Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa
File:                     3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (raw, json)
Hash identifier:          EXXpoIwXGQQW/J4KA3aLTTIvf6EK/XcMWt09grN38eQ=
Subject key identifier:   3E:91:27:54:22:FE:44:09:E9:58:25:E9:85:FF:85:2D:0D:68:D8:55
Certificate issuer:       /CN=82CA7DAD0FE5B4D0AB3947320D10D955193B63D5
Certificate serial:       0380486F36EAB3286A45BA194496AB5E62831321
Authority key identifier: 82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa
Signing time:             Sun 03 May 2026 03:05:50 +0000
ROA not before:           Sun 03 May 2026 03:00:50 +0000
ROA not after:            Sun 02 May 2027 03:05:50 +0000
asID:                     147159
IP address blocks:        103.177.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.crl
                          rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:48:6f:36:ea:b3:28:6a:45:ba:19:44:96:ab:5e:62:83:13:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82CA7DAD0FE5B4D0AB3947320D10D955193B63D5
        Validity
            Not Before: May  3 03:00:50 2026 GMT
            Not After : May  2 03:05:50 2027 GMT
        Subject: CN=3E91275422FE4409E95825E985FF852D0D68D855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:97:62:50:7c:89:72:7c:10:2d:ac:0f:f6:
                    19:68:28:47:0b:09:9d:45:3a:d1:75:d3:f9:f3:35:
                    7a:6a:02:1f:31:5a:4c:23:03:41:71:32:a9:90:1d:
                    1b:e0:75:83:33:d1:fb:42:ce:4a:ee:94:2f:b6:49:
                    2c:e2:d6:c0:9f:17:08:f8:df:91:a4:d6:36:89:14:
                    7f:0e:96:5e:77:e1:96:a7:02:5e:f7:17:3e:36:74:
                    a3:5a:84:9c:9e:5a:5e:90:c2:e0:88:63:29:63:c6:
                    69:58:57:77:e0:13:ec:35:a0:04:4a:71:8b:a2:52:
                    32:b0:f4:ab:1a:3c:c7:5a:86:32:0d:d7:e9:07:2a:
                    55:64:17:73:e4:bf:3e:16:63:4b:f8:fa:2f:3d:58:
                    c1:bc:2c:a5:d4:07:ac:b5:74:da:7b:54:c6:80:10:
                    bd:34:68:63:f2:4a:08:2c:dd:b5:fa:fd:4e:1f:38:
                    f0:7a:54:f3:50:de:8e:d4:9d:8e:80:8b:44:da:2c:
                    d0:14:5e:17:ac:b0:6f:77:20:b2:db:77:ea:d7:0a:
                    ab:2c:e8:bc:11:b6:6b:75:1a:92:c4:07:ae:d8:30:
                    89:29:46:da:13:66:81:a4:f1:6d:fd:80:a3:0e:ca:
                    12:15:f0:4d:ed:17:c7:29:4e:58:32:36:17:94:16:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:27:54:22:FE:44:09:E9:58:25:E9:85:FF:85:2D:0D:68:D8:55
            X509v3 Authority Key Identifier:
                keyid:82:CA:7D:AD:0F:E5:B4:D0:AB:39:47:32:0D:10:D9:55:19:3B:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/82CA7DAD0FE5B4D0AB3947320D10D955193B63D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:74:a2:0c:aa:f6:16:33:74:67:ef:4c:46:49:dd:53:df:
         e6:c5:8f:58:29:d5:2c:fb:76:34:9b:a2:b5:a3:65:ce:91:aa:
         81:a9:2f:43:ae:1e:34:5f:4a:fa:24:c1:11:e6:aa:1c:57:12:
         51:b2:78:4a:09:73:61:8a:59:4e:e3:d1:fb:0f:99:46:88:7d:
         c2:fe:f2:3d:39:7a:86:f0:1e:73:6d:0a:2e:8a:6d:a9:0b:46:
         78:71:dc:9f:75:cf:19:f5:13:66:2c:3c:b8:7c:fd:45:0e:31:
         63:3b:e4:3e:93:71:12:87:ad:bb:0c:d8:8b:5f:fe:76:57:17:
         fb:29:2f:e4:e0:cf:a3:91:22:22:81:6c:b5:7f:4a:25:e0:83:
         dc:c7:af:5c:7e:a0:53:3f:ae:68:4a:38:3b:fa:5e:aa:b6:fe:
         85:22:e7:5b:76:45:ad:be:38:f4:40:49:6a:71:77:02:9f:5a:
         d1:16:f9:cb:06:09:8d:d0:7c:48:0b:55:c7:85:30:5d:65:95:
         25:b9:98:be:81:d3:3f:73:fe:9f:d8:0c:6d:96:69:34:28:92:
         98:d1:7c:7c:1b:2d:e5:ab:16:6b:d9:44:6a:97:8e:5e:71:2d:
         3f:d2:17:29:5a:1f:de:fc:89:8b:e8:1e:01:02:43:64:85:b4:
         b1:ec:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:24 2026 by rpki-client