Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
File:                     3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (raw, json)
Hash identifier:          HGbCMrvkn9HLdb/84AEUgwBryTJVzNaclVbYnTuUOj0=
Subject key identifier:   8B:44:AB:58:A8:F7:1B:14:80:38:7F:AD:AF:6C:83:58:B8:50:43:26
Certificate issuer:       /CN=4958ACA345C7658A0DAF8E986F7577A772837161
Certificate serial:       39E9598034A042C359BD22B0D5CAE805A59E6060
Authority key identifier: 49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa
Signing time:             Sun 03 May 2026 03:05:52 +0000
ROA not before:           Sun 03 May 2026 03:00:52 +0000
ROA not after:            Sun 02 May 2027 03:05:52 +0000
asID:                     149335
IP address blocks:        103.179.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl
                          rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e9:59:80:34:a0:42:c3:59:bd:22:b0:d5:ca:e8:05:a5:9e:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4958ACA345C7658A0DAF8E986F7577A772837161
        Validity
            Not Before: May  3 03:00:52 2026 GMT
            Not After : May  2 03:05:52 2027 GMT
        Subject: CN=8B44AB58A8F71B1480387FADAF6C8358B8504326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:23:f6:10:5c:d8:4f:80:41:ea:3c:3b:ca:
                    3b:e1:f1:78:6e:96:77:ef:63:20:98:4b:8a:8e:b7:
                    03:64:57:09:c5:37:76:5b:de:bb:56:fb:5d:f7:51:
                    77:e9:69:f9:59:28:fd:39:31:76:d7:f3:ae:45:c5:
                    f5:b0:66:7e:08:ec:ae:d7:02:18:e1:89:27:69:4f:
                    b6:b9:c0:98:7d:59:ab:d7:c7:45:04:ac:34:7f:f7:
                    21:9f:3e:56:8d:ec:40:ae:08:f5:a0:43:81:f0:88:
                    1a:45:29:a1:e6:eb:80:32:ae:4f:93:98:3f:48:6e:
                    7c:90:7c:07:a5:2e:fb:54:e7:73:4f:d6:e2:1a:30:
                    d0:df:3e:32:d6:c1:1b:9a:0a:50:d8:45:19:8b:36:
                    33:77:ad:40:ef:d1:4a:b1:e1:b2:8c:4a:19:a5:ba:
                    00:03:e5:06:e2:43:09:f0:4c:9b:cd:72:5d:e6:54:
                    9b:17:e0:8b:07:1e:1a:1e:ea:a3:e7:2a:8f:16:65:
                    66:6b:49:75:2a:55:dc:4a:0e:20:b6:a4:5b:cc:e9:
                    14:c4:e6:08:ca:28:87:a3:2e:3f:2d:a9:8d:05:01:
                    40:aa:8c:66:41:97:cf:0d:97:29:69:dd:ec:cb:34:
                    c6:7d:cd:18:63:43:7a:36:0b:9e:7d:21:46:6e:b1:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:44:AB:58:A8:F7:1B:14:80:38:7F:AD:AF:6C:83:58:B8:50:43:26
            X509v3 Authority Key Identifier:
                keyid:49:58:AC:A3:45:C7:65:8A:0D:AF:8E:98:6F:75:77:A7:72:83:71:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4958ACA345C7658A0DAF8E986F7577A772837161.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4958ACA345C7658A0DAF8E986F7577A772837161.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:57:17:2a:3f:ff:5c:1b:e9:f4:53:81:3c:d3:24:a6:89:
         3c:c3:a1:64:44:19:51:29:a7:da:b6:3f:70:46:43:5f:9b:ca:
         d6:36:65:78:cc:8f:4f:a6:59:29:36:3d:7f:5f:61:01:c0:4f:
         e6:fb:dc:f5:ac:16:2c:c1:59:19:fe:cb:c2:9f:96:e1:5f:71:
         0e:dc:9e:d3:15:28:20:24:17:67:b8:f6:2e:ae:c5:68:2c:37:
         a9:86:c5:70:c8:c7:23:ef:e2:42:d6:63:6a:aa:1f:07:c4:9a:
         a8:1d:a6:15:b0:ff:7b:6d:6f:f1:ce:3b:03:0b:79:77:e1:57:
         6d:7e:ee:48:4e:09:3f:b1:76:f5:6d:74:a3:8d:e4:22:bb:f9:
         8b:7d:f4:25:ef:b7:21:f0:52:95:d1:28:04:33:24:7e:ea:53:
         c0:dd:55:3e:98:2a:55:aa:de:62:44:67:fc:dd:a1:4b:83:aa:
         19:e3:83:ba:0d:34:76:2c:3b:49:87:b1:5b:0f:12:6a:cd:95:
         25:03:67:1b:3c:fe:9f:e8:03:eb:fe:c2:8d:05:5d:e4:50:e2:
         49:69:96:d9:38:04:6b:8b:85:4a:38:45:07:58:00:c4:8d:47:
         09:73:07:7c:26:59:88:b5:d7:bc:4b:d4:f3:a0:13:de:0c:78:
         ea:63:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:12 2026 by rpki-client