Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa
File:                     3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa (raw, json)
Hash identifier:          +bhA3UYPReYDsrbCyo3nY+2634L/BbsW+oTXhT99PgM=
Subject key identifier:   67:A7:E0:C9:82:EE:6C:97:64:05:B8:61:FC:DB:8D:9C:90:31:73:45
Certificate issuer:       /CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7
Certificate serial:       690FFFF8FA90CF9CFFC9D57582F50C98AE1188DB
Authority key identifier: A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa
Signing time:             Sun 03 May 2026 03:01:22 +0000
ROA not before:           Sun 03 May 2026 02:56:22 +0000
ROA not after:            Sun 02 May 2027 03:01:22 +0000
asID:                     135483
IP address blocks:        103.76.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0f:ff:f8:fa:90:cf:9c:ff:c9:d5:75:82:f5:0c:98:ae:11:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A97A9954B3224F187A618EF2D36B911DBCA4E0E7
        Validity
            Not Before: May  3 02:56:22 2026 GMT
            Not After : May  2 03:01:22 2027 GMT
        Subject: CN=67A7E0C982EE6C976405B861FCDB8D9C90317345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:2e:c9:b1:04:5a:7b:50:0a:09:c7:5e:7c:
                    6d:02:9f:5c:2a:51:3f:e8:21:07:44:22:11:bd:44:
                    61:f0:23:d5:72:53:7d:3c:17:98:eb:31:f9:bf:11:
                    6b:c6:46:8c:e4:b2:69:55:25:87:fd:1c:d1:03:2e:
                    09:bc:94:ee:a4:b9:f7:9f:d6:79:1c:6d:bd:49:29:
                    59:c2:43:f0:d0:c8:f0:aa:b7:e5:ea:24:a0:19:4c:
                    f3:f3:42:f9:a7:aa:a5:d0:dc:43:1e:98:3a:99:7a:
                    e8:01:1d:29:80:46:dc:5d:70:a7:5c:89:5c:77:61:
                    c3:be:6b:44:b6:fd:95:6f:cf:bc:34:79:c6:57:2c:
                    bb:73:34:ca:6e:e2:cc:28:dd:eb:9b:2b:a2:36:c2:
                    9b:6e:3c:5d:b7:ec:3b:3a:f2:80:86:b5:0c:88:9c:
                    be:8f:6e:96:fa:e2:91:e5:00:2d:62:ee:8b:bf:aa:
                    a4:50:f8:27:91:bf:a8:8b:7f:41:98:b7:f1:1c:59:
                    2c:0d:16:5c:d7:1c:93:93:2f:19:03:33:85:20:ec:
                    bd:79:33:10:83:64:90:c3:c5:b0:f7:18:2e:e1:8c:
                    6b:a8:29:99:1a:5b:ed:2f:3c:0b:b1:20:d1:b3:fc:
                    69:b7:1c:1e:ee:0c:fd:ee:6b:c9:75:8b:57:e1:7c:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:E0:C9:82:EE:6C:97:64:05:B8:61:FC:DB:8D:9C:90:31:73:45
            X509v3 Authority Key Identifier:
                keyid:A9:7A:99:54:B3:22:4F:18:7A:61:8E:F2:D3:6B:91:1D:BC:A4:E0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A97A9954B3224F187A618EF2D36B911DBCA4E0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b5a73d04-214f-46b8-9746-62cde85588fa/0/3130332e37362e3230342e302f32342d3234203d3e20313335343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:6b:cd:5c:db:ec:e2:e4:6a:ab:ca:9f:bd:4e:cc:81:ae:
         44:79:85:15:2e:4f:6c:c5:aa:5f:2b:51:4e:c7:9a:b7:0e:35:
         a8:51:85:63:d6:e5:d9:dd:0d:76:03:be:cf:17:0e:30:8f:65:
         cf:fd:26:89:ed:6f:a4:42:7e:1d:6d:a3:eb:f7:36:9b:d1:2b:
         f7:e4:e2:1d:38:4c:7c:8d:d2:8d:1f:6f:d8:b3:44:32:f5:6f:
         be:89:f2:d7:62:6a:0f:51:97:73:98:49:a7:39:82:18:57:fe:
         3d:d1:a0:78:b0:45:c8:55:bf:22:d7:51:57:2c:8c:45:b4:98:
         8c:ad:e0:2c:c5:0a:c1:e2:be:fe:f6:fd:ed:a1:99:d8:87:cc:
         e9:37:97:65:42:e4:8a:db:2f:10:d1:84:99:09:c5:1d:c3:67:
         81:d6:11:87:f5:9b:20:60:f2:54:05:79:5b:a5:c9:dc:b0:30:
         88:fb:d7:8c:17:eb:2a:48:2d:5c:d3:26:6f:d4:b1:30:b1:da:
         eb:2b:d0:e8:17:70:cc:e2:c5:61:23:51:27:d5:84:5c:bd:de:
         a3:b4:52:eb:08:e2:c9:73:86:af:af:02:e5:64:f5:f1:6a:67:
         da:69:9c:81:25:3d:9b:9d:2d:34:b1:1c:29:ca:a4:b1:88:5d:
         67:62:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:55 2026 by rpki-client