Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa
File:                     3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (raw, json)
Hash identifier:          sBUWSQhH/+kN71t/+kxa/DRZ1SSem+XB/ohn5pBy7QU=
Subject key identifier:   3B:BA:43:9E:03:39:2C:88:4D:A6:06:1B:12:B8:5A:2E:08:95:F7:47
Certificate issuer:       /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
Certificate serial:       4FEF178E895BA61862C71DB7C48FF23736865BE3
Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa
Signing time:             Sun 03 May 2026 03:16:58 +0000
ROA not before:           Sun 03 May 2026 03:11:58 +0000
ROA not after:            Sun 02 May 2027 03:16:58 +0000
asID:                     149665
IP address blocks:        103.182.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl
                          rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ef:17:8e:89:5b:a6:18:62:c7:1d:b7:c4:8f:f2:37:36:86:5b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
        Validity
            Not Before: May  3 03:11:58 2026 GMT
            Not After : May  2 03:16:58 2027 GMT
        Subject: CN=3BBA439E03392C884DA6061B12B85A2E0895F747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:14:04:4e:b8:8e:39:4b:86:7a:c1:99:23:
                    6d:5e:d1:8c:d6:9e:77:62:51:dd:e8:72:82:e8:78:
                    40:1a:ff:cd:70:a7:c6:09:93:fc:98:70:de:c6:c3:
                    33:a5:cd:fc:8f:24:9b:b0:cd:f0:e4:7e:24:a4:ac:
                    48:59:ca:af:58:3c:87:47:f1:c5:72:0d:73:b4:03:
                    d9:0d:31:1c:4d:ec:6b:1f:74:e2:7d:67:87:25:52:
                    27:6c:56:ed:38:23:e6:61:94:e0:75:5d:7d:7a:ed:
                    3f:f5:dd:5b:6b:25:a9:53:84:92:aa:0b:32:c0:47:
                    d0:8d:23:43:21:9b:22:c1:0d:46:90:af:25:e6:2e:
                    e9:6a:9b:88:3f:d5:f0:77:1f:a9:40:7d:e4:7f:a7:
                    17:8c:33:da:61:10:96:2d:7f:b0:f0:c8:ba:77:b6:
                    b7:98:8e:de:41:03:dc:b6:11:18:16:71:12:61:ea:
                    0a:27:c4:66:03:cd:83:8a:99:04:80:4e:00:13:96:
                    7e:09:51:fa:26:44:59:8c:08:e9:8d:f3:32:34:ab:
                    d3:bc:7e:1d:b3:8d:2a:ea:89:87:18:38:21:ff:30:
                    bd:b1:30:64:b3:3a:9c:36:0a:bd:2f:44:ef:2c:68:
                    63:a6:be:5c:a0:55:a8:0a:ed:b3:87:38:79:18:fc:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:43:9E:03:39:2C:88:4D:A6:06:1B:12:B8:5A:2E:08:95:F7:47
            X509v3 Authority Key Identifier:
                keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:02:f4:a5:7e:87:11:4f:b9:48:f9:bf:df:3b:59:1d:9e:14:
         e1:1f:1f:7e:25:b4:2e:cb:87:f9:03:86:5f:7c:e0:f1:7b:2e:
         6a:4e:b9:e3:cb:02:88:1b:88:39:0a:d5:d2:54:c1:01:52:f9:
         5c:9b:cb:a3:74:ce:f2:6a:76:61:56:4c:39:a4:e4:44:33:e3:
         b1:f5:02:8a:27:65:67:60:7d:fa:ac:01:52:cd:07:55:cd:12:
         b0:a2:cb:2f:07:f9:b0:25:b7:c0:67:dc:26:ec:7b:51:fc:b8:
         50:f6:5e:98:1a:25:01:5c:f3:06:32:87:53:b1:b3:95:f8:85:
         2e:68:d3:b4:81:e2:51:ef:0d:32:60:9f:c6:dd:1c:25:df:dd:
         4d:7a:57:18:4d:37:6d:ff:35:56:18:83:52:e1:f3:83:90:c6:
         7e:1a:8a:6c:99:03:a0:0e:be:08:7c:37:e5:27:b8:0f:3d:a2:
         7b:c9:3e:e6:4e:f4:a3:d4:1a:1f:74:95:d8:d8:87:68:d0:a3:
         4b:88:c5:5a:84:01:54:e7:9a:a5:f2:4a:ed:9c:e9:a3:8b:3e:
         5b:5b:fc:e6:06:c0:be:71:21:6a:03:a7:51:fd:cd:47:a3:33:
         f8:85:bf:50:01:3e:f5:b4:01:89:fa:3e:e3:e8:c6:7b:fc:5b:
         88:d5:cd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:04 2026 by rpki-client