Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa
File:                     3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (raw, json)
Hash identifier:          0YvIC8wCtWvDa2HWmo5ajWyQO0v7nGfkKloFn4oUr5Y=
Subject key identifier:   F0:D7:FC:81:8B:0F:99:C3:C8:16:5F:02:23:1B:8A:2E:52:9C:04:32
Certificate issuer:       /CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
Certificate serial:       6662A8EFD2085AE300CD86B43ADEABC44D750421
Authority key identifier: 9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa
Signing time:             Sun 03 May 2026 03:11:18 +0000
ROA not before:           Sun 03 May 2026 03:06:18 +0000
ROA not after:            Sun 02 May 2027 03:11:18 +0000
asID:                     131699
IP address blocks:        103.174.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl
                          rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:10:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:62:a8:ef:d2:08:5a:e3:00:cd:86:b4:3a:de:ab:c4:4d:75:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CD069361DE1E2B7F987CB377D2065CD073D2BD6
        Validity
            Not Before: May  3 03:06:18 2026 GMT
            Not After : May  2 03:11:18 2027 GMT
        Subject: CN=F0D7FC818B0F99C3C8165F02231B8A2E529C0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:48:58:e5:32:1f:91:84:22:52:f0:20:27:
                    bd:df:08:30:fd:0b:b0:73:ae:54:11:68:68:8f:30:
                    bd:4f:b0:f1:e2:4a:5f:1c:7d:e6:90:1f:65:4b:47:
                    fe:20:c1:07:ad:51:84:79:e2:7e:4c:99:42:7c:b8:
                    77:6d:f7:66:fa:72:9b:ca:2a:d9:f2:f9:b2:c7:fa:
                    8b:d2:f4:8f:52:ed:52:8f:91:42:70:a4:d3:9a:4a:
                    54:d8:fa:f5:45:85:0e:04:08:81:f3:fc:17:bc:9e:
                    84:ad:e1:a4:e4:a3:4d:c9:d2:8e:a1:fd:a3:88:0e:
                    a2:ac:69:51:91:9f:8c:43:29:26:55:8c:b4:0d:3a:
                    c4:a8:11:bf:6a:ae:06:46:da:2d:80:06:c8:04:c3:
                    c1:a3:9a:85:cb:ba:dc:48:a3:53:aa:70:68:82:27:
                    b6:8b:b0:1b:61:b3:1a:d6:a8:02:02:c9:88:bf:4b:
                    df:b0:6b:67:13:e0:58:48:d3:57:6a:84:c2:95:2a:
                    7f:9f:20:f5:fa:1b:88:7c:2d:3d:ac:13:d8:f6:78:
                    51:b4:54:75:14:70:d6:ce:90:a5:01:8d:2e:da:ee:
                    60:04:60:aa:97:88:aa:dd:20:b8:f8:a6:78:91:9a:
                    88:9c:80:41:9b:0e:44:fa:79:c4:86:7a:e4:36:a4:
                    95:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:FC:81:8B:0F:99:C3:C8:16:5F:02:23:1B:8A:2E:52:9C:04:32
            X509v3 Authority Key Identifier:
                keyid:9C:D0:69:36:1D:E1:E2:B7:F9:87:CB:37:7D:20:65:CD:07:3D:2B:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9CD069361DE1E2B7F987CB377D2065CD073D2BD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:d5:08:8b:67:1d:8f:cd:39:7a:78:94:06:3f:e3:5d:9e:
         54:2c:57:6f:59:91:46:fd:6f:02:c5:12:3d:56:ec:b0:31:f0:
         90:20:fe:08:2b:c9:99:11:39:90:9f:3e:e2:2b:90:50:12:96:
         b5:56:8c:4f:40:ee:14:ca:20:f7:18:0e:1e:d8:e2:86:85:c0:
         82:df:87:b1:a7:49:09:f8:dc:be:3d:91:e2:7d:68:c9:99:70:
         32:de:c1:e4:1c:72:46:1f:39:e1:e9:f5:0b:51:fe:9a:81:ca:
         a1:0e:a0:9e:c6:71:81:53:92:1a:e1:6c:00:df:6d:52:32:62:
         57:0f:55:ef:2e:10:12:21:f7:18:bc:8d:e2:ee:e9:66:11:5c:
         98:3d:1f:bc:c6:27:2e:be:e6:a5:13:ed:37:e8:40:f4:73:c3:
         e9:fd:bd:3b:57:88:f7:c2:5c:50:f0:1f:52:7d:e7:8c:21:70:
         34:37:ec:e6:ad:b8:66:32:33:fe:48:d0:ef:86:af:d7:42:76:
         15:85:a6:41:54:2d:85:b3:62:34:42:b6:13:b4:ca:2d:a4:ae:
         cd:04:38:11:92:dc:5f:9e:91:2d:fd:3f:de:4c:be:59:6d:b6:
         0d:8e:c6:0b:f2:a8:ae:0d:a6:33:90:8d:85:74:29:ab:90:e1:
         30:54:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:59 2026 by rpki-client