Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          b4LTEHtBD4cacvWmxSniiJll9o+3QBEIUc2Dmt3tUNE=
Subject key identifier:   5D:9D:E2:16:16:DA:14:F5:CB:2E:1D:40:98:CF:E9:69:60:92:7B:E0
Certificate issuer:       /CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
Certificate serial:       3AA1146983C9E7D527954E01A0A91BD19AA7EC4E
Authority key identifier: C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 02:23:05 +0000
ROA not before:           Sun 03 May 2026 02:18:05 +0000
ROA not after:            Sun 02 May 2027 02:23:05 +0000
asID:                     131717
IP address blocks:        103.110.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl
                          rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a1:14:69:83:c9:e7:d5:27:95:4e:01:a0:a9:1b:d1:9a:a7:ec:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01EB179D8CA7855A389FF2A44539E68ED646B5C
        Validity
            Not Before: May  3 02:18:05 2026 GMT
            Not After : May  2 02:23:05 2027 GMT
        Subject: CN=5D9DE21616DA14F5CB2E1D4098CFE96960927BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:98:13:e8:35:e6:d1:15:9d:3c:df:16:ec:
                    74:51:77:cb:72:31:fd:74:3b:94:c7:f9:4c:c3:e7:
                    5b:c6:a7:e4:6b:b5:48:ef:1c:d4:2d:c0:98:aa:22:
                    5f:b0:33:84:5f:68:62:b2:8f:df:b9:5b:d5:5a:fa:
                    63:14:ac:97:69:f4:60:58:4f:e5:47:0d:f7:65:cf:
                    a7:3d:73:d0:48:3e:d7:11:3f:20:bf:4e:fb:35:5b:
                    d9:fe:06:ac:47:93:e0:6c:70:d3:32:4a:82:0a:56:
                    7f:66:05:fe:44:90:03:8f:57:a6:d7:51:a2:33:ae:
                    24:c9:61:79:47:e8:7b:04:10:e9:11:f4:a8:39:49:
                    11:43:76:31:7f:16:fd:f5:ca:d1:4f:32:a9:d1:ba:
                    31:3c:8c:19:40:a7:82:57:25:38:77:88:69:bf:e4:
                    60:e4:fe:a2:83:3f:29:67:2b:78:03:f2:95:d6:a0:
                    63:73:c0:ca:aa:91:4a:32:a9:6d:93:ed:18:74:e4:
                    d4:1e:cc:f8:5c:ea:26:c8:4f:ce:cd:35:91:16:69:
                    de:20:f8:b1:1c:b4:04:b7:73:c0:58:b4:27:66:e8:
                    a8:51:92:99:5e:43:d5:f0:8e:7c:50:b4:c9:4e:08:
                    9f:bb:39:61:14:a0:ec:a7:88:12:f3:04:9f:fe:1e:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9D:E2:16:16:DA:14:F5:CB:2E:1D:40:98:CF:E9:69:60:92:7B:E0
            X509v3 Authority Key Identifier:
                keyid:C0:1E:B1:79:D8:CA:78:55:A3:89:FF:2A:44:53:9E:68:ED:64:6B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/C01EB179D8CA7855A389FF2A44539E68ED646B5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C01EB179D8CA7855A389FF2A44539E68ED646B5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:83:ef:39:ac:a9:d7:31:21:a0:c3:e1:c9:76:d8:61:8c:
         bd:f5:2f:65:39:d6:58:02:83:2f:25:48:49:f0:62:92:5b:33:
         c5:a8:49:90:e3:60:bd:d9:69:38:b8:88:22:34:e2:2a:fe:1f:
         69:00:df:86:f6:48:d1:9f:21:22:c4:6c:8e:2d:34:08:3b:21:
         ae:1b:99:ea:6a:4b:78:03:e5:f6:9f:cf:f9:0d:be:2a:35:33:
         ad:e4:44:a0:c6:92:9a:18:8b:b3:15:7f:d1:49:84:18:cd:8d:
         47:07:92:5a:50:c6:ea:06:52:40:30:81:de:aa:c6:ce:f3:64:
         8e:e2:42:d1:cc:35:13:b7:ec:c4:a6:29:dc:22:47:ba:90:32:
         6b:85:1b:64:bb:10:42:d7:5e:1e:1c:86:3d:9f:d3:97:41:7e:
         b9:b5:0d:29:c5:10:a1:55:a5:a0:ea:2c:08:2e:7d:89:ea:6a:
         47:66:a2:2d:81:b2:88:72:66:47:3f:0b:ea:5f:8d:fd:b6:ca:
         9f:c9:f6:dd:07:c8:ba:8f:d0:36:39:70:7c:cd:3b:2e:1a:f8:
         ee:bb:90:75:3a:95:a1:69:6d:a8:cc:c2:4c:49:19:c6:9e:be:
         14:4a:7f:b7:97:1a:f2:c5:eb:cb:3a:6c:f5:74:4f:b3:58:03:
         d5:6c:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:52 2026 by rpki-client