Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa
File:                     3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (raw, json)
Hash identifier:          K7gLEaJOvJG1oR23N++5bronVX/UxVgeV83uSIeZkj8=
Subject key identifier:   B1:D2:F9:D8:D1:68:DD:77:0E:AC:DC:51:E2:6A:EC:C3:11:3A:6F:B2
Certificate issuer:       /CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78
Certificate serial:       31EE9EEA99D29F91A8D4C71CE853D76A89BC040B
Authority key identifier: 67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa
Signing time:             Sun 03 May 2026 03:00:32 +0000
ROA not before:           Sun 03 May 2026 02:55:32 +0000
ROA not after:            Sun 02 May 2027 03:00:32 +0000
asID:                     149744
IP address blocks:        103.187.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl
                          rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ee:9e:ea:99:d2:9f:91:a8:d4:c7:1c:e8:53:d7:6a:89:bc:04:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=678DC4E5CDEE38E92F164E31CBCF1DE281E11F78
        Validity
            Not Before: May  3 02:55:32 2026 GMT
            Not After : May  2 03:00:32 2027 GMT
        Subject: CN=B1D2F9D8D168DD770EACDC51E26AECC3113A6FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dc:3a:47:24:9e:a4:06:b2:3c:f8:d8:9b:c9:
                    9d:de:cf:24:ac:51:c6:2b:31:40:b1:9b:0e:3c:f7:
                    e8:8a:88:a7:dd:57:93:99:c7:62:f9:e8:aa:52:d5:
                    6c:a3:88:c1:57:99:d3:f1:70:03:e7:b7:4b:80:eb:
                    91:26:65:f0:16:b7:cd:28:67:22:e8:f9:d7:1b:6b:
                    af:25:db:2b:19:06:bd:ea:87:41:61:36:44:0b:cd:
                    34:a4:d8:4b:b9:14:bc:be:80:f6:8f:5a:a7:de:df:
                    78:91:27:9f:a9:5b:60:74:50:86:2d:3c:fd:8a:9d:
                    2b:c8:0d:d1:4d:1c:e0:85:35:e8:34:be:f1:0f:85:
                    28:64:dc:6d:e6:a8:b2:56:93:6a:84:44:a6:3e:2c:
                    29:b3:14:b8:0e:a7:65:13:7f:6a:ea:44:94:3b:a6:
                    ba:cb:2c:47:06:bf:30:d4:76:22:90:73:8a:7b:27:
                    3e:fc:e5:66:e4:70:44:41:6d:86:cf:8e:89:f1:98:
                    27:32:c5:b5:5a:31:2a:29:fc:9b:cd:67:91:8e:61:
                    44:5a:df:a1:21:75:cd:ab:87:5e:bf:da:10:31:9e:
                    31:29:3d:a6:86:44:72:56:c2:c9:cd:3f:5f:1f:35:
                    10:ec:c3:bc:9b:72:df:2f:97:ac:e3:3e:dc:8b:9b:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D2:F9:D8:D1:68:DD:77:0E:AC:DC:51:E2:6A:EC:C3:11:3A:6F:B2
            X509v3 Authority Key Identifier:
                keyid:67:8D:C4:E5:CD:EE:38:E9:2F:16:4E:31:CB:CF:1D:E2:81:E1:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/678DC4E5CDEE38E92F164E31CBCF1DE281E11F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:d1:fa:de:1f:89:46:26:89:cc:cc:fa:a0:de:12:99:10:
         57:8f:8b:b8:23:b7:74:ea:11:c5:a4:b5:40:ef:a0:b3:9f:fc:
         d7:57:fe:45:67:01:8e:05:00:a5:3e:10:7d:f3:f3:9b:ce:97:
         4f:dd:ab:e2:ef:22:38:70:96:38:ab:6b:c9:f8:fe:0d:97:4b:
         19:3b:e3:dc:ee:f3:51:08:89:6b:1a:36:88:fc:5f:40:58:f5:
         89:cf:33:03:05:5b:5e:c4:e0:19:7a:cd:d6:e1:8a:92:09:55:
         25:2b:f6:a9:df:80:3d:5d:16:ca:50:1a:4e:df:1f:f4:6b:8c:
         e6:b0:90:13:01:26:f1:8e:d6:ee:d4:de:5a:87:b0:c7:87:dc:
         05:41:02:47:47:ca:53:71:7c:43:83:d5:26:a7:f4:b1:ab:cd:
         76:36:4f:68:28:52:26:3d:d7:6e:2e:68:47:1e:99:1d:7d:b2:
         98:a8:40:d1:40:ad:b4:f1:1a:fb:eb:45:87:98:eb:23:5e:d5:
         fb:fd:a0:69:09:50:a4:e1:56:15:d4:49:61:cf:83:fd:4a:56:
         e1:a7:49:6a:31:bb:1c:ad:43:9e:d5:66:50:9e:87:f7:56:62:
         9b:50:29:db:03:24:da:27:2d:78:30:54:cd:46:c2:c5:59:98:
         03:d3:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:25:47 2026 by rpki-client