Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
File:                     3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa (raw, json)
Hash identifier:          SBw6P3tSXs9klMeIGPKPIG91NqF9/LEzB6kE45zVl8k=
Subject key identifier:   38:20:B9:5D:37:D0:8C:12:5B:CF:DC:09:A5:C5:5E:67:88:DD:68:FB
Certificate issuer:       /CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764
Certificate serial:       5E1CC288DB9EAE233B99F649EE6A7428FD8D7DF8
Authority key identifier: FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa
Signing time:             Sun 03 May 2026 03:14:34 +0000
ROA not before:           Sun 03 May 2026 03:09:34 +0000
ROA not after:            Sun 02 May 2027 03:14:34 +0000
asID:                     139418
IP address blocks:        103.174.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl
                          rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:1c:c2:88:db:9e:ae:23:3b:99:f6:49:ee:6a:74:28:fd:8d:7d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDFE358484D0815A09AA1568CCFC02EAFAA1F764
        Validity
            Not Before: May  3 03:09:34 2026 GMT
            Not After : May  2 03:14:34 2027 GMT
        Subject: CN=3820B95D37D08C125BCFDC09A5C55E6788DD68FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:6f:60:e3:3b:e9:d9:ca:db:2e:0a:3a:5a:
                    4e:0a:26:76:81:5a:f3:66:c0:a2:d7:26:cd:95:30:
                    6e:08:cc:d6:5d:74:53:64:cd:71:5a:22:ff:62:91:
                    07:9e:80:0b:14:e4:c2:81:bd:64:6b:c0:18:83:3d:
                    b9:5a:d7:19:be:c7:9b:41:78:c3:ac:e3:aa:3d:ad:
                    07:00:c3:03:d8:ff:9b:c9:66:c2:46:42:6a:92:86:
                    94:72:f9:8c:a3:2b:fb:e5:59:a4:0b:34:71:df:8f:
                    1e:c1:bc:d2:74:d2:25:10:5d:00:87:09:02:26:45:
                    13:4c:63:10:90:17:a0:b6:0a:c4:98:bc:6f:e5:58:
                    36:a8:ca:41:d8:d4:02:4f:5a:a8:c7:17:61:e7:f9:
                    04:51:96:29:5c:64:b3:02:91:88:ef:b0:1d:af:7f:
                    d9:ec:b7:a9:66:4f:57:3b:0f:52:01:0f:e1:6c:46:
                    7a:8c:c0:84:1c:9c:a0:e0:00:e7:2c:78:11:34:3d:
                    b8:cc:1d:e1:66:44:f7:95:69:68:69:c3:e0:bc:c6:
                    c9:94:9f:89:2f:7e:d8:be:8f:65:b5:b6:6d:92:4f:
                    0c:80:ff:01:94:16:cc:cb:1e:14:69:a5:6d:2b:ec:
                    2a:a8:40:93:a8:73:1f:e5:17:7b:1c:a7:b6:a2:e0:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:20:B9:5D:37:D0:8C:12:5B:CF:DC:09:A5:C5:5E:67:88:DD:68:FB
            X509v3 Authority Key Identifier:
                keyid:FD:FE:35:84:84:D0:81:5A:09:AA:15:68:CC:FC:02:EA:FA:A1:F7:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FDFE358484D0815A09AA1568CCFC02EAFAA1F764.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e8328237-750f-4022-b8b2-dba73b6713ec/0/3130332e3137342e3137392e302f32342d3234203d3e20313339343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:27:73:9e:d0:eb:c1:d0:ee:b8:36:a8:ec:29:a2:fb:e8:
         1b:da:a3:4c:0f:3e:db:1c:c9:40:67:fb:40:d2:3a:21:fc:d4:
         36:c8:d0:7e:48:50:a4:b6:64:bf:64:ad:10:b5:28:24:9b:b8:
         f6:7a:ce:5f:e4:bf:ad:cd:ed:8f:19:d5:57:86:92:50:db:d0:
         7d:09:55:92:ed:a6:20:6c:76:d7:66:b0:d4:88:3f:bb:ad:9d:
         09:d0:e3:6a:ce:04:28:a9:92:5d:ff:f4:4f:21:f4:01:2a:0f:
         55:87:b9:af:43:be:cd:19:00:26:5c:28:db:c5:14:c1:cc:2f:
         b8:8b:29:8a:c3:3d:e7:ea:4f:9b:3a:08:bf:c9:41:c2:2f:52:
         5a:20:78:6b:ec:0a:f1:a1:d0:a8:7e:1a:54:d6:55:36:f9:74:
         17:8c:dd:4f:21:b9:36:8c:f1:23:5a:de:34:9a:3d:c3:aa:f4:
         37:78:91:2c:61:5a:75:ab:13:9b:1a:fc:b2:8f:3b:c8:10:95:
         6e:b6:5e:fd:2d:d7:fe:f8:f1:83:25:55:6c:7a:82:ec:e1:9b:
         52:aa:a4:e5:ad:73:4d:3f:ef:eb:d8:7c:d0:a2:b6:a4:be:f9:
         91:36:a7:f9:bf:ab:5c:8f:a7:39:e4:d6:8e:89:1c:13:2c:70:
         3b:07:bb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:45 2026 by rpki-client