Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa
File:                     3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa (raw, json)
Hash identifier:          YcFbm0cjMQXhSHXz+D7KTmt9+oLCtHoQnn3BM3lUHaM=
Subject key identifier:   45:51:7A:EB:B2:0F:73:97:4D:66:D3:98:AA:C7:04:D0:8F:7F:EA:E6
Certificate issuer:       /CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
Certificate serial:       235E49B9A24149133B5598F5A9E286926F68C163
Authority key identifier: 0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa
Signing time:             Sun 03 May 2026 03:07:37 +0000
ROA not before:           Sun 03 May 2026 03:02:37 +0000
ROA not after:            Sun 02 May 2027 03:07:37 +0000
asID:                     140480
IP address blocks:        103.154.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5e:49:b9:a2:41:49:13:3b:55:98:f5:a9:e2:86:92:6f:68:c1:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C75F355F1722A2E5EB758DF502B8C46518996E9
        Validity
            Not Before: May  3 03:02:37 2026 GMT
            Not After : May  2 03:07:37 2027 GMT
        Subject: CN=45517AEBB20F73974D66D398AAC704D08F7FEAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d3:46:3a:17:e7:d2:09:36:cc:16:b2:00:9f:
                    8f:bb:7b:05:36:10:95:97:c8:cc:43:0c:55:45:02:
                    ab:e3:44:c0:6c:d1:04:55:10:de:90:a5:47:c2:a4:
                    3d:3f:9e:3f:a1:f6:e8:89:9f:7f:19:c9:37:cd:ed:
                    d9:33:30:33:53:ac:45:34:3f:74:b3:f3:74:ad:68:
                    d4:6d:c4:4b:71:d9:31:94:cb:db:fe:4b:37:f7:91:
                    4a:9d:bb:65:11:b1:f1:52:dd:69:98:e8:0b:74:8b:
                    98:32:bb:6d:55:0b:f3:d7:9a:f7:87:37:ec:b4:37:
                    18:05:2e:9e:d6:22:86:86:ff:17:46:ab:9b:d8:c3:
                    13:12:1f:98:ac:af:a3:aa:72:5f:a5:a5:42:fe:51:
                    e9:16:27:61:01:10:8a:66:e5:41:94:f5:c6:33:3c:
                    12:5b:59:74:38:73:08:b7:44:69:6e:88:76:65:61:
                    80:a7:98:a8:c6:cf:9d:eb:52:ef:6d:6a:f6:39:70:
                    f4:1d:3f:cb:e2:f6:c2:12:5c:dd:cf:90:53:b6:43:
                    3a:95:b5:fc:3a:25:e8:76:f9:09:e7:b9:f5:73:ec:
                    79:80:ec:96:bc:0d:21:49:94:18:16:6e:af:09:2d:
                    6e:77:cc:f7:7e:4c:33:da:cf:f1:53:d2:29:65:03:
                    f0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:51:7A:EB:B2:0F:73:97:4D:66:D3:98:AA:C7:04:D0:8F:7F:EA:E6
            X509v3 Authority Key Identifier:
                keyid:0C:75:F3:55:F1:72:2A:2E:5E:B7:58:DF:50:2B:8C:46:51:89:96:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/0C75F355F1722A2E5EB758DF502B8C46518996E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0C75F355F1722A2E5EB758DF502B8C46518996E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce505319-c33d-434a-abc5-6a61ce853e95/0/3130332e3135342e37342e302f32342d3234203d3e20313430343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:e7:62:29:68:fd:72:18:a0:87:88:d8:d6:5f:9e:1f:ed:0e:
         48:d8:cd:49:e1:3b:58:48:d8:35:0f:e3:92:b4:9d:2c:da:ee:
         a0:47:aa:bd:0f:a1:28:21:1a:00:3c:4b:07:8f:1e:d3:c9:52:
         5d:48:f3:67:7b:bf:6c:41:64:c0:f2:94:6d:01:89:64:8f:51:
         c4:e0:f6:83:23:b7:d9:e6:9d:0b:74:32:94:5b:f6:73:41:5d:
         7f:78:81:c1:7b:21:93:58:21:09:2b:47:b7:a5:23:ce:3b:f7:
         db:4e:26:48:db:3a:5e:94:5d:4d:26:fc:73:af:56:03:a8:21:
         1f:35:b9:c7:70:bd:ac:12:cb:6b:26:54:68:6c:c5:43:f6:ba:
         d9:b7:db:62:d6:1d:c2:73:6c:b0:de:78:a3:48:c0:f2:3c:a4:
         05:5c:28:f1:78:47:02:d0:57:0b:9e:89:19:7b:ae:e2:5f:12:
         fe:04:a9:92:05:22:d6:b4:d8:1a:08:2c:a9:13:74:37:bb:6f:
         f0:26:c0:32:95:36:bd:0d:22:98:a4:25:48:2e:07:0a:62:68:
         89:27:f4:87:68:1d:27:e3:36:60:72:3a:c9:14:a3:a7:37:57:
         d4:9a:2f:d7:74:b0:59:dd:b2:a7:d5:7a:c9:f8:c0:b8:5a:eb:
         fe:fb:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:09 2026 by rpki-client