Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa
File:                     3130332e33392e37302e302f32332d3233203d3e20313530323734.roa (raw, json)
Hash identifier:          WYzWECJswPuDdOJ6s8DgvpO0dlp9PAdq1CvX0vtmC3A=
Subject key identifier:   60:5C:7F:EB:5E:31:89:37:45:A7:54:58:25:BB:16:AA:E9:DE:05:47
Certificate issuer:       /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
Certificate serial:       42035D9A8E78CB506E622403083410C6A85CE255
Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa
Signing time:             Sun 03 May 2026 02:28:30 +0000
ROA not before:           Sun 03 May 2026 02:23:30 +0000
ROA not after:            Sun 02 May 2027 02:28:30 +0000
asID:                     150274
IP address blocks:        103.39.70.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl
                          rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:03:5d:9a:8e:78:cb:50:6e:62:24:03:08:34:10:c6:a8:5c:e2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
        Validity
            Not Before: May  3 02:23:30 2026 GMT
            Not After : May  2 02:28:30 2027 GMT
        Subject: CN=605C7FEB5E31893745A7545825BB16AAE9DE0547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:ca:6a:d0:ea:7a:1d:37:e0:8c:34:75:50:
                    99:76:ed:9e:f0:67:c3:53:51:80:30:7e:da:52:2b:
                    a1:a1:0e:c3:dc:05:7a:07:e5:0f:37:ed:3f:06:fa:
                    a4:1a:83:b1:68:ec:8d:32:6b:44:f8:b6:b0:22:22:
                    0d:c1:fd:cd:88:68:12:0e:96:9b:cc:fd:07:8b:df:
                    bd:e0:7b:42:7d:fb:fa:8f:87:76:a8:53:d1:b8:a6:
                    ba:d3:c0:f8:a3:32:09:d2:22:d4:b4:d3:b7:3f:d5:
                    d7:63:17:d3:45:12:47:be:e8:e4:8b:eb:e6:20:ac:
                    40:d8:a3:1f:12:2f:a2:08:ce:59:43:ca:dc:14:cc:
                    e1:13:cf:db:13:9f:1a:b4:72:fd:77:75:35:fb:02:
                    20:99:26:30:73:d2:e9:ac:bb:3f:6e:60:72:1e:41:
                    e5:cf:8f:bb:83:5d:98:08:8b:a4:d2:07:d0:57:66:
                    9d:1a:25:3d:04:e4:80:ed:eb:60:f1:eb:d1:a2:fe:
                    08:1b:81:3a:1f:91:8c:ea:25:1d:9a:dc:bd:f2:d7:
                    38:b2:f0:10:ef:db:c3:97:39:17:7c:b4:89:28:ac:
                    5a:35:9b:9e:04:f6:c2:74:d2:88:56:31:0f:26:62:
                    80:9b:51:2d:04:8b:17:ef:84:8e:46:ad:ba:c7:c3:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5C:7F:EB:5E:31:89:37:45:A7:54:58:25:BB:16:AA:E9:DE:05:47
            X509v3 Authority Key Identifier:
                keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37302e302f32332d3233203d3e20313530323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:9f:ec:be:0c:8c:ab:e5:6d:30:b9:69:67:cf:ac:78:bb:
         2c:48:e3:02:e2:3f:07:bf:bd:8c:9b:d2:69:5d:40:af:f5:8e:
         58:9f:53:01:9a:12:0d:52:84:1b:93:26:84:bb:42:8e:87:a4:
         3c:07:26:3f:5d:bf:5a:da:fc:8d:3b:6f:ae:2c:e5:7f:f8:d3:
         f9:ad:7b:d8:09:e7:a1:fc:cf:46:1f:bc:cf:00:c1:03:06:26:
         97:74:cd:e1:43:4e:95:6f:2d:79:d3:76:38:42:ba:8d:ec:a6:
         44:1f:9e:fc:c3:d9:58:18:78:6e:d2:a3:57:45:74:41:39:da:
         0b:b8:f5:36:e6:a8:11:81:51:d6:00:30:19:dc:b9:fe:09:36:
         94:98:39:aa:43:7d:f8:a9:1a:35:e1:11:ec:f8:01:f6:75:62:
         33:33:c5:1a:9b:85:bc:03:52:50:35:84:3d:4c:c6:67:36:ab:
         4f:7f:ff:33:03:1d:64:84:2f:39:ec:fc:85:de:f1:4b:a1:d5:
         43:01:01:a8:2d:7c:85:ba:8e:87:62:d5:48:81:89:94:ac:ba:
         65:7d:d4:4e:94:cd:48:7c:30:46:5d:bb:f3:89:3d:a2:ed:be:
         05:94:8c:92:b9:cd:ac:21:a2:6d:1c:23:cb:2b:a4:73:a6:55:
         65:92:a1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:46:41 2026 by rpki-client