Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa
File:                     3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa (raw, json)
Hash identifier:          KdonrWAYWMAELGm6JJd9itl9llFCxniM2qbDKHMdjN4=
Subject key identifier:   3C:30:5E:79:D3:F9:67:AA:9C:6C:88:69:E2:8D:93:D4:75:47:90:BF
Certificate issuer:       /CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1
Certificate serial:       6071D1EA2ACD9D65FFA81E4D804631FF4C1D8E2C
Authority key identifier: BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa
Signing time:             Sun 03 May 2026 03:17:52 +0000
ROA not before:           Sun 03 May 2026 03:12:52 +0000
ROA not after:            Sun 02 May 2027 03:17:52 +0000
asID:                     147144
IP address blocks:        103.175.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl
                          rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:71:d1:ea:2a:cd:9d:65:ff:a8:1e:4d:80:46:31:ff:4c:1d:8e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0E3D48FB56262C86DF973FFC7C9874924480D1
        Validity
            Not Before: May  3 03:12:52 2026 GMT
            Not After : May  2 03:17:52 2027 GMT
        Subject: CN=3C305E79D3F967AA9C6C8869E28D93D4754790BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:64:4f:a5:22:bd:20:50:14:4b:b8:c1:5b:
                    20:dc:85:b1:65:68:31:d1:17:23:98:22:34:40:4f:
                    68:79:9a:50:82:ec:4f:d8:2d:d2:e4:29:83:87:45:
                    c9:74:21:a1:14:a0:5c:cc:a2:2b:52:ef:26:1e:ea:
                    16:2f:91:1f:c9:e0:ff:2e:5d:20:30:1a:78:fc:e0:
                    b4:3f:b0:d8:84:84:50:67:cd:f3:de:cf:f6:09:aa:
                    e6:ba:dc:1b:78:1a:d6:23:fd:eb:f1:f1:38:22:59:
                    47:f6:ae:a7:a5:a6:4f:be:0c:31:6a:3f:40:a4:a2:
                    d1:77:7f:05:5b:b5:c0:33:03:bc:12:f4:4b:b4:34:
                    50:61:3d:35:b9:9c:ce:f8:4c:38:90:58:63:1c:d0:
                    8a:eb:08:4f:06:de:df:eb:d8:1d:cc:f8:4f:bf:38:
                    22:18:ef:f1:72:fe:c9:28:d4:9c:4e:4c:a6:42:d5:
                    1a:17:ed:75:af:ee:0b:9c:35:af:49:be:7b:cd:58:
                    39:32:86:f0:06:2f:63:18:a7:8a:dc:05:8a:6a:86:
                    ba:47:ce:5c:e7:54:e4:7c:7a:31:96:a7:8b:2f:03:
                    01:98:df:1f:46:b2:1e:9d:da:69:6c:46:b9:78:fe:
                    5c:d7:79:bc:93:6a:53:45:3d:57:4a:25:e3:2b:1d:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:30:5E:79:D3:F9:67:AA:9C:6C:88:69:E2:8D:93:D4:75:47:90:BF
            X509v3 Authority Key Identifier:
                keyid:BA:0E:3D:48:FB:56:26:2C:86:DF:97:3F:FC:7C:98:74:92:44:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/BA0E3D48FB56262C86DF973FFC7C9874924480D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA0E3D48FB56262C86DF973FFC7C9874924480D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/3130332e3137352e38372e302f32342d3234203d3e20313437313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:56:42:7b:54:cd:01:e0:0e:1a:5a:1e:49:bd:d2:7c:50:84:
         0f:43:c5:1a:02:41:a6:cd:dd:77:1d:aa:a0:1e:ab:67:46:b1:
         b0:e4:39:45:fd:65:c2:86:2e:1c:45:e9:a7:d5:87:f1:0a:d3:
         0f:4a:71:ff:4d:6b:c0:1f:df:cb:02:53:2b:14:0a:a6:7e:09:
         c0:67:c6:77:98:63:27:13:8d:e0:95:cb:d3:ae:ed:e1:2a:db:
         c9:66:5e:43:22:49:ad:56:ce:a3:f2:11:bc:bf:fa:f1:21:d4:
         7a:3f:ad:d3:63:79:f8:1b:a5:c3:3d:f7:a3:1d:6b:a7:55:72:
         dc:0c:8a:81:ed:9f:b0:a1:4a:a2:11:22:d2:03:63:1e:2e:d9:
         97:1b:cf:f3:9a:c4:8a:dd:35:42:00:ff:20:49:08:0e:2d:e2:
         fa:91:33:43:44:4c:e5:52:d9:4b:08:89:38:96:09:f9:25:8e:
         33:4f:9f:fd:55:19:0f:91:8d:1a:f6:06:ce:ed:d2:18:50:44:
         a0:76:ce:c3:58:0b:86:9f:15:54:37:73:63:9f:7f:de:ed:31:
         d1:0b:af:59:fd:88:7c:20:ba:c0:81:3f:a6:c8:cb:e0:02:cb:
         a3:51:60:9c:e3:3a:60:d7:ac:c1:b1:4c:11:b5:74:7c:04:30:
         e8:b4:8f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:45:05 2026 by rpki-client