Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa
File:                     3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (raw, json)
Hash identifier:          ZkcJ9wfmIKEugmJByxtJwR7ao5xiPesfYT/0HhMfeP0=
Subject key identifier:   34:07:69:39:24:98:06:94:F5:0A:A3:E7:54:8C:BB:15:E7:D8:F8:C4
Certificate issuer:       /CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8
Certificate serial:       59C54B3CEBC5BE620A6753A99FCC5378DFC8804E
Authority key identifier: 4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa
Signing time:             Sun 03 May 2026 03:03:21 +0000
ROA not before:           Sun 03 May 2026 02:58:21 +0000
ROA not after:            Sun 02 May 2027 03:03:21 +0000
asID:                     140404
IP address blocks:        103.178.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl
                          rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c5:4b:3c:eb:c5:be:62:0a:67:53:a9:9f:cc:53:78:df:c8:80:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8
        Validity
            Not Before: May  3 02:58:21 2026 GMT
            Not After : May  2 03:03:21 2027 GMT
        Subject: CN=3407693924980694F50AA3E7548CBB15E7D8F8C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:d7:ae:48:0b:d3:12:4e:c0:05:a0:a7:71:
                    2e:71:cc:84:88:f6:ab:80:53:80:57:9d:ec:1a:ab:
                    da:0e:8d:a2:78:d9:35:70:f9:96:6f:b8:03:80:70:
                    70:5c:e1:76:b3:33:eb:ac:37:27:de:8e:ac:f7:28:
                    71:be:5d:07:47:6c:22:b0:a5:09:0f:0b:a7:6b:52:
                    a9:f6:2b:b0:d3:f7:72:4b:e1:53:99:cd:ff:66:f9:
                    34:5a:c7:40:35:b5:93:b0:12:38:1c:04:ec:3a:63:
                    7d:70:28:b0:dc:6f:58:15:3f:1f:9f:33:1e:cc:7f:
                    4f:17:f5:31:20:a9:ae:04:f4:55:b5:74:8a:e6:74:
                    14:b7:61:ca:ef:b8:ef:dd:49:b1:99:76:57:14:31:
                    74:9e:1c:54:05:f8:23:e7:ec:06:98:80:c8:00:7a:
                    b1:8b:52:a8:d9:fe:29:7e:51:c0:7f:e8:43:8b:60:
                    bb:23:f9:36:8d:d8:aa:2d:02:44:f5:f2:c7:d7:3c:
                    65:81:6b:d8:7b:7f:a8:30:b4:6f:d7:35:97:7b:00:
                    54:42:f7:90:f0:95:a8:bc:74:92:fc:c3:7b:86:1a:
                    e1:b4:68:b1:21:27:e2:29:14:aa:34:ff:8d:5b:f3:
                    bc:1c:6f:d1:b5:b6:71:6b:3f:e5:16:59:46:a9:0c:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:07:69:39:24:98:06:94:F5:0A:A3:E7:54:8C:BB:15:E7:D8:F8:C4
            X509v3 Authority Key Identifier:
                keyid:4F:57:E7:C6:47:ED:C2:A7:F8:8D:A2:E0:ED:27:18:37:05:D1:BE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F57E7C647EDC2A7F88DA2E0ED27183705D1BEA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:ce:ec:07:1c:b4:3b:5a:11:26:fa:c2:1f:b3:df:8f:fe:b0:
         99:c8:95:49:04:de:de:f5:9f:e5:7f:bb:ce:96:1e:ef:85:d6:
         50:f9:3a:d7:a8:c0:25:ae:40:78:7b:9d:4b:bc:70:a9:87:fb:
         e6:75:92:d7:22:6e:57:df:db:35:5a:c4:30:ff:c0:5f:18:5b:
         3d:19:36:bc:46:89:28:9a:43:db:80:9d:f7:d0:56:18:02:a5:
         9d:4a:b4:98:aa:83:a5:d1:51:00:d1:d7:d3:ac:4f:78:a9:b7:
         9e:ce:9e:24:a2:be:b7:7c:1d:91:69:d1:ee:64:6d:7b:28:97:
         60:e9:26:9e:5a:b1:91:e9:53:ab:db:35:ca:de:43:cd:40:72:
         52:e9:7c:2f:09:40:35:91:44:30:31:50:2c:f3:e6:98:52:b6:
         19:34:97:80:b9:e3:e1:68:f1:05:8e:85:2f:23:cf:4c:86:bc:
         54:52:ff:50:54:23:b7:92:2f:db:84:2a:68:7d:66:fe:df:0b:
         20:77:1d:f8:45:53:00:44:05:bf:4e:d2:e7:94:4a:5d:b6:35:
         a0:40:e0:f9:e9:80:6a:63:2f:49:2f:bc:c2:cd:b1:66:04:0b:
         49:10:ce:f1:0e:4b:7e:9c:38:03:8c:ae:4b:7c:f5:c1:2c:ee:
         43:0e:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:29 2026 by rpki-client