Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa
File:                     3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (raw, json)
Hash identifier:          TbeMR6DCS8oQZoWLlauGHIZkAoCLHj7Jp79qNO5aAvk=
Subject key identifier:   01:0F:36:E1:1F:13:04:83:92:29:9E:61:9C:3F:B6:5A:CC:B4:1C:EE
Certificate issuer:       /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial:       47C39510D0A0E5562A9B34E379C4BA99AF138433
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa
Signing time:             Sun 03 May 2026 03:11:18 +0000
ROA not before:           Sun 03 May 2026 03:06:18 +0000
ROA not after:            Sun 02 May 2027 03:11:18 +0000
asID:                     131699
IP address blocks:        103.174.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
                          rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:95:10:d0:a0:e5:56:2a:9b:34:e3:79:c4:ba:99:af:13:84:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
        Validity
            Not Before: May  3 03:06:18 2026 GMT
            Not After : May  2 03:11:18 2027 GMT
        Subject: CN=010F36E11F13048392299E619C3FB65ACCB41CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d2:17:a0:be:5e:c8:0e:c7:70:bb:2d:ef:e9:
                    ac:9e:aa:87:7f:b9:81:5e:79:bf:3e:86:28:2b:5e:
                    e8:df:3a:68:da:19:b3:b2:ce:4b:d9:14:cd:7c:57:
                    7b:85:5e:14:7b:69:a7:92:8f:b8:73:79:89:32:e3:
                    49:15:e6:27:9b:50:de:2a:b1:60:1c:1b:f4:5c:84:
                    2c:7d:2e:e8:37:54:7d:cd:89:d6:7a:d5:c3:44:05:
                    a9:0a:56:c9:d0:84:0b:83:e8:83:cf:cd:c0:78:14:
                    0c:2b:e8:b8:75:64:33:2f:7d:b5:e8:0f:91:95:f7:
                    97:2e:fd:d6:fe:ea:d8:37:c5:9a:b7:28:d3:58:a6:
                    34:fb:dd:52:6b:9a:b6:e0:13:f9:3b:37:06:86:2f:
                    03:10:31:31:dc:dd:d0:a3:86:d6:e0:e0:bc:d5:ab:
                    bd:96:29:84:fe:92:62:42:a1:ae:56:5b:06:f2:35:
                    2c:07:72:ad:72:93:e4:7c:8b:6e:65:72:01:4f:7c:
                    42:5a:6e:a5:1c:2f:a9:d2:79:06:7f:1a:18:0b:aa:
                    71:34:1a:94:38:c0:88:2a:65:86:76:a9:4d:ca:d3:
                    5c:31:9a:1a:d7:4b:f5:be:0a:45:e3:43:4e:e0:27:
                    2e:de:53:c4:89:6d:28:fe:f8:ef:c0:3b:c1:6c:6e:
                    4c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0F:36:E1:1F:13:04:83:92:29:9E:61:9C:3F:B6:5A:CC:B4:1C:EE
            X509v3 Authority Key Identifier:
                keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:6c:1c:b0:8a:ce:db:0d:b9:5e:7a:0d:97:74:9a:8f:59:
         99:ad:ff:0f:f8:37:fe:6e:b3:64:a3:25:56:a3:86:28:6a:04:
         a1:de:47:98:8a:fd:63:ce:59:65:8f:57:3f:b5:8d:6d:bb:27:
         5f:97:d7:ba:93:e0:39:67:da:ef:5a:55:79:8e:1f:a6:23:ca:
         f9:54:31:03:e1:e4:12:e0:ed:16:29:bc:b2:13:9c:15:85:2d:
         42:5c:9f:42:29:f1:78:3c:53:ec:00:ac:9c:9a:2d:74:5e:09:
         26:65:c4:b2:53:54:e4:be:44:d6:f0:64:65:0c:68:d6:ea:7c:
         c0:4b:af:8b:af:36:f9:66:b9:7c:dd:f7:a4:50:88:73:d6:30:
         e0:55:0a:02:2b:7f:41:1a:c5:95:2c:fb:4b:87:c1:13:00:81:
         e2:54:4e:3f:3d:da:96:df:d4:7a:b5:c0:b3:73:b2:c9:6f:e3:
         02:5b:2f:a6:ca:7c:34:73:88:51:2d:5c:94:b6:23:07:8f:04:
         72:0d:6a:86:fa:c1:b5:15:7f:c3:6e:fb:42:c9:24:2a:67:6e:
         aa:be:2d:e7:1f:79:1d:d9:06:ce:68:fe:05:24:3a:57:73:bd:
         02:b8:ab:dd:77:a4:54:2f:a6:85:bb:3f:5f:15:5f:b5:e8:4a:
         f9:86:02:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:57 2026 by rpki-client