Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa
File:                     3130332e37312e392e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier:          MdXlPd40mbCtjh7iBEjKVSFA2qec8G7HYFT+dNSNEB4=
Subject key identifier:   6A:24:64:C0:C0:0B:1A:FD:45:F1:F5:CC:18:54:77:7C:B8:6A:31:39
Certificate issuer:       /CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
Certificate serial:       76E15B13DA19F0A0DDA3456F6539ACD12A4A4FDC
Authority key identifier: 81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa
Signing time:             Sun 03 May 2026 02:21:47 +0000
ROA not before:           Sun 03 May 2026 02:16:47 +0000
ROA not after:            Sun 02 May 2027 02:21:47 +0000
asID:                     55662
IP address blocks:        103.71.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl
                          rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:5b:13:da:19:f0:a0:dd:a3:45:6f:65:39:ac:d1:2a:4a:4f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8110570CE55D8512FCBDF02819FB8A0D3BAD1F94
        Validity
            Not Before: May  3 02:16:47 2026 GMT
            Not After : May  2 02:21:47 2027 GMT
        Subject: CN=6A2464C0C00B1AFD45F1F5CC1854777CB86A3139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:a4:68:65:29:d0:de:e3:03:7e:b6:25:99:
                    bc:d0:fb:8b:aa:a0:06:c0:dd:84:66:f9:e8:f3:18:
                    27:8d:c8:3a:4d:ae:31:d7:5e:a6:8e:e1:dc:55:c7:
                    fc:48:ca:98:fb:08:78:3e:12:be:f0:d9:8a:c8:ca:
                    b5:03:27:ba:a4:95:22:0e:e1:2e:8a:02:74:b4:40:
                    a8:d4:c2:7d:f2:3d:a5:fc:d8:73:7c:c1:d5:7e:da:
                    d3:69:7e:a4:08:bf:6c:9a:a4:c3:a5:83:db:54:40:
                    14:9d:1c:0f:b9:10:18:46:cd:a3:9a:8d:bc:7f:66:
                    e0:8b:64:27:8b:0c:aa:3d:cb:07:f3:87:07:43:d4:
                    48:be:8e:c4:42:21:b8:40:46:1f:b2:21:2b:1c:e7:
                    f6:e8:08:f5:d1:5c:2a:94:42:70:c9:cb:18:3f:c7:
                    92:04:b1:25:50:04:89:55:c6:2b:46:67:99:f2:ea:
                    64:72:a5:51:04:ee:95:48:e7:47:e0:79:5e:c4:c9:
                    11:70:76:3c:fa:b9:c2:e7:40:2f:7b:7b:f9:78:37:
                    b7:9d:b2:0f:75:c3:24:7b:62:c0:2b:77:fb:88:43:
                    4a:ed:09:ba:bf:f0:c2:d6:d6:42:24:23:d5:65:18:
                    ba:fa:cf:f8:6d:2e:18:43:89:68:40:ba:ee:7c:f5:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:24:64:C0:C0:0B:1A:FD:45:F1:F5:CC:18:54:77:7C:B8:6A:31:39
            X509v3 Authority Key Identifier:
                keyid:81:10:57:0C:E5:5D:85:12:FC:BD:F0:28:19:FB:8A:0D:3B:AD:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8110570CE55D8512FCBDF02819FB8A0D3BAD1F94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4a:d9:05:6c:43:05:13:0d:2d:4d:86:18:76:18:e1:d3:82:
         db:6e:d9:0b:9d:4f:57:a5:22:50:51:e6:2e:17:64:8d:27:48:
         86:2b:f7:aa:67:b5:0d:c3:11:94:2e:d7:0b:3a:f9:1a:af:a5:
         fb:15:59:4a:b7:d7:d4:61:ff:38:e0:da:cb:3e:fe:9b:ce:c1:
         5f:f4:54:c0:25:6b:6c:b6:b5:19:09:04:57:9d:c8:5f:8d:b2:
         a1:a2:76:99:8b:49:26:16:c9:fb:ad:0d:ef:16:9e:7e:48:7b:
         7d:4e:fd:76:29:d3:18:87:af:0b:13:b4:e5:ea:b3:8e:10:81:
         1f:10:4d:30:72:e7:a9:71:c3:8e:03:6b:20:e8:2c:ad:05:00:
         ba:c9:bc:ce:44:6c:63:1e:21:f9:08:1d:16:00:4b:a9:ce:8a:
         5f:16:a5:20:7b:26:a2:40:4b:f2:b3:48:19:80:f0:85:3d:d6:
         b8:13:e6:e6:30:68:58:ca:77:dc:31:14:7d:9f:2e:ba:ea:bc:
         d4:45:d6:e7:28:3d:40:2e:7d:16:6d:c9:46:a3:4c:38:93:3d:
         79:1c:ac:18:bd:68:ef:73:8f:b3:ac:64:9c:2f:cd:06:77:89:
         cf:c4:31:63:13:d2:11:67:dc:6a:85:cf:78:ce:80:85:e5:25:
         07:aa:f6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:23 2026 by rpki-client