Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
File:                     3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa (raw, json)
Hash identifier:          C7qMNln9tVJsaTGJe55YlcrCyTSTSvWP1cmPd8nrxzs=
Subject key identifier:   32:E3:F1:A1:32:9E:8F:43:46:1B:5E:7A:26:82:5D:62:36:AC:12:18
Certificate issuer:       /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Certificate serial:       633E69301718B3714A0FD086639ACD15CA3E10A8
Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa
Signing time:             Sun 03 May 2026 02:19:06 +0000
ROA not before:           Sun 03 May 2026 02:14:06 +0000
ROA not after:            Sun 02 May 2027 02:19:06 +0000
asID:                     151530
IP address blocks:        103.242.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
                          rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3e:69:30:17:18:b3:71:4a:0f:d0:86:63:9a:cd:15:ca:3e:10:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
        Validity
            Not Before: May  3 02:14:06 2026 GMT
            Not After : May  2 02:19:06 2027 GMT
        Subject: CN=32E3F1A1329E8F43461B5E7A26825D6236AC1218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:6b:96:21:d1:d6:77:08:e2:eb:96:ff:61:
                    19:73:9c:14:df:c6:1a:f8:3a:31:80:34:58:83:67:
                    dd:b2:40:f1:f6:18:b9:e0:c2:1a:be:88:8e:db:96:
                    b4:4c:a7:e2:e2:28:a3:28:97:e0:90:a0:b4:b2:35:
                    46:65:74:99:25:0e:c5:b9:75:e9:f7:fb:4f:ae:f5:
                    a0:6e:02:68:da:a1:68:e2:d5:d3:c9:c5:32:9a:1c:
                    cc:34:6e:76:e6:2b:4e:2d:50:fd:9a:24:eb:61:07:
                    99:0a:30:42:61:a5:d9:4b:3e:de:e3:7b:cb:df:4e:
                    9c:a3:15:9d:17:94:cd:69:79:c5:4c:5e:6f:ff:3b:
                    ee:19:54:fb:f3:66:c8:e0:ca:39:30:a2:c2:74:e3:
                    07:0d:e6:9a:51:cf:21:1f:a9:9a:24:0f:b2:87:98:
                    be:a1:35:27:20:35:b4:83:17:9f:94:5c:4a:b5:0b:
                    f3:f7:c3:87:80:78:e1:68:d0:a0:9e:53:d7:d7:b8:
                    45:79:8c:9d:bd:1b:89:4f:7a:dd:fa:89:55:d9:0d:
                    30:45:d4:9c:fc:fc:4d:d1:89:4e:3b:f3:a2:71:d8:
                    f7:ab:40:78:ad:d8:c6:ec:a0:d2:fe:28:09:2a:63:
                    58:89:7d:31:e8:8e:fc:a7:92:4b:2e:2d:32:ab:1b:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:F1:A1:32:9E:8F:43:46:1B:5E:7A:26:82:5D:62:36:AC:12:18
            X509v3 Authority Key Identifier:
                keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20313531353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:60:0a:10:f7:38:46:e1:bb:77:3a:58:00:8d:55:e9:9d:54:
         9e:2f:df:99:78:b9:d0:9c:5d:c3:8d:34:a4:0c:d3:9c:88:24:
         51:d2:55:f2:fd:f4:c4:4a:97:f3:89:42:04:84:96:f0:f2:22:
         5a:7c:0a:a7:59:5f:28:63:f2:d9:0e:73:9a:2b:d2:e3:46:1f:
         9d:a7:1a:53:96:4f:f6:ef:2b:9c:71:76:e3:cf:df:3a:90:f3:
         34:c8:57:b4:16:47:5b:97:63:72:06:ec:f1:29:b0:52:41:37:
         a7:e9:65:8f:70:0b:a9:76:72:10:5d:db:b9:86:2f:70:e4:10:
         55:21:2e:62:9b:f3:8b:a4:74:23:3f:34:c7:37:bb:3e:35:0d:
         2a:36:44:1f:1f:5d:5e:0b:9c:c0:14:75:e5:b9:e2:f3:d3:40:
         62:ac:f5:13:0a:4e:9b:a1:a2:e0:f6:0b:f2:bf:d0:aa:8d:a6:
         4f:65:12:ed:0a:a0:3d:ee:4f:e2:a2:3c:d8:4f:c1:98:d7:c0:
         b3:ba:a0:f3:3a:6c:1f:e4:1d:1f:96:41:9b:ac:82:11:d8:5e:
         a7:0b:6b:81:a6:f8:df:86:b9:46:20:69:bf:4f:5e:50:a1:4b:
         8d:cc:ed:e7:38:b0:6a:1a:09:b7:6d:b9:ea:44:9c:e4:11:89:
         65:56:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:52 2026 by rpki-client