Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
File:                     3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (raw, json)
Hash identifier:          KYaeVRiuR7REacNL+jOc17uQNgw/wuM1lcqqpw6kOjQ=
Subject key identifier:   49:F8:F3:2F:06:3D:06:BC:83:3B:7B:27:79:93:1F:4E:F9:26:08:9E
Certificate issuer:       /CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
Certificate serial:       2E733F5ABED0646EEC9320C39CE2D2B123429B04
Authority key identifier: 00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa
Signing time:             Sun 03 May 2026 03:16:59 +0000
ROA not before:           Sun 03 May 2026 03:11:59 +0000
ROA not after:            Sun 02 May 2027 03:16:59 +0000
asID:                     149665
IP address blocks:        103.182.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl
                          rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:73:3f:5a:be:d0:64:6e:ec:93:20:c3:9c:e2:d2:b1:23:42:9b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000E7B7EBF543F37ACF11375D28462A8D3884A2C
        Validity
            Not Before: May  3 03:11:59 2026 GMT
            Not After : May  2 03:16:59 2027 GMT
        Subject: CN=49F8F32F063D06BC833B7B2779931F4EF926089E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:76:5c:e0:a1:3c:60:d6:3e:5d:ca:03:ab:
                    bd:94:18:4a:7a:1c:f7:b5:46:98:ae:6a:86:a8:01:
                    3e:1e:1c:1a:59:fb:41:b2:6b:b9:27:c4:63:37:e2:
                    20:7b:13:67:96:6e:81:fb:53:ed:90:44:a6:be:22:
                    a3:ca:db:71:99:6a:5b:a5:2a:80:9e:9f:bd:98:e1:
                    c9:d3:ca:21:3c:29:da:d5:f6:c6:62:b3:44:8c:b4:
                    71:c8:dd:3f:fc:67:2d:87:a3:b3:1e:52:00:0f:36:
                    74:cc:77:e1:7c:66:83:27:72:7b:51:a1:92:14:f0:
                    42:97:68:ef:99:d8:b1:05:38:df:05:a8:2d:a5:65:
                    de:f6:20:b8:3b:86:eb:68:cc:c8:6b:84:e3:b3:fb:
                    75:8f:d7:95:7b:4e:2a:de:8d:e9:e3:4c:19:64:ec:
                    ff:31:9c:a4:f2:60:16:bc:bc:b5:ad:7b:e2:e1:83:
                    2a:07:9f:f3:c7:78:31:4a:64:81:f6:d9:3e:f5:44:
                    32:07:82:29:3d:fc:94:cc:9f:1c:04:5a:9c:c9:7b:
                    cf:74:c7:02:c7:26:ad:12:bb:71:1a:d1:47:71:74:
                    fc:07:ad:9e:72:ee:ec:dc:e3:ef:45:6e:24:a7:67:
                    00:a7:be:74:73:f7:c6:96:a4:ca:02:90:92:fd:1c:
                    94:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:F3:2F:06:3D:06:BC:83:3B:7B:27:79:93:1F:4E:F9:26:08:9E
            X509v3 Authority Key Identifier:
                keyid:00:0E:7B:7E:BF:54:3F:37:AC:F1:13:75:D2:84:62:A8:D3:88:4A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/000E7B7EBF543F37ACF11375D28462A8D3884A2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/000E7B7EBF543F37ACF11375D28462A8D3884A2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:03:32:34:c7:f4:5e:7d:be:52:40:dd:3c:b7:9f:17:7b:
         f6:13:0b:d0:b4:c9:0b:ef:90:47:0f:9c:68:e2:7c:44:84:58:
         ee:24:8f:20:ed:53:4b:e5:b2:38:ac:44:57:41:37:dc:ba:07:
         da:32:c7:f3:a4:25:24:b3:bd:74:b5:df:3b:49:73:2c:4b:d8:
         b3:7c:a9:fd:1e:45:10:5a:b4:01:30:36:35:2c:fd:36:8f:43:
         58:24:f1:77:d3:2e:26:64:48:c3:c6:db:52:b0:b3:ab:4f:16:
         3e:9e:b5:b1:44:39:b8:bf:60:d3:2a:a2:db:51:1a:cd:c2:3e:
         c7:08:0d:10:5e:76:5a:c2:fa:61:c7:9d:2d:f3:49:40:b1:23:
         be:9b:50:5a:31:60:4f:38:bc:51:40:8b:15:22:fd:cb:e0:5c:
         29:99:7f:a1:0d:a1:43:e8:64:0c:51:fd:75:b0:7b:a5:e9:95:
         25:e1:5a:6c:7b:71:e7:e1:d3:67:75:b8:26:51:bb:52:0e:60:
         e5:a1:c5:cc:81:df:d7:60:07:0b:17:97:f6:05:c4:cc:37:e9:
         a0:79:dc:b3:8a:2e:bb:d0:60:ff:40:b0:a1:74:e2:c0:28:84:
         62:26:4f:63:07:36:ef:1e:97:41:8d:b8:91:d1:99:cb:41:1e:
         55:c5:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:18 2026 by rpki-client