Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
File:                     3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (raw, json)
Hash identifier:          je0fW/T+7CeDw/BD58L4wbwCS+OqE/uQcMZPbWUcwBw=
Subject key identifier:   CD:2C:F3:3D:6F:E6:41:81:C5:11:A6:27:95:72:04:BB:5F:5A:EC:4C
Certificate issuer:       /CN=657097DED993749F454B2CB2980019AC9335E3AD
Certificate serial:       933FB3ED5710982D3B68176617EDC04556F13A
Authority key identifier: 65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa
Signing time:             Sun 03 May 2026 03:16:02 +0000
ROA not before:           Sun 03 May 2026 03:11:02 +0000
ROA not after:            Sun 02 May 2027 03:16:02 +0000
asID:                     64302
IP address blocks:        103.78.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl
                          rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            93:3f:b3:ed:57:10:98:2d:3b:68:17:66:17:ed:c0:45:56:f1:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657097DED993749F454B2CB2980019AC9335E3AD
        Validity
            Not Before: May  3 03:11:02 2026 GMT
            Not After : May  2 03:16:02 2027 GMT
        Subject: CN=CD2CF33D6FE64181C511A627957204BB5F5AEC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:13:e9:3d:16:af:2c:51:6d:3f:b9:72:e7:
                    e0:a6:5f:73:59:76:90:26:1c:a4:1c:79:9c:e4:1c:
                    be:9a:63:9b:a0:01:55:8c:17:d0:6e:81:4f:9d:fa:
                    5f:ff:9a:5c:cc:bd:68:f6:96:fc:27:a7:2f:36:e8:
                    db:ae:34:e9:4d:05:68:b3:34:24:4c:2e:cc:83:c1:
                    41:ba:e1:4e:18:02:4d:e6:8e:c8:f1:84:fc:50:c6:
                    3c:57:8f:07:ac:93:16:4e:ac:4c:d3:9e:73:6d:58:
                    e6:78:d7:50:fc:2b:95:7d:bf:83:ba:f1:93:9c:bc:
                    35:47:5d:4d:6c:cd:b2:60:c0:85:0c:bc:a9:c3:26:
                    79:f1:3f:59:95:cd:29:8a:44:ef:9c:07:0b:35:2d:
                    29:a9:a6:6a:cb:d6:ff:f0:4f:03:32:ec:c0:25:27:
                    6d:ed:7d:0d:a7:bc:b5:d1:8b:f7:d3:79:0b:35:42:
                    0b:a0:ba:8c:fa:57:22:db:e9:01:2f:28:00:d6:65:
                    3d:75:e1:df:72:3b:6e:d1:25:06:01:aa:fd:07:7f:
                    21:c5:a3:39:39:eb:1c:22:3d:a5:56:90:53:81:f1:
                    74:10:83:e7:f8:4a:bc:fc:86:1f:12:67:ee:85:03:
                    75:28:84:9a:ed:ef:3d:2c:e3:92:9c:1d:41:2e:31:
                    3e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:F3:3D:6F:E6:41:81:C5:11:A6:27:95:72:04:BB:5F:5A:EC:4C
            X509v3 Authority Key Identifier:
                keyid:65:70:97:DE:D9:93:74:9F:45:4B:2C:B2:98:00:19:AC:93:35:E3:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/657097DED993749F454B2CB2980019AC9335E3AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/657097DED993749F454B2CB2980019AC9335E3AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/3130332e37382e3233322e302f32342d3234203d3e203634333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:43:7c:49:15:7c:3a:85:22:e9:27:41:42:a3:4b:12:ef:31:
         ac:44:96:42:00:71:c3:61:f6:64:ac:07:bb:20:d9:e5:d5:7a:
         00:d7:b9:62:58:64:3c:2e:85:6d:c6:ce:ea:2c:63:04:e2:58:
         68:e5:e6:4e:61:f6:92:5c:60:2a:13:65:d0:10:b3:2b:71:0c:
         99:f9:91:b6:fa:a0:93:01:8a:41:47:04:84:f9:cf:47:a9:68:
         99:43:2e:a6:2b:f4:24:80:27:e3:1c:9d:a7:6b:56:ce:c2:24:
         c7:45:f3:f1:bd:8e:35:97:cd:34:9b:81:78:45:d5:89:1e:c4:
         7c:6d:8a:65:61:77:55:5b:90:87:dd:b3:d4:3a:6c:b4:bc:35:
         3d:14:e1:40:9e:15:b5:54:23:c7:1d:f8:80:d4:59:04:aa:20:
         0d:58:ba:3f:88:5a:92:b7:21:e2:11:af:81:f0:c4:b7:67:bb:
         98:6b:dd:a3:e1:a9:ab:0c:90:d3:f1:5c:91:66:ab:6f:03:41:
         d0:65:fa:34:66:dc:bf:39:07:a6:ab:d3:7f:21:ce:d0:86:50:
         6b:44:17:86:3d:71:bc:08:a5:a6:7f:6b:d9:e8:27:ce:7b:f9:
         a9:03:12:39:9c:f2:0b:38:40:b2:8e:53:f2:51:c5:63:0f:92:
         e8:e6:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:05 2026 by rpki-client