Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa
File:                     3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa (raw, json)
Hash identifier:          VsBGao6wJ+D9luytrcOpRnST1DbJomPxjbQHafMOBCc=
Subject key identifier:   0D:1E:D2:23:E2:D1:92:3A:2F:3E:CC:4D:46:AC:10:38:CE:9D:60:ED
Certificate issuer:       /CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192
Certificate serial:       188C4DF2D67B9679CFA0E8AC02C49CC8FB0CD94B
Authority key identifier: F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa
Signing time:             Sun 03 May 2026 03:18:03 +0000
ROA not before:           Sun 03 May 2026 03:13:03 +0000
ROA not after:            Sun 02 May 2027 03:18:03 +0000
asID:                     147142
IP address blocks:        103.177.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl
                          rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8c:4d:f2:d6:7b:96:79:cf:a0:e8:ac:02:c4:9c:c8:fb:0c:d9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F43C8B963DA9DF03877C5BFF0DA1F72C208D9192
        Validity
            Not Before: May  3 03:13:03 2026 GMT
            Not After : May  2 03:18:03 2027 GMT
        Subject: CN=0D1ED223E2D1923A2F3ECC4D46AC1038CE9D60ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:4b:9c:cd:b0:b0:f3:88:eb:de:7d:0c:e2:
                    79:50:d5:f3:95:af:55:db:33:40:3b:59:05:4f:92:
                    9e:e3:dd:43:af:e8:74:45:91:22:18:35:6c:da:1c:
                    76:11:2f:02:14:bf:b6:9d:cf:20:20:cf:fa:ee:ae:
                    ad:0b:a1:eb:ec:c6:8a:64:65:ac:63:e3:37:08:2b:
                    65:63:f9:0a:dc:60:4d:72:10:11:d2:fc:ed:c8:51:
                    4a:59:e5:2e:c4:2e:58:2d:11:98:75:24:be:c8:a9:
                    84:27:f3:1e:b7:1f:a6:7c:c6:b5:28:d9:1e:28:52:
                    0a:a3:13:dc:fe:0f:d2:d2:e0:42:d5:27:d1:19:db:
                    6d:68:b1:fb:8b:35:b8:c6:d1:81:36:55:d2:63:97:
                    9e:08:fa:9a:90:c4:ae:42:58:7a:e7:b5:85:0a:00:
                    86:47:a0:72:b2:b2:92:f8:9d:32:2d:15:70:45:05:
                    e9:e3:63:36:6a:d4:44:50:e6:48:cc:17:ae:97:bf:
                    1d:f1:8c:6f:c0:c3:f7:f2:26:ba:2c:8a:79:06:f3:
                    6a:b7:cb:7e:de:fe:8e:eb:15:9e:e3:e2:5c:c9:2b:
                    78:b7:2c:cd:b6:85:bf:45:7e:5e:03:0a:ab:b3:30:
                    d1:dc:43:75:02:65:9c:23:ad:db:43:6b:71:1c:5e:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:D2:23:E2:D1:92:3A:2F:3E:CC:4D:46:AC:10:38:CE:9D:60:ED
            X509v3 Authority Key Identifier:
                keyid:F4:3C:8B:96:3D:A9:DF:03:87:7C:5B:FF:0D:A1:F7:2C:20:8D:91:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F43C8B963DA9DF03877C5BFF0DA1F72C208D9192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f735e15f-d449-46d8-be0e-85e389bedc5e/0/3130332e3137372e36302e302f32342d3234203d3e20313437313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:5e:0f:9b:87:a8:11:31:f0:ae:ab:b2:4f:f9:10:23:e6:f3:
         16:28:40:1d:da:77:d4:a4:af:ad:b3:ef:d7:0b:7d:4c:6d:01:
         45:f3:8e:d5:36:2b:5a:20:4c:e5:a1:a1:24:4f:e6:b8:8b:35:
         b7:f9:92:01:8e:ce:68:a5:73:6f:b1:d3:71:ed:b9:9e:32:cb:
         4f:33:54:41:e0:d7:14:ac:ec:ff:6b:8a:47:38:ef:51:ab:e5:
         68:73:dd:3c:63:76:02:65:93:79:77:08:ce:c1:93:d7:ac:67:
         93:bb:f4:b9:cf:52:15:4c:f6:b5:92:04:9b:b8:19:d8:fe:de:
         11:e0:a8:cc:15:27:bb:20:da:7b:40:f7:12:dd:ae:87:b7:ae:
         c9:f1:30:98:6d:a0:89:8c:3e:3b:33:4c:ae:a7:9e:f8:db:2f:
         06:ee:44:b3:55:a1:c6:9f:49:fc:39:69:0a:78:25:c8:e4:1f:
         c4:60:ad:0d:3d:70:0a:a8:26:a2:3e:13:2f:86:ec:73:28:a2:
         c9:4a:93:67:c9:49:8e:68:6c:89:23:79:9a:de:c0:85:34:07:
         3b:9b:d3:5d:ad:6e:ff:8d:05:3c:0a:2d:a9:cb:24:a3:72:46:
         a0:21:85:65:da:8d:c8:b2:b6:14:8c:8e:d2:cc:e4:89:86:3d:
         4a:c5:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:22 2026 by rpki-client