Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32322d3234203d3e203535363632.roa
File:                     3130332e37312e382e302f32322d3234203d3e203535363632.roa (raw, json)
Hash identifier:          ZkDRUzZF2wR3zLgrv+xtI4hjJvx2gIYYCb4LSNtWkmg=
Subject key identifier:   C8:35:7F:6F:BD:98:BA:1F:91:26:C3:47:CD:6A:08:0B:8D:65:DB:64
Certificate issuer:       /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial:       122C3F05370830035ABDB549916A63F0182742B1
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32322d3234203d3e203535363632.roa
Signing time:             Sun 03 May 2026 02:21:45 +0000
ROA not before:           Sun 03 May 2026 02:16:45 +0000
ROA not after:            Sun 02 May 2027 02:21:45 +0000
asID:                     55662
IP address blocks:        103.71.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
                          rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2c:3f:05:37:08:30:03:5a:bd:b5:49:91:6a:63:f0:18:27:42:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
        Validity
            Not Before: May  3 02:16:45 2026 GMT
            Not After : May  2 02:21:45 2027 GMT
        Subject: CN=C8357F6FBD98BA1F9126C347CD6A080B8D65DB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:97:55:e3:b6:67:a2:90:0c:11:a5:92:30:
                    8b:91:3c:30:ec:e0:85:b7:78:e8:77:cd:6d:ab:2d:
                    3e:e1:06:be:95:9e:88:2d:7b:62:89:32:ad:e7:0a:
                    42:85:22:63:cf:dc:14:50:36:9c:07:b7:f7:83:46:
                    76:89:f2:81:cf:f4:4d:a7:e1:15:54:75:df:15:20:
                    7d:0e:9a:c4:91:74:c7:f8:96:39:6e:50:68:16:62:
                    67:f5:83:8c:cd:a5:eb:7c:6a:aa:e6:97:8c:4f:30:
                    fe:bc:87:65:c4:68:7a:16:f9:b3:43:64:6d:76:5a:
                    ea:51:f4:9e:47:84:1a:f8:3c:a9:36:4b:91:df:3f:
                    6c:33:e4:14:99:bd:ee:fb:e3:e7:af:56:66:28:70:
                    a6:5e:89:f5:56:08:15:10:0c:68:6f:a1:1c:2a:b2:
                    17:79:6a:b9:30:ac:c4:f4:10:c8:7b:cb:e7:95:81:
                    a5:a9:0c:19:73:04:69:72:10:67:75:e9:3c:a4:8a:
                    65:3c:2e:01:c4:8e:06:c2:f8:28:ff:ef:a7:67:f5:
                    32:8f:00:fb:ab:a3:70:24:ff:28:d7:4a:85:5a:5f:
                    cf:d7:85:7c:a0:6a:e3:ae:da:4c:94:64:5f:11:a8:
                    32:7c:9f:b2:d8:16:fe:9b:7e:77:7b:06:d4:54:ac:
                    ad:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:35:7F:6F:BD:98:BA:1F:91:26:C3:47:CD:6A:08:0B:8D:65:DB:64
            X509v3 Authority Key Identifier:
                keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e382e302f32322d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:f7:7f:2d:2b:94:23:97:c5:8a:2d:bd:a8:c0:33:97:58:
         88:92:a1:36:a5:fc:0f:14:15:b3:49:08:ca:5c:bd:38:6b:33:
         7b:59:d0:1d:b3:79:1a:12:35:ed:45:e7:35:fb:39:64:16:f3:
         d5:3f:4f:02:e9:b2:cc:4c:b3:74:fa:f8:2d:d1:d4:4c:af:38:
         fa:ba:43:40:1a:11:5f:bc:1d:ee:cd:72:fc:5c:43:fc:17:f2:
         fb:68:41:6f:11:38:17:ac:22:90:4d:8b:3e:3b:c5:e7:93:ab:
         49:9d:31:e6:15:4f:ed:53:3d:5f:25:e8:ec:dd:18:96:85:fd:
         34:6c:47:06:dc:19:f6:13:47:7e:ac:a5:10:86:98:6b:9f:ed:
         fa:be:87:c0:dd:75:fd:15:00:d2:4f:a0:cb:b9:3b:c7:bf:b2:
         14:06:d0:dd:ab:6f:9b:33:fe:c5:13:d9:05:e0:a4:46:99:51:
         31:28:b4:9a:dc:33:66:6a:ba:5e:c9:05:4a:92:50:9d:9b:4b:
         04:70:a9:cc:23:3f:e7:bf:ef:8d:75:75:81:af:ab:02:51:9a:
         a1:fb:b4:69:84:56:df:ab:92:d2:31:ea:1e:9b:ef:0d:ea:0e:
         68:6a:e7:45:fb:25:68:12:73:16:df:ca:64:6e:cf:5c:f8:10:
         82:7e:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:21 2026 by rpki-client