Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          NKItzYNarKE+TUhJiR9ldWP5b/1HRTlqSNKMooaCjyY=
Subject key identifier:   95:B3:00:69:60:10:6B:8F:E8:0A:0B:3C:9E:A1:DD:53:C6:5E:83:8B
Certificate issuer:       /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
Certificate serial:       423020FEA5B40C6CC85A3599F8A22208D1EA612F
Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 02:23:04 +0000
ROA not before:           Sun 03 May 2026 02:18:04 +0000
ROA not after:            Sun 02 May 2027 02:23:04 +0000
asID:                     131717
IP address blocks:        103.110.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:30:20:fe:a5:b4:0c:6c:c8:5a:35:99:f8:a2:22:08:d1:ea:61:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
        Validity
            Not Before: May  3 02:18:04 2026 GMT
            Not After : May  2 02:23:04 2027 GMT
        Subject: CN=95B3006960106B8FE80A0B3C9EA1DD53C65E838B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:77:f2:62:01:c9:69:05:e7:af:9b:e1:33:
                    ae:a7:84:cf:76:fb:74:c4:b7:40:54:f1:25:3a:39:
                    04:ff:ac:22:a7:e8:cf:8a:0b:d6:8a:a1:ae:cd:22:
                    a6:a8:b8:c3:20:ee:86:21:18:f8:e4:05:84:2b:99:
                    12:c2:2a:7b:63:bf:61:78:89:89:1e:eb:f4:49:13:
                    d6:de:9f:c5:d9:8b:d3:f5:70:9d:e1:bb:1a:35:a6:
                    16:46:f7:42:1e:d2:90:d3:be:8d:51:b5:49:62:d8:
                    2e:0d:e7:96:98:98:97:dd:0a:56:ca:ba:79:c5:d4:
                    85:2a:05:2b:c5:b3:ff:e9:e6:9a:f7:ca:af:45:2b:
                    dc:50:88:49:d4:df:5f:74:6a:84:82:73:57:7c:ff:
                    99:e1:e4:93:40:b0:2a:d8:12:38:c8:fa:3e:9f:ce:
                    72:e2:c7:fa:4d:47:c3:47:90:b4:ef:f9:87:24:24:
                    25:40:96:1b:e9:ee:07:d8:b4:b1:61:d9:e6:71:ba:
                    10:6b:ef:bc:cc:bf:1c:37:ab:13:c0:e7:aa:99:2d:
                    dd:99:c7:0d:6b:c7:e0:68:61:df:aa:1f:1f:39:2e:
                    c0:ed:51:e5:45:28:7e:1e:7e:02:91:96:11:a3:cb:
                    e4:7b:c7:c8:14:c2:62:e1:a3:86:d3:6a:04:c4:d0:
                    54:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:00:69:60:10:6B:8F:E8:0A:0B:3C:9E:A1:DD:53:C6:5E:83:8B
            X509v3 Authority Key Identifier:
                keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:a4:c9:bc:2f:74:47:80:a6:d1:5c:40:1e:c9:48:fc:ac:
         fd:2b:88:38:42:9e:d7:63:ec:10:22:22:00:cd:14:c1:d9:f2:
         55:0e:31:b0:45:97:5d:17:4c:39:6f:c4:6d:94:7e:0c:57:69:
         d6:aa:c0:0a:17:39:4c:21:63:1d:ee:42:5f:bd:ac:12:d7:ea:
         96:85:29:db:00:75:18:f0:b1:3f:df:8b:d7:05:76:0c:c0:f5:
         89:df:d3:fc:98:5b:ce:e6:64:e3:a3:09:e1:ef:cc:12:cc:19:
         3b:4f:38:01:69:38:6f:e1:c6:c9:5d:81:4a:42:f2:06:1d:57:
         1b:da:6c:1b:93:c8:34:02:fa:a3:83:e6:27:ea:52:72:7d:d4:
         54:d1:59:c3:af:51:50:f2:5a:96:4d:db:fa:a3:1c:1f:31:a1:
         85:e8:34:a4:45:94:cc:bf:72:0a:5d:e6:f0:b9:36:2e:a5:35:
         a3:73:68:05:1d:ec:cf:36:8a:3d:48:33:b7:62:85:30:a0:27:
         89:f1:89:d1:d9:54:0e:b4:f5:8b:e4:49:f5:45:23:73:56:09:
         e2:eb:59:18:25:4e:56:8f:f7:59:df:73:d7:bd:c2:31:46:aa:
         6c:21:71:25:05:9a:9f:91:03:c6:8a:b6:44:16:62:e6:c7:f7:
         1b:8b:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:57 2026 by rpki-client