Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
File:                     3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          oog0V7Pbm97nE2rbM5eE//3H6Sx2h52dplDPOyA4aAU=
Subject key identifier:   EF:DC:F3:1C:A4:14:E8:19:F0:92:F5:6A:B2:6B:D2:5F:6F:18:A8:9B
Certificate issuer:       /CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE
Certificate serial:       7D41E02E7007FAD174B7CD3E2A913FE5DB76906A
Authority key identifier: 42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 02:20:36 +0000
ROA not before:           Sun 03 May 2026 02:15:36 +0000
ROA not after:            Sun 02 May 2027 02:20:36 +0000
asID:                     17995
IP address blocks:        103.164.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl
                          rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 19:44:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:41:e0:2e:70:07:fa:d1:74:b7:cd:3e:2a:91:3f:e5:db:76:90:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42842AAEE7117FB6F7F441F21019E9D0E143FACE
        Validity
            Not Before: May  3 02:15:36 2026 GMT
            Not After : May  2 02:20:36 2027 GMT
        Subject: CN=EFDCF31CA414E819F092F56AB26BD25F6F18A89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:a7:f7:04:8d:f9:bf:d9:a2:18:8c:c7:ca:
                    ad:c1:65:de:ec:02:d1:0e:af:f6:57:ce:3c:41:bd:
                    5c:c1:27:01:32:d6:13:49:b6:d5:f5:13:57:a3:16:
                    37:46:76:13:b8:79:a2:4f:22:79:7c:de:65:c8:80:
                    bd:f7:d9:82:98:7c:2f:aa:85:e6:75:0a:c8:ac:36:
                    31:2a:7f:e1:06:4a:d9:ad:c6:e5:b6:30:d1:85:b7:
                    fa:0d:c9:ec:47:d3:e9:3d:e0:4e:ed:b0:c1:51:07:
                    40:2c:2f:ea:63:e8:44:bf:24:e1:1c:26:4f:6f:70:
                    78:90:67:d5:a0:6e:92:29:36:a9:84:c5:3b:41:31:
                    fa:6a:3a:e1:f1:1d:77:74:3d:2d:50:92:ed:37:08:
                    e4:f6:70:74:4f:85:26:1c:b9:7e:0f:64:3b:d5:0a:
                    95:0b:e0:97:51:c5:9c:e0:f7:92:8b:e5:71:7e:8c:
                    59:2d:8e:c5:57:0f:c9:66:ac:bf:10:67:2d:f5:a4:
                    13:35:fd:ed:90:7c:76:fc:56:fe:43:1d:fd:46:bf:
                    36:16:3d:cf:0e:72:81:fc:45:03:9c:01:ca:76:4a:
                    06:f2:b8:03:63:ec:b3:eb:2c:25:bf:b5:3d:a0:ed:
                    e8:44:45:58:44:46:b0:82:fa:00:18:c9:0a:95:2d:
                    2c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:F3:1C:A4:14:E8:19:F0:92:F5:6A:B2:6B:D2:5F:6F:18:A8:9B
            X509v3 Authority Key Identifier:
                keyid:42:84:2A:AE:E7:11:7F:B6:F7:F4:41:F2:10:19:E9:D0:E1:43:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/42842AAEE7117FB6F7F441F21019E9D0E143FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/42842AAEE7117FB6F7F441F21019E9D0E143FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/3130332e3136342e31372e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:89:ba:d2:cd:78:72:76:71:42:7d:06:4f:fa:44:9c:df:41:
         25:da:b9:c1:05:0a:8a:30:f6:5f:b3:c5:68:19:c0:3e:59:ed:
         69:c5:95:cc:ca:fa:c2:1c:85:8e:f6:ef:83:89:72:6b:9c:48:
         ec:25:83:4f:1f:99:63:f3:2b:e3:ff:6f:9d:11:d4:8c:77:8d:
         2e:fb:a6:a4:2e:6a:5a:2a:b9:07:59:a5:91:f2:4b:17:65:8d:
         9a:a7:90:2f:01:5d:6c:25:59:e3:a8:4a:ef:88:dd:7f:74:68:
         9b:86:21:06:a9:71:63:4c:6d:11:c4:76:57:2c:27:71:b9:b9:
         29:db:ec:d4:33:b5:21:0b:f3:ac:9e:a7:8a:f3:f0:90:44:42:
         4f:0c:37:5f:de:75:33:3e:45:c6:90:80:a5:fd:39:a4:31:b3:
         3d:24:4b:ff:74:51:f3:9f:38:75:24:5d:d8:3c:15:07:5b:07:
         ea:25:03:59:e9:05:b5:94:71:e9:8a:b6:c7:c9:72:47:38:3f:
         fd:56:b5:92:23:70:5e:da:db:86:ad:dd:5b:fd:0e:ea:47:29:
         bb:01:c2:ae:3d:36:04:33:e7:1c:42:44:44:63:c4:6c:97:1a:
         5c:d8:cb:29:f6:aa:c4:5c:1d:bb:e7:f4:53:8a:b3:f5:c1:de:
         2a:62:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:34:46 2026 by rpki-client