Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa
File:                     3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (raw, json)
Hash identifier:          s/PYOgBywrG+ELs3U3x37kV5il+EING9wBXxLHFTosc=
Subject key identifier:   9C:7D:78:36:72:36:E1:8C:0F:77:11:0D:F0:8D:F9:C4:97:60:EC:62
Certificate issuer:       /CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01
Certificate serial:       03DB4C97A984E4623EFAD23751165807EE7280E9
Authority key identifier: CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa
Signing time:             Sun 03 May 2026 02:10:29 +0000
ROA not before:           Sun 03 May 2026 02:05:29 +0000
ROA not after:            Sun 02 May 2027 02:10:29 +0000
asID:                     137361
IP address blocks:        103.115.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl
                          rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:db:4c:97:a9:84:e4:62:3e:fa:d2:37:51:16:58:07:ee:72:80:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01
        Validity
            Not Before: May  3 02:05:29 2026 GMT
            Not After : May  2 02:10:29 2027 GMT
        Subject: CN=9C7D78367236E18C0F77110DF08DF9C49760EC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2d:6d:fd:61:4d:5d:fc:e5:bf:9a:32:27:7a:
                    f8:79:3d:ea:99:44:36:29:43:1b:89:81:93:a2:da:
                    0c:e2:6e:a8:e1:3a:b9:29:f3:63:3f:72:fd:6b:27:
                    4b:40:d6:15:b7:a8:47:42:48:3d:76:53:14:ed:eb:
                    03:a9:a5:c0:d7:b6:a2:af:bb:05:c8:28:03:aa:12:
                    06:e0:d5:ab:79:bb:86:24:b1:a7:cf:dd:f9:68:63:
                    1b:6a:73:a0:09:9e:4c:9b:6f:d2:76:39:da:7a:21:
                    dc:7f:63:cd:b3:00:ae:cc:60:97:e3:79:2d:2a:c1:
                    7b:9f:9d:fa:c7:49:14:11:e8:36:66:35:73:15:9d:
                    1a:db:a6:78:e1:e5:94:20:c6:c7:63:25:f9:ec:19:
                    8d:54:67:81:1b:2f:08:24:dd:1d:c0:df:be:77:2a:
                    82:a3:cd:d7:ba:e1:18:c9:9b:ce:35:9b:66:49:40:
                    a3:30:7e:4e:78:20:64:6f:d2:3d:52:a6:50:98:75:
                    7d:2b:79:f0:16:41:4c:42:1b:62:43:51:75:2f:e7:
                    d2:c9:46:ea:94:2b:b2:13:34:73:c9:9d:d3:e0:ef:
                    a0:48:91:10:e7:61:88:36:36:72:49:2c:28:f4:18:
                    b3:2e:99:d5:0c:54:5f:4c:44:6c:6e:87:fe:00:7d:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7D:78:36:72:36:E1:8C:0F:77:11:0D:F0:8D:F9:C4:97:60:EC:62
            X509v3 Authority Key Identifier:
                keyid:CC:C3:82:AF:93:8D:C5:6F:49:AC:C3:CD:9E:9E:EE:89:E9:8F:5D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CCC382AF938DC56F49ACC3CD9E9EEE89E98F5D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:90:12:29:de:45:20:bc:ad:06:00:7c:10:ad:cb:9e:6c:
         61:11:71:37:1b:0a:6e:1c:ad:68:8b:a9:78:36:65:8e:3a:06:
         fe:78:56:a8:7c:5d:69:0b:fe:7d:50:54:7b:16:4c:e6:79:4c:
         37:e4:8e:cc:cb:f9:bd:8e:44:57:56:70:cd:6e:d6:78:cf:93:
         fa:5b:01:2b:3f:8d:74:7a:12:56:62:85:da:29:04:d7:72:f5:
         5b:d1:d5:d9:8d:7e:67:b2:a5:b2:07:71:88:50:39:b2:d6:bc:
         2a:d9:b5:ab:ba:4b:7c:2e:08:81:7e:6d:e8:0a:6e:70:a8:ba:
         63:98:a1:6e:84:1b:85:5c:71:1f:cd:fa:37:11:5d:0d:aa:5c:
         0a:f5:0b:3b:fa:de:e9:2a:21:ac:b7:eb:a9:7a:c8:c1:4f:40:
         da:7d:17:28:da:05:68:70:42:a6:8c:06:f2:df:cc:25:a0:0c:
         09:41:3d:14:fc:4d:e8:0b:07:7a:b3:1d:e5:c1:b7:b4:5f:82:
         46:64:a5:fa:bb:a2:f1:2a:51:d9:1c:c4:ff:1f:ca:15:49:b1:
         da:21:46:98:8c:29:83:d0:92:08:36:3a:21:21:f7:0e:01:41:
         fe:26:7d:02:ea:5e:f2:d9:7d:6b:b6:6a:ec:98:10:f1:21:5b:
         d2:08:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:22 2026 by rpki-client