Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa
File:                     3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa (raw, json)
Hash identifier:          BTev4pTjb1pwUkqwaS552QJVxBH0Gw6mSTMUfpMFiQ0=
Subject key identifier:   31:A0:D7:D8:52:2B:F1:F6:67:19:71:BA:EB:6B:E5:4F:9A:85:10:CF
Certificate issuer:       /CN=221D17C6CE30682D7329C49D1F803292269A742A
Certificate serial:       3F19EDEB7593122984E8DACD94543732D2E60AB3
Authority key identifier: 22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa
Signing time:             Sun 03 May 2026 03:19:09 +0000
ROA not before:           Sun 03 May 2026 03:14:09 +0000
ROA not after:            Sun 02 May 2027 03:19:09 +0000
asID:                     147138
IP address blocks:        103.177.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl
                          rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:19:ed:eb:75:93:12:29:84:e8:da:cd:94:54:37:32:d2:e6:0a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=221D17C6CE30682D7329C49D1F803292269A742A
        Validity
            Not Before: May  3 03:14:09 2026 GMT
            Not After : May  2 03:19:09 2027 GMT
        Subject: CN=31A0D7D8522BF1F6671971BAEB6BE54F9A8510CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:18:9d:ab:33:d5:f0:f4:34:29:c6:29:47:
                    e9:07:47:bb:90:7c:f1:b9:60:55:a5:5b:b7:61:81:
                    6f:49:75:ea:37:94:2c:a5:c6:a5:54:a0:10:bd:a5:
                    4f:bd:cf:9e:c0:0f:fd:60:7e:86:13:ba:50:cd:57:
                    8e:c0:e1:e1:68:ad:c4:be:b6:a9:27:0e:13:9c:a0:
                    50:e5:6a:00:8c:75:3a:53:f7:81:65:e5:cd:da:eb:
                    17:46:30:da:7f:0c:ae:75:b3:9e:69:33:4e:0d:15:
                    aa:2d:b3:7d:d4:46:c8:75:a0:48:88:89:6f:40:ca:
                    cf:05:94:31:13:58:8f:97:b5:f0:1d:e7:19:5b:f7:
                    39:18:cf:d3:53:f6:dc:58:61:1d:2d:c4:b9:9d:40:
                    54:29:77:29:ad:19:2e:53:06:df:0d:2c:39:66:66:
                    b3:ff:d1:6a:d8:30:fa:7f:7d:57:b7:98:50:93:56:
                    8d:06:bf:ec:4d:b0:1d:a8:9e:6f:07:8e:07:07:77:
                    89:43:46:6c:0a:fe:fc:48:10:51:86:b8:5f:5a:7f:
                    68:1a:89:0f:ac:ff:82:02:12:28:44:d5:1c:b3:ab:
                    79:95:2c:b6:d4:d3:78:3a:64:00:4f:9f:bd:a7:2d:
                    38:43:e5:d3:e4:47:60:af:82:ab:55:44:55:fc:32:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A0:D7:D8:52:2B:F1:F6:67:19:71:BA:EB:6B:E5:4F:9A:85:10:CF
            X509v3 Authority Key Identifier:
                keyid:22:1D:17:C6:CE:30:68:2D:73:29:C4:9D:1F:80:32:92:26:9A:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/221D17C6CE30682D7329C49D1F803292269A742A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/221D17C6CE30682D7329C49D1F803292269A742A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/3130332e3137372e31342e302f32342d3234203d3e20313437313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:35:36:b8:67:c1:fc:93:f8:d5:fb:12:8c:a4:c3:b5:67:bd:
         0f:f2:4e:ba:75:dd:06:19:51:9d:3d:22:21:e8:ad:0f:7c:3f:
         d6:99:6d:6b:2f:6f:d1:ec:ee:6e:6e:a4:aa:1a:f2:95:22:8e:
         dd:3e:51:2f:2e:60:50:55:8b:ec:0c:88:7b:a3:38:1a:87:c9:
         03:35:9f:eb:0e:56:92:4e:20:b9:81:00:06:aa:e1:ef:a8:ce:
         29:30:2f:16:94:b2:a4:79:72:cd:9c:17:80:21:ba:7a:73:1d:
         d1:6c:10:c8:57:2e:5a:3e:75:bd:b8:92:23:89:88:67:67:91:
         a5:86:10:4b:39:db:8e:dc:4f:a8:4a:42:92:cb:69:99:ce:a3:
         51:6c:fb:c5:3b:83:7c:37:7f:b5:6d:93:8a:f0:1d:48:53:96:
         a7:2f:a8:5d:c0:67:20:f5:c5:63:b0:33:ab:39:d7:70:93:b0:
         26:21:f7:0b:a2:5a:d2:3f:a7:85:3b:f8:fe:b1:ad:0a:cd:23:
         22:31:b0:98:87:b5:15:87:54:8a:19:aa:5e:af:ed:c8:54:c1:
         30:bd:d5:97:5a:36:c6:a3:d7:22:04:13:03:73:5b:c9:e7:74:
         24:55:7f:14:59:9b:94:a3:1b:4c:33:62:82:67:df:0c:ea:c0:
         0e:bf:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:14 2026 by rpki-client