Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137382e31362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          L6oL2whYFSSKY1+OlvsQBxpegvioTL+JL/PrizaKM4w=
Subject key identifier:   7D:4D:5E:D8:B7:71:60:1A:13:27:20:76:45:B8:C0:0B:E1:1B:43:06
Certificate issuer:       /CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89
Certificate serial:       7EE5EB746D8FC557E3930D482D479510038637AE
Authority key identifier: D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:49:49 +0000
ROA not before:           Sun 03 May 2026 02:44:49 +0000
ROA not after:            Sun 02 May 2027 02:49:49 +0000
asID:                     9341
IP address blocks:        103.178.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl
                          rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e5:eb:74:6d:8f:c5:57:e3:93:0d:48:2d:47:95:10:03:86:37:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89
        Validity
            Not Before: May  3 02:44:49 2026 GMT
            Not After : May  2 02:49:49 2027 GMT
        Subject: CN=7D4D5ED8B771601A1327207645B8C00BE11B4306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:c5:47:08:c0:06:e9:80:a8:22:bd:39:22:
                    05:ba:29:02:02:06:fa:eb:4b:3a:19:50:8e:b6:db:
                    d7:71:64:a3:16:4e:3f:51:bf:1f:60:c1:5c:7a:f7:
                    46:43:fe:89:e6:54:79:7d:1e:d1:5b:1b:43:6a:36:
                    83:a5:4b:e6:05:f3:dd:63:c9:0f:1c:e0:32:20:a4:
                    07:b6:1c:82:98:e8:a0:ec:4d:73:79:a0:12:c0:7c:
                    96:9f:8f:a9:00:db:2b:c8:8e:3d:71:a3:50:f5:fe:
                    42:51:b5:d1:95:93:5f:e1:ea:8b:92:d4:eb:30:ce:
                    82:2e:1a:9d:f7:44:66:9a:f5:8c:02:91:0c:3f:f9:
                    63:6f:ea:14:e5:fe:c5:15:67:bd:12:0e:f1:7b:33:
                    44:8c:e7:1c:d2:c2:96:55:4b:b1:e0:14:52:46:48:
                    b2:01:ba:37:ea:68:5f:d7:34:91:6b:78:a0:76:15:
                    c9:7b:e3:c7:15:92:43:19:35:e2:b0:f2:1f:63:61:
                    04:10:f1:2a:c0:23:25:6b:09:7b:c8:43:2b:de:59:
                    95:1c:c3:c7:bb:00:8b:18:e9:42:52:ae:f0:8f:65:
                    83:7f:f1:f1:65:04:08:d1:1e:03:a9:23:cf:d0:03:
                    d6:c0:6b:84:56:b2:fc:99:7a:bf:4b:2f:90:4d:e1:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:5E:D8:B7:71:60:1A:13:27:20:76:45:B8:C0:0B:E1:1B:43:06
            X509v3 Authority Key Identifier:
                keyid:D2:82:55:06:79:8E:48:EE:4F:6B:D0:B7:C8:A4:B9:80:BD:F3:FD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D2825506798E48EE4F6BD0B7C8A4B980BDF3FD89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c1e80d4-6ebe-492c-a0c5-d759827533b3/0/3130332e3137382e31362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:29:7f:81:05:b2:e9:40:f1:e0:e9:b8:3c:c8:b7:ed:74:1b:
         a8:79:de:22:1d:5d:88:f2:db:d1:11:ed:ef:c9:78:86:02:cb:
         ff:a8:26:2b:af:b8:10:16:3b:37:3d:eb:e2:46:da:b7:b9:7a:
         ac:80:0a:fa:f6:2b:66:99:20:1f:d6:23:01:2a:02:6a:11:8b:
         ca:a1:02:c8:51:d1:45:96:86:a9:4c:05:48:8a:33:92:46:56:
         b1:60:ed:e8:be:08:d2:26:1d:b9:3f:2c:77:83:f7:85:07:55:
         68:79:23:34:4f:7c:b1:95:a5:6e:99:04:41:58:c8:53:81:72:
         51:42:08:23:f5:0c:ef:ab:2e:e5:8e:be:ef:a7:84:31:da:7a:
         a8:b4:06:c0:37:da:a5:3e:52:68:64:43:b1:4a:a7:89:26:fe:
         e7:05:90:1c:f6:ab:cd:c9:39:01:2b:a0:7d:a8:63:77:ca:0b:
         7d:d2:76:ff:59:9a:8b:63:ae:58:e8:1f:8b:7e:9f:8d:fa:00:
         2b:d1:e6:77:78:02:8b:25:25:9d:ef:64:73:43:b0:ad:7b:06:
         d1:e4:4d:f4:73:79:4f:d9:bc:9a:b9:01:33:f3:51:64:4c:ca:
         e0:b8:b6:f3:4c:88:47:55:fc:e0:67:c1:5d:0b:72:37:86:2c:
         83:46:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:21 2026 by rpki-client