Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa
File:                     3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa (raw, json)
Hash identifier:          hdJk3P7tUKxgaAbM7WQzserDmvKDtOC0Ipsv3OLAf5g=
Subject key identifier:   9F:BD:81:88:AF:7A:E8:C3:D9:C2:FB:CB:C8:FA:A3:B2:6C:53:16:E7
Certificate issuer:       /CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
Certificate serial:       0E8D1EFB9EB4BE3DF469E07FE77C19512B59AAE3
Authority key identifier: B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa
Signing time:             Sun 03 May 2026 03:06:31 +0000
ROA not before:           Sun 03 May 2026 03:01:31 +0000
ROA not after:            Sun 02 May 2027 03:06:31 +0000
asID:                     147127
IP address blocks:        103.172.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl
                          rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8d:1e:fb:9e:b4:be:3d:f4:69:e0:7f:e7:7c:19:51:2b:59:aa:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B15D9100DC8B3029A016F509C7D3DBB184805AA1
        Validity
            Not Before: May  3 03:01:31 2026 GMT
            Not After : May  2 03:06:31 2027 GMT
        Subject: CN=9FBD8188AF7AE8C3D9C2FBCBC8FAA3B26C5316E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:fa:43:7d:a3:ea:56:ca:52:4b:24:2b:7c:
                    61:d2:88:9b:a0:6f:72:82:e1:76:58:0d:98:15:8b:
                    ea:9c:21:f1:29:74:6a:f1:5e:71:c6:d8:5c:1f:50:
                    3e:70:b0:51:22:e3:f8:c0:73:e0:8a:e0:05:9d:de:
                    a2:94:5a:ec:04:9c:9f:db:dd:6b:4a:c5:a1:f6:d9:
                    ea:f1:c3:1a:92:de:44:54:c0:5c:89:46:31:d0:c3:
                    d1:a1:b3:3a:e3:70:fe:94:1b:ee:91:18:09:14:31:
                    eb:4d:34:27:87:e7:ab:dc:ad:b9:84:7f:ad:e0:d9:
                    cf:08:52:b9:41:0d:30:23:eb:bb:68:43:1c:72:c9:
                    c3:72:de:4b:07:0f:b1:2d:1d:96:7c:39:49:a9:29:
                    7d:e3:17:9f:83:2d:79:ae:46:cb:ce:4b:39:62:3a:
                    1e:9b:76:75:92:3c:c2:fb:17:f5:91:f3:5b:a1:fe:
                    0e:91:b5:39:05:e1:ed:db:76:f9:63:5e:71:87:b5:
                    1b:a2:2a:ef:39:d0:9f:f1:e7:5a:94:7d:2c:ee:55:
                    58:c7:77:bf:d0:97:b3:35:c1:4c:e5:3a:f4:34:a4:
                    bd:08:b6:4b:36:30:18:d0:50:72:0d:42:6e:9b:00:
                    34:83:18:f7:97:79:d9:a9:94:51:ba:f0:a9:60:64:
                    72:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:81:88:AF:7A:E8:C3:D9:C2:FB:CB:C8:FA:A3:B2:6C:53:16:E7
            X509v3 Authority Key Identifier:
                keyid:B1:5D:91:00:DC:8B:30:29:A0:16:F5:09:C7:D3:DB:B1:84:80:5A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/B15D9100DC8B3029A016F509C7D3DBB184805AA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B15D9100DC8B3029A016F509C7D3DBB184805AA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/3130332e3137322e32332e302f32342d3234203d3e20313437313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:17:5a:1e:c3:b5:60:91:a6:28:87:d3:41:6e:4a:1e:03:ac:
         3f:d8:ff:dd:96:9a:77:39:20:d9:ea:e1:5c:9e:16:d9:a0:64:
         b0:e6:0a:3e:94:90:40:e6:4b:e2:d1:fa:92:f5:71:59:96:8c:
         d7:b7:81:6d:65:b0:15:82:80:41:09:20:bb:d3:88:58:30:40:
         ed:e2:dd:2e:df:d1:52:4e:36:6b:06:39:53:d1:4c:09:93:5d:
         97:b7:5b:05:6a:7a:27:8e:21:3d:77:c1:20:bf:2f:bc:03:98:
         5a:84:35:2f:cb:44:df:c5:bb:7c:fc:f0:0b:d5:30:0b:18:36:
         a0:18:e3:f5:82:2d:99:c0:02:65:da:65:30:9f:4d:3c:fd:a8:
         c8:23:9c:65:67:58:8e:dc:a1:88:1f:b2:0d:7f:8f:96:03:92:
         7d:8a:c3:d0:c6:c7:b4:dd:84:05:43:78:c2:06:fa:28:2d:b5:
         6f:71:f1:51:bc:33:b2:47:e6:87:44:27:04:57:62:dd:f4:ad:
         5b:52:ee:96:17:60:be:f3:cc:f7:52:e9:6c:17:f6:f8:89:43:
         66:2b:a1:e8:71:58:20:ed:06:57:38:16:33:fc:ba:a4:b9:a2:
         3a:ae:04:57:4e:b9:96:fe:6e:ca:99:16:a3:dc:9f:bc:cf:e6:
         10:0d:25:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:24 2026 by rpki-client