Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
File:                     3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa (raw, json)
Hash identifier:          uD4zXPlmJIJvDYKeBCRvwCSXSW9r9c2Pd73kp0tq76c=
Subject key identifier:   5F:65:28:C2:1C:2C:9B:20:71:8C:C3:76:EC:65:14:24:20:BB:A8:89
Certificate issuer:       /CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3
Certificate serial:       3CFD8408122F92100C41F0409879B2A1A6FED578
Authority key identifier: 2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa
Signing time:             Sun 03 May 2026 03:07:05 +0000
ROA not before:           Sun 03 May 2026 03:02:05 +0000
ROA not after:            Sun 02 May 2027 03:07:05 +0000
asID:                     149318
IP address blocks:        103.178.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl
                          rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:fd:84:08:12:2f:92:10:0c:41:f0:40:98:79:b2:a1:a6:fe:d5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3
        Validity
            Not Before: May  3 03:02:05 2026 GMT
            Not After : May  2 03:07:05 2027 GMT
        Subject: CN=5F6528C21C2C9B20718CC376EC65142420BBA889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:40:13:8f:90:85:20:1c:5f:52:5f:4a:f1:
                    2c:c5:57:28:c9:3a:ee:f5:10:9a:76:07:06:b0:42:
                    bc:9c:12:f7:55:16:4c:bd:4f:bb:a2:4a:9f:a1:5c:
                    30:32:03:81:da:97:cb:49:8b:5c:f3:6e:01:11:e5:
                    dc:6c:2f:88:dd:cb:4c:52:0d:00:cc:1b:cd:be:b7:
                    f9:2a:09:07:c3:66:ea:49:82:ba:b4:39:22:92:cb:
                    2c:f3:f5:76:ef:aa:ca:70:7c:00:04:3e:49:74:92:
                    25:ee:8d:d7:f4:ec:23:a7:94:7e:37:31:c8:d4:4d:
                    09:bc:61:55:c9:24:cd:0f:30:61:5e:ee:44:20:e1:
                    a0:a7:de:c9:10:c7:c3:22:3d:c9:9c:6b:55:7f:f8:
                    64:17:54:98:8c:99:c2:8c:ca:2c:1e:75:b0:76:7f:
                    07:af:f7:bf:f3:7f:c6:d3:79:b6:d8:ff:99:ab:6a:
                    f4:78:56:57:72:fd:2a:77:22:3c:20:11:00:66:fb:
                    2a:3c:2c:2a:a3:9f:29:06:85:50:55:af:b0:ed:11:
                    4d:c2:c7:8c:39:f2:dc:ce:a5:8b:66:8b:3b:fa:f0:
                    e7:9d:e0:87:71:01:ed:2c:c1:40:00:0b:39:99:4e:
                    a4:1f:f3:ca:b3:6e:f0:31:32:ea:a8:3c:41:8c:80:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:28:C2:1C:2C:9B:20:71:8C:C3:76:EC:65:14:24:20:BB:A8:89
            X509v3 Authority Key Identifier:
                keyid:2F:F9:D5:2A:DC:77:7F:A3:CE:51:AA:F9:44:8B:87:76:DC:B4:33:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FF9D52ADC777FA3CE51AAF9448B8776DCB433B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc075ef6-a251-47dd-8dda-cadff497a7e5/0/3130332e3137382e38342e302f32332d3233203d3e20313439333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:bf:d7:97:85:5b:5b:51:a9:c0:2c:bc:9a:88:cd:bc:bb:2e:
         62:c7:6c:27:af:cd:cd:55:5a:ae:14:cc:f3:e9:d1:b7:13:23:
         d7:29:db:a7:a5:a0:22:8c:70:fa:eb:4c:00:7a:c1:64:2d:69:
         ab:27:b8:fc:8b:18:b8:1a:f9:b4:26:71:b9:50:e7:a5:e9:98:
         c0:2f:3e:bc:75:d8:a6:a3:c6:8e:c6:a8:5d:d7:98:c4:ca:81:
         dc:8a:fa:e2:25:f5:cc:0a:76:a5:3f:a8:9b:69:93:54:0d:f6:
         5d:26:04:a6:02:08:55:b6:5d:2f:02:6c:d2:cf:6b:f4:fe:57:
         ea:86:3c:2b:b5:d6:d9:b5:6f:4f:a5:ef:ad:75:8b:7d:a1:15:
         45:84:98:36:5c:7c:d8:a6:7f:ee:3a:cf:40:75:2c:33:40:4e:
         79:97:e3:2b:89:2a:70:00:73:cc:aa:d8:24:dd:a2:0a:be:30:
         11:0a:12:97:c1:c9:cc:45:1e:d8:fd:b3:2c:5f:5a:ab:e5:fd:
         e6:6d:db:f9:32:9c:eb:30:a0:e2:7a:2f:83:20:a7:eb:b6:96:
         0f:0e:13:7e:88:92:c5:52:53:bb:92:e6:3a:de:d9:b5:4f:8c:
         b3:f3:4d:69:41:3e:af:8d:f0:b3:91:32:3d:c7:0e:d2:60:df:
         20:30:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:08 2026 by rpki-client