Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa
File:                     3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa (raw, json)
Hash identifier:          NB4ptyBbAbjhwyj4mleVlSYym5zGdWDUdcXFOkuUENA=
Subject key identifier:   82:AE:0D:27:81:63:32:FC:8A:97:F8:0D:DF:52:F3:8A:6C:48:AD:0D
Certificate issuer:       /CN=01B748FE9E379A963DF80DAA39E554231A002AB4
Certificate serial:       77B5A19FC73CE2CB4838127F701B551DD82D48E7
Authority key identifier: 01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa
Signing time:             Sun 03 May 2026 03:13:09 +0000
ROA not before:           Sun 03 May 2026 03:08:09 +0000
ROA not after:            Sun 02 May 2027 03:13:09 +0000
asID:                     142375
IP address blocks:        103.171.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl
                          rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b5:a1:9f:c7:3c:e2:cb:48:38:12:7f:70:1b:55:1d:d8:2d:48:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01B748FE9E379A963DF80DAA39E554231A002AB4
        Validity
            Not Before: May  3 03:08:09 2026 GMT
            Not After : May  2 03:13:09 2027 GMT
        Subject: CN=82AE0D27816332FC8A97F80DDF52F38A6C48AD0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:e6:42:71:c7:a2:60:eb:da:dc:9c:51:70:
                    b5:24:ff:27:9b:b9:57:93:33:d8:5c:84:2a:1a:67:
                    44:55:e0:df:ed:9f:02:46:5f:1a:a3:b6:ce:08:31:
                    56:ce:3a:10:39:1a:74:49:ab:06:b1:47:e9:cb:45:
                    56:63:f6:34:7d:5f:c3:78:75:8b:a3:94:1a:6e:bd:
                    08:42:bb:4c:44:38:10:fb:f7:c5:48:ea:01:39:22:
                    a5:ac:c3:2f:b3:ea:c2:55:9f:73:d6:75:32:a5:c7:
                    ed:19:d5:27:19:61:0c:ca:c4:83:14:cb:88:8c:6d:
                    e7:90:13:22:8c:73:37:96:51:50:cc:32:48:0a:08:
                    65:10:17:70:a8:bb:68:b6:ac:10:88:17:51:cc:25:
                    22:91:51:ac:fa:75:81:e1:36:da:57:35:d5:e4:10:
                    90:d2:da:4a:60:67:b5:8a:82:ad:b5:79:44:b9:3e:
                    74:c6:99:67:5f:59:76:74:e7:c2:0a:dd:23:70:a4:
                    7f:c2:29:de:7f:55:4c:0d:87:a8:0f:0a:02:2a:28:
                    e6:c4:9b:5a:d0:0b:9a:0d:06:2b:b1:df:21:ac:c9:
                    91:7c:de:3b:ae:59:45:9b:d7:0b:bb:e5:cd:06:fb:
                    f5:54:a2:36:5b:d0:48:b4:ec:19:dc:5e:8e:a3:96:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AE:0D:27:81:63:32:FC:8A:97:F8:0D:DF:52:F3:8A:6C:48:AD:0D
            X509v3 Authority Key Identifier:
                keyid:01:B7:48:FE:9E:37:9A:96:3D:F8:0D:AA:39:E5:54:23:1A:00:2A:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/01B748FE9E379A963DF80DAA39E554231A002AB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01B748FE9E379A963DF80DAA39E554231A002AB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3505cb3-b55e-40e4-ac79-6365606f4ef9/0/3130332e3137312e3138322e302f32342d3234203d3e20313432333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:dc:2e:6e:17:b9:ca:d8:b6:69:b6:9b:d3:19:11:60:bf:
         18:f7:a9:f8:4c:0c:0e:b6:36:9a:52:f5:8b:f0:50:e8:9f:dc:
         53:f1:c3:f8:aa:06:78:82:07:a7:b1:a5:f1:8a:72:d3:83:b4:
         53:67:21:f0:e3:a5:66:18:bb:2e:cc:22:15:35:00:16:f3:59:
         98:42:a0:c0:09:d8:e3:ae:01:32:85:d9:d2:f0:1b:23:69:59:
         aa:a4:0e:57:9d:b3:52:ae:c3:87:51:bd:5b:be:45:e6:c4:7c:
         28:93:38:0a:63:9f:8b:c3:16:d2:42:e0:89:36:f6:7b:2d:ab:
         96:ec:d3:15:c4:2c:b0:ad:7c:47:83:08:51:1d:cc:54:80:e4:
         95:02:6a:a4:d9:ff:d5:aa:0b:32:cd:68:38:fd:e8:b2:8f:e0:
         d6:03:2a:a9:a4:5b:3b:62:3f:8a:95:8f:a0:31:3b:37:3c:ba:
         e4:52:24:3c:91:67:82:52:2a:ff:59:00:88:23:e4:f4:73:a1:
         e6:43:48:d3:8b:59:41:34:82:9b:36:49:3f:76:6a:94:d0:ad:
         a5:c9:40:d2:b8:d3:84:e2:27:f1:76:a6:2c:89:9f:c4:9b:d6:
         c9:8c:09:17:f1:5a:c9:a4:fb:67:ff:e3:97:fb:08:ec:34:7e:
         8f:8c:15:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:53 2026 by rpki-client