Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa
File:                     3130332e36372e38302e302f32332d3233203d3e20313532303031.roa (raw, json)
Hash identifier:          v/2zYMSXUTzSSW7I8Fu1z9fEt17y0q1g424KCA4tdns=
Subject key identifier:   1E:E1:67:82:7D:35:D0:8B:B3:8D:04:D3:85:33:B8:86:7E:64:86:8D
Certificate issuer:       /CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830
Certificate serial:       04E7A1E50067E73E49A3521500D7E3B6B63E7A5F
Authority key identifier: 47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa
Signing time:             Sun 03 May 2026 03:11:39 +0000
ROA not before:           Sun 03 May 2026 03:06:39 +0000
ROA not after:            Sun 02 May 2027 03:11:39 +0000
asID:                     152001
IP address blocks:        103.67.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl
                          rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e7:a1:e5:00:67:e7:3e:49:a3:52:15:00:d7:e3:b6:b6:3e:7a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47EB5E054DA6FBFF24D9DEEAA5672F810B793830
        Validity
            Not Before: May  3 03:06:39 2026 GMT
            Not After : May  2 03:11:39 2027 GMT
        Subject: CN=1EE167827D35D08BB38D04D38533B8867E64868D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d6:77:6e:45:bf:cd:dc:8f:99:12:02:23:6d:
                    16:52:6b:0b:e1:90:7c:3c:86:2f:f1:31:83:4e:bb:
                    13:7d:67:1d:05:4c:38:65:1a:73:14:f8:b5:6b:fd:
                    23:58:cf:3e:2c:f6:29:42:bb:4a:9e:17:75:81:4b:
                    50:51:f4:e7:09:53:33:0f:92:42:61:65:98:1b:ac:
                    70:9d:41:16:a0:64:1b:89:d2:f5:e5:26:f2:e0:18:
                    ee:08:9b:3e:27:7a:76:2e:b6:e4:34:e3:2a:26:31:
                    c0:b9:0a:5b:d0:70:c2:a4:52:bd:af:4d:f4:97:39:
                    73:96:f5:7a:9f:fd:c8:e7:b4:bc:25:3d:67:fd:f9:
                    5f:17:54:0a:6f:11:5c:a3:89:db:a3:6c:20:cf:f0:
                    b4:66:ae:09:4e:32:8b:06:71:3d:e0:e8:96:73:b9:
                    c5:1f:75:1b:16:47:8c:1d:f1:81:b9:63:49:ea:31:
                    80:6a:61:52:01:cf:b0:79:b3:0a:b2:ad:86:e5:0a:
                    5c:2b:23:37:b4:d3:e7:20:c4:69:35:3c:51:4a:ba:
                    fe:bf:b2:0a:2d:c1:96:da:33:04:04:a5:cf:86:a8:
                    0f:ef:05:71:30:df:a7:ee:37:33:89:1e:f0:12:39:
                    54:a5:cd:64:29:50:20:12:65:2d:3d:b7:71:86:33:
                    8a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:67:82:7D:35:D0:8B:B3:8D:04:D3:85:33:B8:86:7E:64:86:8D
            X509v3 Authority Key Identifier:
                keyid:47:EB:5E:05:4D:A6:FB:FF:24:D9:DE:EA:A5:67:2F:81:0B:79:38:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/47EB5E054DA6FBFF24D9DEEAA5672F810B793830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32332d3233203d3e20313532303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:39:97:dd:38:0e:43:c4:45:d0:fc:92:4b:43:e3:62:80:d6:
         63:d4:3a:a4:e8:d4:fd:a0:42:c3:c9:77:be:28:8a:41:f1:93:
         b6:48:2e:05:1a:86:f2:96:e7:41:20:d7:50:88:a8:48:b4:de:
         6c:e7:67:9e:04:ce:c0:3b:ce:80:93:7f:80:e5:53:81:68:e6:
         16:8f:fc:46:71:6f:55:96:9f:e2:d6:ed:9f:d7:13:80:6b:e3:
         10:00:31:51:52:9d:c3:7c:8e:ca:58:5b:40:eb:7e:4c:74:4e:
         90:f3:da:95:81:99:3b:96:62:42:ef:99:ae:37:c0:64:45:c0:
         9a:bc:e2:5d:24:96:2b:ba:8c:66:4d:4b:46:a2:0d:56:29:e6:
         cd:8a:f9:5b:0c:8c:f0:ee:e6:6b:65:e4:f7:86:38:fe:50:33:
         b4:a5:40:5a:b2:03:34:73:86:82:85:01:36:1c:b1:57:9d:bc:
         27:b2:da:7f:33:ec:a9:fe:cd:7f:66:96:69:3f:70:61:4d:9a:
         2f:01:d9:fc:df:0c:bc:e3:5f:d1:8c:ef:f9:58:31:34:3e:7b:
         c3:a0:aa:15:4b:db:bb:28:04:da:82:8b:e5:ac:44:b0:dc:2b:
         54:66:69:3c:16:27:7e:b1:fd:8f:da:a9:5b:50:7b:90:89:9a:
         f8:e8:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:02 2026 by rpki-client