Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          mL3JvRfInyNlngozqPKuUfXwB9P8QvGYEg+WLcDaUuo=
Subject key identifier:   5C:87:2F:5B:C7:D1:46:38:0A:A4:5F:1A:7D:7B:A1:1F:73:EB:60:D5
Certificate issuer:       /CN=19B95601293E4FA827B74012327843B2622893C0
Certificate serial:       30ED20858B553DBA9EAC96C5BB538283E1D36105
Authority key identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:44:22 +0000
ROA not before:           Sun 03 May 2026 02:39:22 +0000
ROA not after:            Sun 02 May 2027 02:44:22 +0000
asID:                     48465
IP address blocks:        103.168.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl
                          rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ed:20:85:8b:55:3d:ba:9e:ac:96:c5:bb:53:82:83:e1:d3:61:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B95601293E4FA827B74012327843B2622893C0
        Validity
            Not Before: May  3 02:39:22 2026 GMT
            Not After : May  2 02:44:22 2027 GMT
        Subject: CN=5C872F5BC7D146380AA45F1A7D7BA11F73EB60D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:f8:f6:d7:0f:74:13:b9:56:6d:d1:1b:ad:
                    aa:05:f7:b9:cf:72:f2:39:e7:3c:91:fd:34:14:f1:
                    9c:5d:65:75:0a:be:1b:e5:19:23:52:c5:09:6c:c5:
                    4c:c5:d0:0e:01:e4:c3:94:d8:d5:5c:b2:3e:9a:ce:
                    2a:a2:b9:de:88:ed:d8:a2:ec:87:ea:99:fd:65:f3:
                    d7:48:f1:14:c4:37:29:06:b1:21:76:7f:f4:75:22:
                    69:2f:60:6c:3e:f6:f8:d4:a0:59:9c:bd:37:e1:a3:
                    34:64:dc:99:27:34:f6:38:7b:0c:7a:23:21:fa:c2:
                    a0:9e:4f:36:2a:99:9b:0c:9b:c3:b9:e1:d4:45:00:
                    7d:5f:fc:0e:f4:b3:50:0e:ed:c2:a7:15:bb:0f:ef:
                    ea:7b:bd:1c:9d:ab:0e:2c:5f:af:aa:26:18:b5:f2:
                    66:f1:9f:e3:b9:34:03:33:89:ff:c0:c3:ea:f1:e6:
                    ae:a4:70:f5:54:09:20:f9:79:59:8e:4f:9e:8f:24:
                    6c:cc:7f:39:c5:c0:c5:fd:99:c5:46:97:55:1c:8c:
                    9e:f0:7f:b2:cd:25:b5:57:28:e1:4b:33:e5:aa:e5:
                    1f:44:f2:ed:47:7a:59:a3:f5:b6:a4:44:77:dd:a1:
                    99:6d:26:75:ea:45:fd:c2:49:7e:02:9a:f3:e2:e8:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:2F:5B:C7:D1:46:38:0A:A4:5F:1A:7D:7B:A1:1F:73:EB:60:D5
            X509v3 Authority Key Identifier:
                keyid:19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:7c:51:bb:8c:9c:13:ae:73:22:91:86:4c:42:54:47:cc:2b:
         c1:2c:8b:fa:c0:98:21:b0:b0:a2:c6:e7:20:f9:d1:55:f4:a7:
         be:3d:c8:cc:31:ac:3c:72:47:7d:31:be:86:92:69:9e:00:b1:
         d4:f8:48:f8:b4:98:61:ef:a9:9a:37:66:f5:d2:74:e4:02:57:
         6c:60:0e:da:47:24:d4:a7:cb:19:1e:34:e1:1b:8c:cd:6a:9f:
         57:ef:24:a8:a9:50:87:cf:cb:86:92:f0:10:36:c6:61:34:7e:
         70:cf:1c:f8:f1:93:f9:b5:9f:27:bc:aa:7b:f6:35:51:7d:d1:
         9e:83:2e:2d:47:f2:d9:4b:2b:90:95:62:e2:22:00:48:ca:70:
         cb:e7:5d:cd:66:0e:5d:d5:15:b4:1e:07:f6:99:b0:30:38:ee:
         e7:e2:f0:97:3b:d2:4d:54:a1:b2:8b:5c:e7:93:c7:16:b3:92:
         38:89:d4:f7:6d:0c:43:be:31:a2:81:4e:fa:b4:fd:1d:01:32:
         06:12:ee:37:47:01:03:db:bf:d3:21:d1:88:8b:0e:25:f5:df:
         94:d4:5f:2e:47:00:25:15:b8:09:e1:51:e5:d7:43:a3:c1:e9:
         17:f4:52:48:0e:4a:55:75:11:cd:a3:5c:09:4c:da:d2:6f:b9:
         96:db:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:57:22 2026 by rpki-client