Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa
File:                     3130332e3131302e382e302f32322d3232203d3e20313331373137.roa (raw, json)
Hash identifier:          Kg2bdy6dTnZCGuVMJi5no/EOV3EwEAkV5IIyUjha9e4=
Subject key identifier:   21:94:42:B7:78:90:9E:A3:65:7E:35:8D:DD:30:62:6A:7C:85:D3:54
Certificate issuer:       /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
Certificate serial:       331742C9EA3173F5DEFD88FB63D7E5C6315374B9
Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 02:23:03 +0000
ROA not before:           Sun 03 May 2026 02:18:03 +0000
ROA not after:            Sun 02 May 2027 02:23:03 +0000
asID:                     131717
IP address blocks:        103.110.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:17:42:c9:ea:31:73:f5:de:fd:88:fb:63:d7:e5:c6:31:53:74:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
        Validity
            Not Before: May  3 02:18:03 2026 GMT
            Not After : May  2 02:23:03 2027 GMT
        Subject: CN=219442B778909EA3657E358DDD30626A7C85D354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:31:16:a8:2a:65:47:2a:8e:06:46:90:ba:
                    06:c8:00:2c:91:0d:e5:a4:70:07:b7:7c:30:ff:7f:
                    88:bc:32:7c:c4:e7:98:3b:9c:77:72:70:65:a4:c0:
                    53:b6:5e:58:07:f2:c5:5c:0e:f0:70:31:ed:08:2a:
                    52:3a:d3:ec:5f:19:e5:1f:30:dd:8b:47:64:0d:f4:
                    f6:1d:6d:76:ac:32:33:f1:5a:7d:a2:43:64:c8:8c:
                    d1:52:93:b0:d9:95:a2:dc:1c:55:17:9e:81:0e:e2:
                    64:f1:16:e0:3e:d3:8f:7d:fb:82:c9:5a:66:99:09:
                    ea:d2:eb:82:12:02:4d:ad:21:34:9f:b7:31:82:c6:
                    84:3b:64:07:26:f4:90:a6:ac:8d:a9:6f:a6:d7:ce:
                    77:12:71:c3:a4:fb:8f:6e:82:91:d8:e7:39:6b:85:
                    a3:83:91:51:21:89:d4:38:89:41:e9:43:d9:53:ae:
                    a3:6a:25:2f:d9:b4:79:9f:12:16:9b:1b:46:db:d0:
                    98:e3:74:9f:6c:9d:d5:24:37:8f:95:0f:e1:21:54:
                    1b:8f:42:21:79:38:72:1a:4b:2a:91:cf:3a:f9:5b:
                    7b:9e:00:39:d1:fa:69:79:2d:0a:31:f3:55:2e:c9:
                    6b:e4:1a:75:76:33:d2:2b:a5:0f:2a:4c:95:45:70:
                    5d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:94:42:B7:78:90:9E:A3:65:7E:35:8D:DD:30:62:6A:7C:85:D3:54
            X509v3 Authority Key Identifier:
                keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32322d3232203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:10:a7:2f:12:4e:8f:e3:bb:b0:ef:39:fa:75:00:b6:1f:56:
         51:94:97:2b:92:7b:95:3d:cc:c4:3b:18:63:2f:d8:a6:4e:bf:
         eb:4d:cd:b0:ac:b8:ec:2e:4e:93:99:a1:a9:73:67:8f:ba:89:
         fc:97:3f:69:b8:51:9e:4a:37:e3:de:31:1d:af:f3:9a:92:74:
         77:45:ea:55:6b:91:ae:db:8c:ed:70:04:ab:51:56:67:86:c4:
         ed:63:f5:ba:e8:c1:e6:a2:ab:75:01:43:4a:0c:53:62:55:ff:
         41:7f:35:7e:ab:9a:4a:2c:f3:19:54:6b:68:ac:ce:16:43:4b:
         0d:1c:3a:0e:15:25:3f:6a:17:bc:0e:36:c5:e5:f7:e1:36:7b:
         4e:64:a4:19:47:49:b3:56:8e:cc:a5:58:f8:bb:5e:78:74:29:
         58:f4:a9:cc:ad:e8:4e:20:cb:b7:57:7a:16:00:5e:d3:31:fb:
         e2:76:63:43:e8:b3:37:13:c4:15:05:89:65:d1:8b:73:b6:a4:
         ab:85:0c:2f:b0:48:0e:07:b0:32:42:4e:66:d4:33:ae:28:54:
         58:58:1b:42:9e:6b:cb:39:d7:c7:3e:e3:f7:7e:15:f1:41:84:
         d5:58:66:fa:83:81:72:2f:a3:44:1d:c7:36:9a:d4:11:c8:c8:
         24:49:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:09 2026 by rpki-client