Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa
File:                     3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa (raw, json)
Hash identifier:          1ClnarbK+m27NSskMGx6t2ycJpMm9Bjfs5h4sHIhDls=
Subject key identifier:   B4:01:B9:BB:9C:AA:1F:09:09:3B:CE:34:63:DB:34:69:16:CB:E1:53
Certificate issuer:       /CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403
Certificate serial:       7C79E6DAA4A2DCADEDB199B8EBBD360B79E81194
Authority key identifier: 71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa
Signing time:             Sun 03 May 2026 02:11:18 +0000
ROA not before:           Sun 03 May 2026 02:06:18 +0000
ROA not after:            Sun 02 May 2027 02:11:18 +0000
asID:                     135448
IP address blocks:        103.97.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl
                          rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:79:e6:da:a4:a2:dc:ad:ed:b1:99:b8:eb:bd:36:0b:79:e8:11:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71645BDB97FEBD6E0D4F53A08CBF24077C24E403
        Validity
            Not Before: May  3 02:06:18 2026 GMT
            Not After : May  2 02:11:18 2027 GMT
        Subject: CN=B401B9BB9CAA1F09093BCE3463DB346916CBE153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1d:18:24:01:2d:b6:26:c0:3a:e5:e2:cd:70:
                    52:39:cf:db:30:a8:f9:b2:51:eb:cc:ec:50:73:d5:
                    8a:59:d3:93:a0:00:29:f8:2c:0d:d0:0d:aa:5c:08:
                    4c:21:19:03:8f:ce:76:97:51:f6:b9:2c:cb:7b:9a:
                    d5:79:75:15:16:e5:1f:2d:6e:1c:b9:b6:fd:dc:91:
                    a1:d0:b1:cf:6f:f7:3d:61:70:3e:92:f3:a2:32:a8:
                    de:30:58:05:7f:66:5c:44:bc:d2:20:ef:64:14:3c:
                    b1:44:e3:f1:d5:ef:e7:db:0d:d5:ff:7f:ff:d9:42:
                    89:9f:1e:67:ca:57:18:28:c1:cc:c8:db:ba:cc:ad:
                    d1:fd:29:7c:09:df:1f:4a:e0:06:2d:24:2e:79:6a:
                    0b:e5:34:f8:c9:d6:c6:b3:29:33:02:7c:ae:21:e6:
                    60:9c:5d:6d:ba:d9:ea:07:f2:13:3e:5c:25:34:73:
                    83:1f:5c:69:09:e6:e7:10:8e:f5:92:d9:77:d8:ba:
                    dd:d0:d1:65:e8:71:f5:3c:f5:d0:c1:34:99:3b:77:
                    0d:5c:3f:de:1f:8a:0d:de:06:76:b6:70:a4:b8:01:
                    9f:75:92:9b:83:90:31:aa:c4:ea:cd:32:7c:4c:71:
                    7b:90:57:a3:9e:ee:a2:67:98:66:09:5f:74:7c:df:
                    72:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:01:B9:BB:9C:AA:1F:09:09:3B:CE:34:63:DB:34:69:16:CB:E1:53
            X509v3 Authority Key Identifier:
                keyid:71:64:5B:DB:97:FE:BD:6E:0D:4F:53:A0:8C:BF:24:07:7C:24:E4:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71645BDB97FEBD6E0D4F53A08CBF24077C24E403.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3130332e39372e3235312e302f32342d3234203d3e20313335343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:b1:b0:80:96:8f:9a:a7:35:f4:19:bc:2e:20:21:a1:7b:
         06:f7:2b:a4:f3:0a:de:dd:cc:c3:d7:2f:fe:e3:a1:e7:23:c9:
         6c:99:80:87:9e:0d:f9:55:b7:17:7a:5a:c8:39:7c:ad:d2:68:
         1f:08:35:b6:6d:d3:bf:f6:39:f5:9a:2c:f7:06:a1:b8:5b:68:
         de:20:f0:cd:f1:c8:c3:d0:99:47:6f:bd:01:1d:1e:e8:48:fc:
         ea:25:8f:36:b2:43:12:c3:2a:ac:a2:ab:af:c2:9c:9e:b5:03:
         1a:9c:e1:60:7d:1e:ab:3e:84:ee:48:f2:b6:77:57:16:d5:84:
         33:0c:19:62:8c:02:81:ea:7e:a3:19:90:2c:ec:8f:ec:98:05:
         10:8e:34:fb:3b:17:a3:f0:da:ff:b9:84:5c:b9:d6:e2:b7:b5:
         c1:87:b7:23:75:e4:46:5f:7b:67:a9:4e:ac:24:06:71:50:ae:
         94:53:1a:80:bd:c1:b5:fe:f9:51:f6:4a:4b:44:aa:1a:0b:58:
         ed:d3:b3:29:4b:02:55:90:26:23:5a:04:ad:77:be:71:3a:a1:
         88:8e:25:76:98:a9:bf:9d:c2:64:2e:47:5d:94:c5:59:26:c3:
         a3:87:5a:8d:1d:77:16:0b:c5:09:7a:6a:31:3e:43:26:9c:9e:
         34:fc:3b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:13 2026 by rpki-client