Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa
File:                     3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          qwCD6LMD3vcZUMJ0NyJQKQENdmqWnufrQ7c5rQMuFak=
Subject key identifier:   AC:6B:4F:3D:9C:BC:1B:47:5E:45:AE:6C:87:D2:8F:91:D1:E3:B8:B1
Certificate issuer:       /CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62
Certificate serial:       7A28E1559C9308C7E6946D256E6E2141F8C388DF
Authority key identifier: 33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:10:57 +0000
ROA not before:           Sun 03 May 2026 02:05:57 +0000
ROA not after:            Sun 02 May 2027 02:10:57 +0000
asID:                     17727
IP address blocks:        103.105.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl
                          rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:28:e1:55:9c:93:08:c7:e6:94:6d:25:6e:6e:21:41:f8:c3:88:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3313E281DF364E0BFA32A4322ACC9D47FB561B62
        Validity
            Not Before: May  3 02:05:57 2026 GMT
            Not After : May  2 02:10:57 2027 GMT
        Subject: CN=AC6B4F3D9CBC1B475E45AE6C87D28F91D1E3B8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:70:6a:16:80:38:88:a9:5b:48:67:b1:45:
                    9f:1a:91:f6:e3:ad:ed:fb:61:9e:63:52:51:e5:b4:
                    08:5d:c2:14:66:b6:79:7e:7e:4a:85:fa:ae:ad:c5:
                    51:95:0b:9b:a3:bf:62:a2:36:5a:38:f8:3d:0d:ce:
                    9c:03:e2:de:46:00:b5:b1:7f:40:cb:a7:03:36:53:
                    17:0f:e3:07:af:02:77:66:a8:74:51:89:62:58:53:
                    23:11:ab:7c:c2:c7:98:20:75:d0:60:27:d5:b3:e3:
                    50:d1:2e:6f:f4:7c:de:e6:30:aa:ef:b1:02:6e:2e:
                    38:ca:6f:4d:aa:79:d7:c9:cd:7b:db:61:fa:dd:dd:
                    07:86:fc:fe:91:ac:a6:07:53:98:4b:45:5e:26:5d:
                    bb:07:fd:25:e6:b4:3e:4e:c8:cd:20:2d:a6:74:dd:
                    12:ee:12:c5:fe:92:16:db:f8:85:31:b2:18:91:8c:
                    93:91:5a:5e:a6:ad:2e:56:d4:4a:09:d8:37:b5:b7:
                    8b:9a:3d:bc:9d:a4:bd:b9:75:84:c8:9d:48:6b:47:
                    83:af:19:64:b3:6b:4f:e7:b8:8d:9b:3c:21:09:79:
                    ba:df:13:46:a2:99:57:57:22:d9:80:c0:c0:74:d7:
                    06:08:66:3a:a4:18:1f:c2:c2:02:52:be:eb:ab:5a:
                    af:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6B:4F:3D:9C:BC:1B:47:5E:45:AE:6C:87:D2:8F:91:D1:E3:B8:B1
            X509v3 Authority Key Identifier:
                keyid:33:13:E2:81:DF:36:4E:0B:FA:32:A4:32:2A:CC:9D:47:FB:56:1B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3313E281DF364E0BFA32A4322ACC9D47FB561B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3313E281DF364E0BFA32A4322ACC9D47FB561B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3133312e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ac:f0:98:8c:02:19:12:61:ca:51:53:4a:e5:2c:37:c5:b1:
         2c:65:3d:09:1d:c1:d5:00:a6:2a:8c:0a:51:0b:c7:54:cd:ff:
         33:22:5b:a9:af:c8:99:f8:4e:83:7c:99:f3:fb:ed:d9:00:0b:
         f4:11:be:cb:8e:62:ba:8a:21:01:40:25:0d:0b:52:b2:56:24:
         2a:fc:ca:42:a0:40:2e:32:82:94:7a:6b:a8:5d:ab:3a:84:8b:
         47:98:78:05:62:c1:01:a8:04:bb:a5:fa:b4:4a:3a:43:1a:d0:
         e4:11:6a:b4:a2:24:a6:a9:24:4f:8f:cb:05:c3:f2:e2:0d:82:
         89:34:2c:10:f8:f0:30:cb:eb:1b:f2:1e:39:02:61:2b:ed:0d:
         84:9d:a9:26:98:8e:18:33:67:05:08:44:ef:e1:25:f9:28:bc:
         e7:9e:05:a6:4c:ff:c6:e9:b6:ea:64:55:6a:fe:36:ed:7b:05:
         5c:bf:c4:3f:e9:12:14:24:04:4b:7b:33:47:b4:43:12:15:e9:
         39:43:f6:6d:2c:8e:83:bc:52:ad:46:2a:7d:68:31:de:2a:b8:
         b1:0d:17:e8:c4:55:63:d7:12:dc:88:fe:17:a5:5a:5f:0c:05:
         dc:b2:aa:30:ee:a0:eb:94:4e:cc:ba:ae:7c:cf:dc:a3:2f:9d:
         80:59:3b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:03 2026 by rpki-client