Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa
File:                     3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          3A+tKNYPDWO1jDhVDZUdC2NZs5B4MixvTHgsf4h9Xzc=
Subject key identifier:   61:D0:86:A2:93:1E:C1:4E:1B:55:3C:04:49:A9:86:30:4A:29:00:D9
Certificate issuer:       /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62
Certificate serial:       313A22DBB2384F0D0A268AAAB143F18679536B6F
Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:10:58 +0000
ROA not before:           Sun 03 May 2026 02:05:58 +0000
ROA not after:            Sun 02 May 2027 02:10:58 +0000
asID:                     17727
IP address blocks:        103.105.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl
                          rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3a:22:db:b2:38:4f:0d:0a:26:8a:aa:b1:43:f1:86:79:53:6b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62
        Validity
            Not Before: May  3 02:05:58 2026 GMT
            Not After : May  2 02:10:58 2027 GMT
        Subject: CN=61D086A2931EC14E1B553C0449A986304A2900D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:66:f1:13:02:69:e0:fc:cb:f5:5e:fa:5e:
                    74:50:4d:70:6f:33:e6:eb:65:fc:ea:de:fe:6e:af:
                    17:df:b5:21:1f:40:2b:19:82:30:e4:ca:9b:18:2c:
                    e6:06:ac:7d:32:d6:c6:47:20:5e:6b:bc:d4:84:c9:
                    ea:66:13:78:6e:d0:99:f6:0b:74:a2:f9:5c:39:96:
                    74:b6:b8:a2:22:d2:b2:3d:b0:13:6f:86:51:45:ff:
                    cb:f6:a9:6d:2e:8f:d7:94:f5:9e:eb:69:c7:79:95:
                    09:4a:d9:17:db:b4:64:1e:84:69:9f:17:8b:ee:08:
                    b5:b7:45:6c:75:23:d6:c0:9e:05:31:18:5c:32:1c:
                    d8:46:79:ea:18:30:39:29:f8:2d:3e:04:3d:a8:f0:
                    ee:c7:d0:13:af:da:33:22:98:85:05:a9:38:b8:99:
                    51:d1:9c:30:03:91:9d:15:19:aa:1e:b8:ad:e0:7c:
                    9d:e1:c4:65:4e:0f:8a:9d:d1:df:39:e0:1f:e9:17:
                    b7:01:5a:3a:19:7b:15:a6:98:04:c4:4c:2c:5b:bc:
                    a4:e1:37:3a:ac:52:42:cb:8d:a7:40:36:d3:fa:5d:
                    7b:77:b7:b5:78:39:e4:0a:93:4d:a9:00:1e:06:89:
                    f9:9b:09:5e:df:ba:b4:6e:55:3c:b6:4e:1c:5c:e2:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D0:86:A2:93:1E:C1:4E:1B:55:3C:04:49:A9:86:30:4A:29:00:D9
            X509v3 Authority Key Identifier:
                keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133302e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:e6:54:4b:1a:bc:6e:a5:1b:50:d3:92:04:ac:04:13:0f:
         83:bf:de:07:2b:1d:59:c9:48:dd:32:7b:51:37:fc:e5:51:07:
         4d:8c:77:b9:1b:32:c0:8b:b4:8b:f5:1e:62:bd:43:19:52:f2:
         a3:6a:c2:2c:5b:9a:87:13:68:bb:82:20:24:f7:da:f0:f0:68:
         7e:e6:55:9a:b8:ae:56:b9:56:8a:3f:8f:c5:e9:c6:01:1b:52:
         13:df:80:a3:82:00:96:05:5e:c9:d0:bd:45:a4:dc:de:90:e2:
         9a:c6:cd:39:4d:44:8d:38:cf:e8:ce:df:62:f5:7a:1b:01:7b:
         39:92:8b:88:75:39:e5:63:a9:b3:4d:ae:32:06:79:ce:e7:49:
         8e:bf:b8:30:6d:5e:70:59:93:4c:21:62:93:15:e5:ef:9d:4f:
         d6:aa:01:cc:e3:5c:28:e7:be:1c:3d:ff:84:ef:1f:e7:77:cf:
         48:13:47:b9:1f:e2:1a:f0:f8:a1:11:a7:8a:08:b7:12:c4:33:
         a1:1a:86:2a:3d:31:47:59:85:07:8d:2a:ad:54:87:e7:e7:2f:
         03:88:7e:63:e8:99:59:1a:c9:a9:33:f7:9d:f8:68:08:b6:82:
         b5:b1:d0:22:b6:d0:09:73:45:31:81:3c:c3:a1:ef:67:4e:09:
         ee:35:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:11:55 2026 by rpki-client