Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          Mpp9OU1lEkyqF3Ggv/Uj91rXdSfC43uVMM30opk/H2Q=
Subject key identifier:   B8:0F:F0:9C:33:A7:B9:4E:77:F5:AC:36:E1:49:D4:7F:B2:1C:55:1E
Certificate issuer:       /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
Certificate serial:       708B89B6A87FDBC1AE2ED0153381D645366513B0
Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 02:23:04 +0000
ROA not before:           Sun 03 May 2026 02:18:04 +0000
ROA not after:            Sun 02 May 2027 02:23:04 +0000
asID:                     131717
IP address blocks:        103.110.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8b:89:b6:a8:7f:db:c1:ae:2e:d0:15:33:81:d6:45:36:65:13:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
        Validity
            Not Before: May  3 02:18:04 2026 GMT
            Not After : May  2 02:23:04 2027 GMT
        Subject: CN=B80FF09C33A7B94E77F5AC36E149D47FB21C551E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:a9:60:b5:7d:ac:53:25:88:ee:be:5f:2f:
                    7b:12:c5:6c:02:e1:21:6b:c5:15:c1:98:4c:06:76:
                    f8:3c:60:15:fb:27:ac:14:25:c2:78:83:6b:19:0f:
                    aa:ea:99:d9:48:b1:11:68:8d:5c:3c:43:72:ad:11:
                    60:20:2b:d2:86:22:96:54:ab:02:01:b4:42:ea:fa:
                    48:c7:11:36:34:b2:a0:a4:c0:9b:52:7b:6b:5a:16:
                    32:17:98:9b:6c:87:f8:b4:83:f4:18:51:f3:d9:e2:
                    a9:c3:61:95:ec:54:cb:4e:7b:34:0f:5a:01:39:46:
                    35:6f:7e:28:02:11:fb:cb:82:5f:73:63:f9:00:4b:
                    72:9f:fe:08:7f:c4:23:2b:e3:fc:c2:8e:04:d6:b4:
                    53:b9:27:df:ce:bc:ca:6c:05:ba:29:67:01:30:b9:
                    c6:3a:1c:dd:88:dd:25:48:2c:0a:24:bc:27:ec:05:
                    b3:b4:da:a9:3a:6a:89:3e:4a:e3:99:f0:79:51:87:
                    1a:66:f0:19:55:20:a9:47:f0:3e:5a:31:ff:cf:85:
                    d6:2e:75:e4:77:6e:24:6c:58:e6:08:53:d5:c2:e4:
                    3d:5a:98:7e:ec:7f:8a:c4:b2:40:99:89:ef:01:b9:
                    60:59:2e:73:ac:ac:78:76:5f:35:08:a3:a7:fb:18:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:F0:9C:33:A7:B9:4E:77:F5:AC:36:E1:49:D4:7F:B2:1C:55:1E
            X509v3 Authority Key Identifier:
                keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:07:d9:18:ae:64:7c:b6:0d:26:f6:7a:12:d2:6f:7d:92:
         2d:fa:89:63:03:02:73:6c:9f:52:09:32:b9:6e:36:50:5b:66:
         46:64:00:38:b7:54:5f:69:e2:be:2e:f9:10:2a:f2:54:15:b8:
         18:e8:22:9c:b2:0a:1b:ac:8e:64:1f:1c:ad:55:89:0a:bd:b9:
         95:37:a0:95:59:01:51:0a:aa:0d:97:23:db:15:56:53:21:c0:
         f3:55:d3:a5:cc:3a:ea:64:92:ee:96:56:47:83:18:4b:c1:84:
         15:a4:68:fc:9b:97:d8:03:c5:de:c1:dd:0c:30:fa:3f:65:26:
         fb:f8:ab:43:15:db:be:6a:27:9c:32:c7:13:4c:54:80:47:2b:
         21:56:30:47:db:23:b2:19:fe:37:66:89:09:2d:69:37:d0:7b:
         84:b2:7c:e1:d4:56:42:d4:8e:5b:ae:aa:e6:f1:e6:ef:d8:f1:
         27:e6:2a:2c:c4:4c:69:d3:34:01:dd:1a:4a:91:cc:cb:e6:60:
         22:a9:46:87:6f:ee:38:12:6f:d0:72:fd:c0:08:5d:ca:4f:27:
         25:d1:8a:5f:ff:a5:f1:65:4c:f8:b9:d7:cf:59:04:7d:51:db:
         d1:7d:46:d0:b6:e6:e9:81:db:45:d7:66:ac:fe:ac:c3:9e:8f:
         0c:10:ab:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:58:54 2026 by rpki-client