Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa
File:                     3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          aiNrGAeAARyIc2dCnlCUgFBToP7iFIwl+AQxWXXIXA0=
Subject key identifier:   15:34:43:6A:A5:FD:40:D2:C7:1D:35:9D:B2:7D:7F:7C:DE:C5:FE:CC
Certificate issuer:       /CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
Certificate serial:       3665A1E0561B9F9CB01A8295546102D7F78F8245
Authority key identifier: 41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa
Signing time:             Sun 03 May 2026 02:19:07 +0000
ROA not before:           Sun 03 May 2026 02:14:07 +0000
ROA not after:            Sun 02 May 2027 02:19:07 +0000
asID:                     396982
IP address blocks:        103.242.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl
                          rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:65:a1:e0:56:1b:9f:9c:b0:1a:82:95:54:61:02:d7:f7:8f:82:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C
        Validity
            Not Before: May  3 02:14:07 2026 GMT
            Not After : May  2 02:19:07 2027 GMT
        Subject: CN=1534436AA5FD40D2C71D359DB27D7F7CDEC5FECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4c:17:3f:a6:a5:9e:2d:03:ea:58:83:21:68:
                    86:f9:a4:6d:3b:05:16:c6:7f:ca:32:37:d3:e3:bd:
                    07:fd:6d:27:b1:c6:ee:39:aa:00:29:2b:fc:e3:94:
                    2f:fd:cb:b8:d1:64:a9:39:33:db:97:8a:41:7a:12:
                    18:0c:ac:09:4e:3e:1e:4c:db:52:38:ef:46:34:37:
                    5a:5a:92:b6:87:77:8a:c9:d4:12:9d:c4:54:be:f0:
                    c8:98:13:9a:36:d1:67:07:95:74:2c:69:84:4e:4b:
                    c8:9e:42:71:8a:56:3a:18:6e:1c:c8:a9:0d:03:c6:
                    af:93:3a:1f:76:51:90:51:e4:40:77:e0:91:a9:71:
                    1c:ff:73:b8:1e:d3:b2:d8:24:e5:20:fe:50:62:a2:
                    3f:b9:02:59:4a:76:8d:1a:cf:2c:73:ae:51:f0:17:
                    b5:a9:5f:04:23:df:ae:d4:e5:6d:37:4d:74:56:fb:
                    6a:0a:9f:3a:0f:e7:38:3c:87:b8:28:8c:97:3f:ca:
                    07:47:92:fc:6b:2a:c3:a7:5e:5a:c4:65:1a:f1:9c:
                    60:3d:d2:34:48:05:bd:63:cb:74:8e:71:0f:e8:b3:
                    77:ac:4f:ef:bd:17:30:4c:71:e5:e9:42:da:1d:47:
                    84:58:53:ad:8b:7e:bc:09:df:12:c5:4d:4d:d5:84:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:43:6A:A5:FD:40:D2:C7:1D:35:9D:B2:7D:7F:7C:DE:C5:FE:CC
            X509v3 Authority Key Identifier:
                keyid:41:C2:4C:04:87:C4:10:C3:AE:C4:BE:B4:DC:40:3C:D0:47:B3:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/41C24C0487C410C3AEC4BEB4DC403CD047B3EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20481e49-f4c1-4c13-94b7-0701c92c3450/0/3130332e3234322e37392e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:96:50:4c:1e:af:6f:23:2c:3a:d3:23:8d:ed:76:ed:9b:dc:
         10:63:af:f7:ae:5d:2f:71:c7:53:b0:2f:ba:69:97:44:07:d7:
         b7:d3:22:df:f6:05:17:28:4d:e2:b6:9a:00:0f:61:c7:ba:92:
         fd:48:19:f2:e4:0c:d9:94:89:0e:11:61:cd:d5:8b:73:f4:ca:
         7a:8a:34:e3:16:27:53:f9:3a:0d:6f:f5:4b:91:9f:c8:69:9b:
         b1:ce:d6:b4:06:eb:43:26:7b:c7:96:e6:af:f1:de:ba:45:06:
         a9:a8:0c:57:1a:81:1a:90:eb:8e:19:37:5f:41:ec:b5:e8:72:
         a4:d3:92:4d:f0:30:dc:85:99:b7:62:fd:be:78:74:16:4d:cd:
         9b:0f:f3:80:0a:53:47:00:c7:a9:73:10:31:d3:a0:c8:56:fc:
         95:8e:93:52:f9:ed:58:cb:83:d7:12:8f:ba:d8:14:06:a3:49:
         3e:f5:ea:68:35:b1:45:d4:a4:79:25:9d:19:9d:84:44:25:ff:
         cf:af:40:d9:21:b7:d1:c0:aa:05:83:1f:14:85:b9:3b:51:12:
         85:50:b7:d9:98:f8:89:ef:16:e8:16:1a:33:b8:32:93:22:63:
         41:a8:70:8b:2c:46:81:cd:88:6f:af:c8:0c:6d:e9:95:a9:3c:
         dc:79:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:56 2026 by rpki-client