Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
File:                     3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa (raw, json)
Hash identifier:          4usmrutgY/beqY8KttmIEGM6ND+uj+WPCIUZTt7ix2A=
Subject key identifier:   59:CC:B9:2F:2F:59:22:55:93:5B:93:00:DA:C3:35:A6:74:C6:E8:BE
Certificate issuer:       /CN=07036C5527255D59345E40A173983EEEA0C09FD0
Certificate serial:       58EFF258932104EC9E936D915B14E3A7EECFEDBE
Authority key identifier: 07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa
Signing time:             Sun 03 May 2026 02:19:37 +0000
ROA not before:           Sun 03 May 2026 02:14:37 +0000
ROA not after:            Sun 02 May 2027 02:19:37 +0000
asID:                     142396
IP address blocks:        103.172.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl
                          rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:f2:58:93:21:04:ec:9e:93:6d:91:5b:14:e3:a7:ee:cf:ed:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07036C5527255D59345E40A173983EEEA0C09FD0
        Validity
            Not Before: May  3 02:14:37 2026 GMT
            Not After : May  2 02:19:37 2027 GMT
        Subject: CN=59CCB92F2F592255935B9300DAC335A674C6E8BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:db:18:fe:81:db:6b:3c:c9:c9:be:d1:5f:
                    6d:de:35:72:21:87:b2:10:2c:a7:de:51:ec:5a:82:
                    9b:bd:da:4f:49:96:ec:41:c2:04:f2:97:2d:01:c1:
                    63:e7:76:b5:25:88:c2:dc:7a:25:5e:a9:3d:f5:37:
                    1e:f5:dd:88:fe:00:4a:8b:df:ed:1f:83:21:56:81:
                    9d:34:6e:f1:f3:de:13:a1:35:92:25:7c:ba:91:82:
                    2c:d3:08:35:6d:cb:af:a1:0d:c3:5b:c9:9d:83:d6:
                    b7:9e:30:cb:e1:7e:21:08:b4:f0:ae:9c:f9:6a:1f:
                    ab:70:05:94:ee:50:30:dc:67:9d:c3:7f:2c:05:70:
                    48:2b:4e:a4:4c:ab:1b:de:dc:c9:98:69:75:e8:92:
                    20:5b:d1:3f:f8:29:83:14:63:a4:27:b7:31:34:8f:
                    b9:b4:23:07:60:08:5f:24:89:84:00:70:93:20:15:
                    0b:fa:eb:5b:be:8d:73:a5:fc:4b:de:a2:fb:05:13:
                    18:76:7b:64:b0:9c:49:bd:40:06:00:3b:d7:c2:5f:
                    f8:27:51:d4:47:ae:85:da:30:7d:0c:ec:73:88:bf:
                    39:45:25:1f:b7:76:b9:ff:4a:86:0d:3f:e2:8f:2e:
                    4e:c5:ce:37:d0:e5:08:3c:bd:9f:14:4f:a0:6f:0a:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CC:B9:2F:2F:59:22:55:93:5B:93:00:DA:C3:35:A6:74:C6:E8:BE
            X509v3 Authority Key Identifier:
                keyid:07:03:6C:55:27:25:5D:59:34:5E:40:A1:73:98:3E:EE:A0:C0:9F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/07036C5527255D59345E40A173983EEEA0C09FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/07036C5527255D59345E40A173983EEEA0C09FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/21db6c9b-d8fc-4d8c-80cb-fd2241208dde/0/3130332e3137322e3137302e302f32342d3234203d3e20313432333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4e:5b:d9:35:d0:aa:9c:fe:4f:d9:fc:ec:d5:f6:8e:99:f3:
         bc:60:fa:6f:4f:79:53:30:03:17:23:c7:b2:dc:a5:27:66:c0:
         05:ad:60:86:9f:59:f3:f7:14:f5:31:0e:bf:f5:87:20:42:77:
         71:9d:5b:11:ef:61:e7:96:5f:52:02:20:9f:71:4d:45:14:8a:
         40:0b:52:1f:27:9f:e5:58:d4:02:a7:40:b6:49:bb:80:a4:63:
         d4:8a:55:0e:f8:12:5b:91:12:c5:2c:12:b5:57:71:4d:6f:4f:
         a0:7e:31:00:33:33:51:9b:0c:9a:03:85:0e:b3:ae:41:00:f7:
         69:61:59:3e:de:41:a0:97:d5:0a:0f:d7:70:a7:32:fa:46:ee:
         80:71:b9:f2:b9:92:31:30:f4:3d:5a:3a:ce:0a:c8:1d:8e:44:
         8a:b3:1a:d2:c8:9f:14:27:26:4e:a2:f0:50:98:9c:9d:9f:20:
         34:ee:a9:c4:44:06:5c:90:b9:36:ba:31:a0:13:1e:bf:13:03:
         39:6b:f4:48:0f:40:fd:0c:a1:33:ef:41:71:98:70:ab:36:fd:
         49:b0:45:be:05:02:6c:57:74:25:8e:12:95:3d:2d:bd:63:7e:
         11:80:49:20:38:38:94:09:70:31:0c:a1:68:c6:06:71:23:e5:
         49:d8:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:49 2026 by rpki-client