Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e382e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          s+lAIuyl1dv1WqDdq41tXGp1HYckaXMlnCxzrakKc3U=
Subject key identifier:   D8:67:BE:7E:66:02:7F:B1:C6:3D:AE:59:23:A3:26:F1:E4:A2:F7:2D
Certificate issuer:       /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
Certificate serial:       76CEE0009A255F624A0FC520FEE294732A2B443F
Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 02:23:04 +0000
ROA not before:           Sun 03 May 2026 02:18:04 +0000
ROA not after:            Sun 02 May 2027 02:23:04 +0000
asID:                     131717
IP address blocks:        103.110.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ce:e0:00:9a:25:5f:62:4a:0f:c5:20:fe:e2:94:73:2a:2b:44:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
        Validity
            Not Before: May  3 02:18:04 2026 GMT
            Not After : May  2 02:23:04 2027 GMT
        Subject: CN=D867BE7E66027FB1C63DAE5923A326F1E4A2F72D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:1e:4f:f5:9f:e7:4f:35:e9:b4:37:26:2d:
                    5f:78:7d:dc:73:60:0f:3b:e0:54:52:cd:e4:42:7b:
                    c9:b7:8d:8e:42:35:83:af:89:cd:d6:89:77:36:34:
                    3d:d8:5d:b2:99:1d:42:8c:f6:b7:da:68:c0:f2:ab:
                    21:50:ba:ab:61:02:8f:70:55:9f:bb:a9:72:96:ec:
                    db:44:67:12:88:fd:17:fe:5f:b2:16:8d:70:16:d5:
                    78:a6:c0:9e:2f:6e:f2:1a:d0:95:2b:eb:22:df:25:
                    a4:bc:ac:7c:13:7d:a8:9f:79:94:6a:bb:76:10:5a:
                    d4:16:a4:be:e2:cd:9f:92:ac:f9:1b:21:c4:26:65:
                    3c:43:0c:b2:c9:84:c1:db:95:e8:77:c0:a2:d8:fe:
                    e1:47:73:c4:d7:ed:d0:d0:f6:0c:84:c9:20:65:2f:
                    78:96:cf:60:c4:08:ff:61:40:26:76:4d:a5:72:20:
                    76:f4:6f:da:ec:d9:21:8d:f4:eb:f8:0e:c1:87:1b:
                    81:b9:78:d5:32:93:ef:2c:c9:09:ed:9f:85:25:3d:
                    95:bf:2c:7a:86:37:b6:0b:f9:a4:c9:f3:61:de:9d:
                    a4:d0:3f:44:46:ad:69:33:2e:2c:9b:d8:8f:ed:52:
                    6b:2a:80:73:18:9f:45:10:c3:e8:17:25:71:85:a2:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:67:BE:7E:66:02:7F:B1:C6:3D:AE:59:23:A3:26:F1:E4:A2:F7:2D
            X509v3 Authority Key Identifier:
                keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e382e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6d:92:39:73:e4:21:f1:81:91:e0:9c:bb:e3:c1:6a:dd:b5:
         9f:3c:0a:e2:2c:02:10:df:c8:94:98:75:f5:09:8a:d7:56:29:
         1e:be:e8:6a:b7:93:54:82:cb:0b:94:15:15:d3:f7:e2:17:f8:
         31:bf:97:11:b9:a1:40:23:4d:bf:e0:e1:c4:e3:a7:ad:b3:fb:
         2b:95:13:63:b8:54:00:35:a0:84:9a:c4:3f:02:e3:de:45:5f:
         70:be:f2:27:1e:a6:23:fe:5d:2f:ec:1f:02:54:27:26:34:a6:
         4b:8a:55:19:0a:08:61:7d:f6:04:29:d3:0e:2d:35:73:18:64:
         71:d3:ce:b1:10:c5:8e:35:10:2f:39:15:dd:87:2d:e5:6c:8c:
         e9:02:3d:47:c5:c8:6f:45:99:bf:d5:d7:52:80:b2:f2:05:de:
         2e:4c:8a:93:4d:bb:b2:dc:de:eb:40:a6:74:07:ee:8e:f5:72:
         a9:0a:eb:e3:52:ff:9b:84:ec:5b:e7:4d:cb:3d:0d:ce:62:65:
         1b:83:c2:64:aa:3a:6b:fc:a9:dc:04:d2:8c:c6:87:77:91:3f:
         f0:3e:b9:02:e6:89:94:29:c7:f8:ad:28:3b:7c:25:b8:0e:58:
         0a:4c:70:9c:f7:ef:af:1c:a5:59:a5:92:ce:90:fc:b3:52:b3:
         36:8e:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:41 2026 by rpki-client