Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa
File:                     3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (raw, json)
Hash identifier:          WmY+n1lGNZlUUH5ZggQpvj8af92oWZ8YbeF8/QwNgtQ=
Subject key identifier:   63:72:FC:DF:31:83:A2:42:E8:92:6D:2C:54:32:05:BA:1A:FB:C7:1D
Certificate issuer:       /CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1
Certificate serial:       6AFCB533B38ECE700089D2C11C309BCC7D7D6C93
Authority key identifier: 84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa
Signing time:             Sun 03 May 2026 02:41:31 +0000
ROA not before:           Sun 03 May 2026 02:36:31 +0000
ROA not after:            Sun 02 May 2027 02:41:31 +0000
asID:                     137331
IP address blocks:        103.178.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl
                          rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fc:b5:33:b3:8e:ce:70:00:89:d2:c1:1c:30:9b:cc:7d:7d:6c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84EE64DA51082B30948D12F6E14B8EBCF1D658D1
        Validity
            Not Before: May  3 02:36:31 2026 GMT
            Not After : May  2 02:41:31 2027 GMT
        Subject: CN=6372FCDF3183A242E8926D2C543205BA1AFBC71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:1e:ba:34:39:2d:8c:43:5e:08:a0:11:b1:
                    63:f4:d2:ac:c0:0a:96:10:e3:eb:07:ca:5b:ab:0e:
                    ff:bd:ac:a0:9f:04:83:7d:a2:22:8c:52:40:b7:73:
                    a5:26:b5:81:a4:8d:43:21:de:05:9e:4e:69:46:5c:
                    d7:fa:2c:70:91:dc:e5:68:64:fb:9e:8e:d7:0a:40:
                    1f:35:d7:a3:42:36:d7:59:3e:33:cb:47:ea:08:69:
                    1d:46:54:62:f2:3a:77:c1:90:a5:f1:9e:72:74:5a:
                    e6:65:aa:16:fb:56:45:99:6a:67:27:85:66:bf:ca:
                    c2:6c:a0:12:81:0e:ab:4d:48:a6:5b:fd:9f:0e:3f:
                    72:a9:7a:c0:69:91:13:51:5e:db:cb:bf:39:48:c0:
                    0b:28:fd:90:89:23:0e:23:16:d4:e1:f2:f1:19:1b:
                    ff:99:91:03:7c:df:c2:57:6e:85:22:24:0f:eb:7d:
                    28:5b:e8:76:d5:b8:ff:f2:52:89:54:91:70:34:b3:
                    31:e1:fc:3a:b7:97:8c:9c:94:e6:cb:a7:95:91:da:
                    e0:d7:fd:7a:a4:3a:0b:51:60:d2:08:e6:fe:bc:75:
                    6e:5a:3f:c3:ce:99:a2:6f:00:48:fe:7c:60:41:6b:
                    13:cb:17:ed:f5:75:da:fb:d8:ca:55:e1:2e:91:ec:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:FC:DF:31:83:A2:42:E8:92:6D:2C:54:32:05:BA:1A:FB:C7:1D
            X509v3 Authority Key Identifier:
                keyid:84:EE:64:DA:51:08:2B:30:94:8D:12:F6:E1:4B:8E:BC:F1:D6:58:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/84EE64DA51082B30948D12F6E14B8EBCF1D658D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:d2:d2:64:f9:94:fa:57:23:2c:48:36:82:27:e0:c3:60:62:
         cb:ff:37:bb:28:67:4b:7d:ac:e9:c7:78:ab:69:20:79:81:cc:
         58:91:49:e1:4e:08:0b:64:69:2d:96:1f:0a:31:a7:31:db:5c:
         63:1c:f6:62:d5:89:5f:69:bf:0f:59:34:f7:b4:ea:1c:05:a4:
         f3:99:40:46:63:e2:f8:fb:a2:9f:36:d3:14:51:22:9b:aa:55:
         1d:11:19:f2:87:ce:6e:7b:51:78:8a:eb:05:05:5b:9f:93:72:
         84:5a:57:da:95:21:09:88:6e:b3:4b:61:7b:9d:01:3e:02:8a:
         cc:6b:6a:9b:e2:e8:71:0f:9d:d2:54:51:49:5b:56:ae:55:5b:
         28:41:10:23:55:02:e7:ed:d1:5c:e8:ad:d6:ea:33:1e:b4:91:
         d4:8a:60:84:96:44:e8:60:8e:3f:4d:82:f4:4f:e9:71:eb:f6:
         07:50:b2:d1:b5:7b:42:82:3c:00:75:03:85:3f:33:ab:74:6a:
         70:39:f0:6c:c8:53:9b:dc:30:1a:90:9c:45:ad:ea:12:5a:77:
         7c:b1:a3:40:1d:7f:d5:c4:43:b9:0b:59:38:3c:dd:71:05:62:
         be:a9:48:f2:53:df:a3:bf:f5:0a:f9:b5:3c:80:53:b9:5d:fa:
         f6:bc:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:57:28 2026 by rpki-client