:18:8B:29:A0:26:E1:55:17:F2:23
Certificate issuer:       /CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
Certificate serial:       5DE128B1543C20B93C64CEE22C787E1F12696F07
Authority key identifier: 1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa
Signing time:             Sun 03 May 2026 02:57:59 +0000
ROA not before:           Sun 03 May 2026 02:52:59 +0000
ROA not after:            Sun 02 May 2027 02:57:59 +0000
asID:                     38320
IP address blocks:        175.103.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl
                          rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e1:28:b1:54:3c:20:b9:3c:64:ce:e2:2c:78:7e:1f:12:69:6f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD
        Validity
            Not Before: May  3 02:52:59 2026 GMT
            Not After : May  2 02:57:59 2027 GMT
        Subject: CN=2B38C53145CF353C4D1B188B29A026E15517F223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:17:1c:0d:ce:a0:8b:35:ca:9f:c8:b9:e9:
                    11:e0:d6:4a:91:1c:e1:6d:d7:bd:2a:48:5f:2c:12:
                    7a:5d:0c:df:dd:43:53:fc:b0:f2:75:ba:a0:1a:70:
                    77:33:a7:20:8e:c7:2a:dd:f7:e3:4c:e6:21:7d:85:
                    02:bd:58:b8:c0:6c:6b:fd:b0:ad:79:0f:c0:7c:3d:
                    e2:f6:e4:b9:b9:c0:23:81:99:5a:21:49:20:1b:2c:
                    fc:34:9b:ff:f8:05:00:68:4c:53:ea:4e:00:9b:eb:
                    34:5f:b7:34:ea:4d:4a:a6:4c:cd:be:fd:25:35:09:
                    8f:2c:01:e0:b9:09:03:d5:2d:d2:aa:b2:fa:a8:82:
                    e8:cf:5a:d8:08:e4:84:30:75:46:bf:ba:0e:67:e1:
                    1f:50:c0:47:01:9d:b8:24:fc:9b:0a:66:92:67:67:
                    de:c5:ae:9a:f7:61:02:47:e3:c7:2c:b5:a2:70:73:
                    fb:2b:1d:66:32:69:77:80:1d:fc:11:65:a0:b5:4b:
                    64:be:1a:44:70:63:17:5d:c0:64:dd:52:5e:a0:a7:
                    be:06:19:aa:65:c0:7d:af:80:39:02:8f:93:dd:b2:
                    33:77:c6:3b:3e:a0:e6:34:34:19:e8:92:c1:83:58:
                    5a:61:9c:96:2a:85:cd:a6:1b:24:22:96:1f:28:33:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:C5:31:45:CF:35:3C:4D:1B:18:8B:29:A0:26:E1:55:17:F2:23
            X509v3 Authority Key Identifier:
                keyid:1D:AC:DC:41:C2:8C:E5:C3:8F:42:51:C6:14:DE:10:0A:3F:1E:FC:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1DACDC41C28CE5C38F4251C614DE100A3F1EFCAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e35372e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:2d:3a:88:72:f2:8d:24:fa:54:7c:ce:34:ee:e8:0f:0c:c8:
         b5:ea:05:fe:56:92:a1:b3:66:4b:da:4d:01:fc:1b:68:36:ac:
         1a:0d:fa:2e:f6:13:99:e2:f9:6a:97:15:27:94:69:9e:ea:a2:
         b9:9d:13:ed:4c:dc:e5:12:5e:96:2a:71:1a:09:9c:d5:7d:bd:
         ca:a3:42:c0:da:89:19:b0:25:0d:e2:9a:aa:33:79:e6:1a:68:
         4f:e2:5f:4c:1c:26:73:6b:34:bf:f7:4c:8c:4d:a4:4d:f3:5d:
         1c:92:02:cb:a4:18:ed:16:46:43:92:16:df:c5:85:3a:46:4b:
         8d:e7:39:a6:3f:8e:7e:4b:87:30:5c:2d:e2:52:2c:47:49:01:
         14:c9:20:2d:9a:73:7d:b7:cd:ca:9d:a6:84:78:63:26:5a:8f:
         e5:bc:09:b1:17:59:10:ac:4d:d1:6d:25:51:12:0e:1d:cc:14:
         d7:c4:6e:06:44:f9:90:86:1a:06:bc:f8:aa:e3:7d:ec:50:c7:
         47:24:de:29:a1:ae:ef:da:e8:6c:6f:f2:0a:82:af:f4:e9:fd:
         6a:3d:49:57:4f:07:d4:93:ab:5a:10:fb:1b:f1:68:f3:39:5b:
         7b:5b:e1:28:40:a0:91:20:44:d7:2e:54:95:32:eb:bb:90:16:
         39:57:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:45 2026 by rpki-client