Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
File:                     3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (raw, json)
Hash identifier:          SJt1SBaXEP9+A3/U6mnd55r9+cQvaamR3U/aBvUPC3E=
Subject key identifier:   76:D4:85:B4:A5:16:F2:6C:CD:12:F1:4F:22:85:FE:63:41:74:9C:9B
Certificate issuer:       /CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
Certificate serial:       296056B881923A14D9793AF04FD2C50F9CBA70C5
Authority key identifier: DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa
Signing time:             Sun 03 May 2026 03:01:59 +0000
ROA not before:           Sun 03 May 2026 02:56:59 +0000
ROA not after:            Sun 02 May 2027 03:01:59 +0000
asID:                     142374
IP address blocks:        103.171.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl
                          rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:60:56:b8:81:92:3a:14:d9:79:3a:f0:4f:d2:c5:0f:9c:ba:70:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A
        Validity
            Not Before: May  3 02:56:59 2026 GMT
            Not After : May  2 03:01:59 2027 GMT
        Subject: CN=76D485B4A516F26CCD12F14F2285FE6341749C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:67:a5:bd:28:85:b0:23:02:05:1a:08:77:
                    d0:99:55:28:fb:e1:65:09:2c:ec:7f:8d:3c:a5:88:
                    db:a9:6b:06:10:7d:68:b5:89:e1:ff:2b:68:d1:38:
                    b5:91:fe:c6:f5:71:b3:71:08:f0:5e:75:7c:32:ae:
                    9e:d9:a8:d9:9b:97:57:c7:eb:81:c2:d8:ab:7b:6b:
                    a7:44:d6:af:5b:3d:32:44:f2:68:6b:30:04:e0:33:
                    87:ad:64:b8:71:6d:1c:99:f2:33:ee:c8:f8:71:45:
                    74:bd:2a:d1:b8:4f:eb:d2:e1:06:df:ec:ae:aa:ab:
                    5e:ae:a0:3a:4c:5e:a9:5b:ab:6f:11:24:d9:2f:cf:
                    3d:ea:6c:ba:6a:2f:36:32:50:e6:2f:43:7b:c5:2d:
                    06:ee:2b:87:1e:8a:69:c7:41:94:d9:f6:3e:25:14:
                    13:b6:60:36:dd:b0:bb:4a:93:e9:85:cd:b1:7e:3e:
                    b5:95:e6:77:03:f7:c8:82:5f:7e:5e:b0:d2:ff:ca:
                    d4:5d:d6:1e:03:4a:dd:ca:19:25:85:3a:52:67:3d:
                    44:75:a0:41:37:3a:aa:bc:2d:0f:03:4f:99:c1:c2:
                    a4:89:fd:27:8c:2a:c7:3b:e4:eb:1e:14:7a:0a:5c:
                    69:da:99:ce:13:7d:4a:0c:3c:5a:8b:9d:30:b9:4c:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D4:85:B4:A5:16:F2:6C:CD:12:F1:4F:22:85:FE:63:41:74:9C:9B
            X509v3 Authority Key Identifier:
                keyid:DE:7C:DE:1E:AB:9B:0E:FB:E8:0E:07:87:47:EE:60:FD:AE:F8:FE:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE7CDE1EAB9B0EFBE80E078747EE60FDAEF8FE2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f7:dc:8a:9b:09:08:0f:47:98:b5:63:88:f5:e7:c0:46:e1:
         cb:8e:46:a5:5d:43:3c:bd:53:1e:8c:0c:3d:42:60:07:ae:2a:
         70:88:f7:ae:3e:88:0e:e4:f3:1a:a4:23:6d:89:58:ed:fd:15:
         5a:31:5f:c6:8a:af:af:2e:d1:7d:87:b6:19:43:92:ef:b9:1b:
         3e:f8:52:e2:6a:1d:22:26:0e:bc:0a:b9:e4:6c:2c:2d:8b:f1:
         14:db:6c:04:74:4b:b6:fa:20:d3:4e:34:89:63:5a:b8:5e:f1:
         e3:d1:db:eb:6c:8d:be:86:3b:2d:5b:b8:21:df:a6:97:c8:67:
         b4:b9:6c:c8:1e:0d:1f:a1:c5:8e:0c:2b:e4:36:e0:7b:da:ec:
         44:20:fe:d7:fd:1f:75:98:5a:9e:d8:46:d5:a7:f9:65:b5:69:
         22:91:27:e5:2a:33:d4:c5:15:16:1d:c0:27:de:87:5a:e5:d7:
         0b:40:57:64:2d:3e:ff:dd:04:ab:0d:d5:48:b4:4a:57:82:dc:
         f5:ba:04:17:a9:09:78:19:8a:fd:b3:08:54:e7:83:25:d0:57:
         e1:e6:45:87:a3:20:c1:83:0f:eb:8c:24:9a:37:19:58:0e:32:
         8c:e5:77:bc:7e:3e:3b:cc:64:8a:24:b4:57:27:fe:34:61:6c:
         02:ef:32:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:29 2026 by rpki-client