Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          imeoim0Itr5K8y7gaKtgjv1BiBeHuQq2+wE2kJiHl5Y=
Subject key identifier:   33:36:E6:27:4B:AE:B9:D6:EC:27:B0:6A:E6:FC:F0:BC:52:BB:DF:9D
Certificate issuer:       /CN=19B95601293E4FA827B74012327843B2622893C0
Certificate serial:       74F768148F4338F3B120DD0F26C0C04561E038
Authority key identifier: 19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:44:20 +0000
ROA not before:           Sun 03 May 2026 02:39:20 +0000
ROA not after:            Sun 02 May 2027 02:44:20 +0000
asID:                     48465
IP address blocks:        103.168.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl
                          rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:68:14:8f:43:38:f3:b1:20:dd:0f:26:c0:c0:45:61:e0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B95601293E4FA827B74012327843B2622893C0
        Validity
            Not Before: May  3 02:39:20 2026 GMT
            Not After : May  2 02:44:20 2027 GMT
        Subject: CN=3336E6274BAEB9D6EC27B06AE6FCF0BC52BBDF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:29:c2:9f:f3:f3:09:93:43:87:65:73:53:
                    09:9a:6f:68:d3:a9:a4:d4:de:32:15:c5:ce:39:89:
                    4e:8d:06:22:6d:60:64:3e:6e:13:74:0b:94:15:0c:
                    d4:31:6c:8c:2a:3b:ac:59:b1:d0:a8:d3:9c:0e:ab:
                    c4:7f:76:16:db:64:e7:ed:79:0c:35:38:95:1c:a1:
                    66:af:e0:fe:92:7b:75:05:3a:a5:ca:e3:9b:45:fb:
                    e0:c6:cb:78:41:a8:64:72:9e:10:7d:d8:e4:bb:89:
                    47:22:c2:90:69:12:c8:69:8d:a5:73:91:bc:05:f1:
                    38:06:bc:76:5f:91:25:07:0b:67:f4:bb:8d:58:57:
                    4f:ca:0a:4a:20:d7:c9:c9:56:30:ec:b8:99:e7:2e:
                    4e:d5:d2:0d:5d:99:d5:25:0f:c1:2d:f3:ce:44:1d:
                    35:26:38:02:39:be:28:b3:5c:66:74:93:e3:d1:44:
                    18:40:7f:98:5e:b6:24:84:4c:12:37:54:fc:b9:fa:
                    10:1f:c6:43:d3:06:37:ab:0e:80:30:2f:8e:6b:d2:
                    fa:6c:3b:31:db:ec:22:8c:29:3f:08:d4:78:1d:92:
                    38:fa:2c:f1:c1:8f:07:36:26:8b:24:11:30:4f:c1:
                    63:20:1f:87:e0:85:3b:9e:a6:4d:ee:20:a2:5b:64:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:E6:27:4B:AE:B9:D6:EC:27:B0:6A:E6:FC:F0:BC:52:BB:DF:9D
            X509v3 Authority Key Identifier:
                keyid:19:B9:56:01:29:3E:4F:A8:27:B7:40:12:32:78:43:B2:62:28:93:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/19B95601293E4FA827B74012327843B2622893C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19B95601293E4FA827B74012327843B2622893C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:f5:93:b2:08:32:f3:ff:fb:02:cc:f9:c1:e2:15:c8:02:22:
         bf:8c:0d:a0:79:85:90:61:36:df:99:cc:38:07:10:e9:55:e8:
         89:d9:d0:5a:01:ca:5c:b9:55:51:9a:36:09:83:55:3e:8c:a5:
         f2:3f:59:3b:a5:0d:a3:09:0e:ab:1e:1d:df:98:78:62:62:8d:
         e0:4a:68:fe:33:31:85:99:b1:f9:a8:fb:08:31:f0:84:7c:9d:
         44:1f:37:ff:26:93:ab:73:c4:4e:e2:ce:2f:ff:75:2e:23:f3:
         8c:77:29:d7:9e:0e:05:6b:bb:8e:fd:79:50:e6:eb:6a:30:dc:
         4e:1c:a7:7f:f5:a2:a8:96:35:d0:0d:a0:50:91:6d:d1:fc:ab:
         07:b0:53:95:af:b7:d6:bb:9a:01:b0:6b:1c:32:b5:e4:45:ae:
         bb:89:6c:1b:8d:1b:b7:b9:f9:58:77:5c:93:4b:40:e7:e0:a7:
         bc:10:64:04:b7:ea:e3:26:57:bf:11:e9:57:50:fe:03:b1:b2:
         72:16:b7:45:eb:44:72:6c:08:ba:7f:a3:81:18:dd:2d:3b:c5:
         e6:46:5d:23:ad:29:d7:fc:2a:89:d0:3e:f1:ae:f0:34:cc:a4:
         8c:9d:4f:50:0c:31:bd:11:16:2e:98:c4:11:b0:26:5a:21:a6:
         af:7f:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:57:01 2026 by rpki-client