Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
File:                     3130332e33392e37312e302f32342d3234203d3e20313530323734.roa (raw, json)
Hash identifier:          Pjcq1aEQLmtD50fhFvIOCakEkEs1luIZ8COzqjoSFhE=
Subject key identifier:   7F:C6:4D:D4:30:6B:45:B6:80:7E:C4:6C:F5:2A:48:C1:D3:84:BC:A4
Certificate issuer:       /CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
Certificate serial:       5F28A3C70310430CF58E25572660E5DB700E998E
Authority key identifier: 5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa
Signing time:             Sun 03 May 2026 02:28:31 +0000
ROA not before:           Sun 03 May 2026 02:23:31 +0000
ROA not after:            Sun 02 May 2027 02:28:31 +0000
asID:                     150274
IP address blocks:        103.39.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl
                          rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:28:a3:c7:03:10:43:0c:f5:8e:25:57:26:60:e5:db:70:0e:99:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C342B493714A77FDE1E2F1E8379A4BFE098EB01
        Validity
            Not Before: May  3 02:23:31 2026 GMT
            Not After : May  2 02:28:31 2027 GMT
        Subject: CN=7FC64DD4306B45B6807EC46CF52A48C1D384BCA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:15:a6:81:48:88:27:3c:94:02:92:7d:89:
                    46:f5:19:95:4c:6d:b3:80:e9:a1:2d:44:d8:5e:35:
                    97:92:ee:92:ae:38:bd:4b:ea:f7:18:b9:d4:83:a3:
                    fb:e9:98:87:9d:47:22:3f:98:d4:a2:7d:7e:91:77:
                    ea:38:de:44:84:27:5d:5e:e4:c8:7c:54:70:bf:c2:
                    17:41:04:1c:58:e3:ae:cb:c2:59:85:c0:ee:03:13:
                    55:f6:08:10:9c:9b:b6:3c:02:f4:da:e2:ac:8b:23:
                    32:2e:44:40:d7:ea:c5:c0:a0:05:88:16:30:9e:e3:
                    d6:0a:d4:0c:c3:83:1b:5e:e3:7d:9f:c8:6a:8b:dd:
                    f0:8e:ad:fb:bd:4c:30:55:3d:05:58:35:d6:19:b3:
                    37:00:66:1d:11:d5:e8:20:e1:bd:3e:94:52:bb:de:
                    20:8b:6c:e5:bf:54:6f:da:27:8e:8a:f5:d7:9d:af:
                    50:dd:c4:79:d2:47:18:90:33:7b:33:05:78:9f:44:
                    6d:a2:d0:be:09:01:f6:74:03:6d:37:06:42:0f:e8:
                    72:f8:56:4a:55:1d:e2:e3:62:88:92:c6:d2:6d:50:
                    ed:46:93:3b:e9:a3:e9:90:76:76:6a:81:1c:03:8f:
                    a7:fa:06:c4:63:f4:f1:5a:5b:30:55:b6:8a:59:d4:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:4D:D4:30:6B:45:B6:80:7E:C4:6C:F5:2A:48:C1:D3:84:BC:A4
            X509v3 Authority Key Identifier:
                keyid:5C:34:2B:49:37:14:A7:7F:DE:1E:2F:1E:83:79:A4:BF:E0:98:EB:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C342B493714A77FDE1E2F1E8379A4BFE098EB01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e57d543-baf0-4348-8857-3d2601c3a803/0/3130332e33392e37312e302f32342d3234203d3e20313530323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:c3:73:ee:6f:91:ee:23:41:c4:cb:ff:8d:91:30:77:79:
         0d:14:f3:50:25:f4:0e:a3:ed:2b:5a:35:ff:cf:3a:b7:ee:b4:
         ee:60:8c:0b:49:e6:e7:8c:e1:34:64:da:95:3c:01:97:a3:a5:
         31:db:fc:78:09:ac:99:0a:c3:e2:66:fd:c5:4c:c6:73:61:95:
         3f:8a:99:c5:59:5d:95:28:7c:ed:0a:20:da:2e:0e:91:2d:35:
         f8:9e:87:ad:94:fc:59:b2:05:06:6d:73:98:fa:cf:4a:50:bc:
         e5:c2:2c:55:e4:00:31:31:5f:68:99:fc:26:58:8d:01:41:86:
         ea:50:8f:9a:ce:fe:de:f9:63:12:18:aa:98:60:61:70:76:a2:
         25:a6:b2:46:77:cb:ae:48:6e:be:eb:13:dc:12:3b:1e:a7:b7:
         31:a6:4c:14:b2:4e:fb:e2:72:12:18:d9:3c:e9:40:80:fc:82:
         02:f1:4b:3e:57:ec:9c:39:99:89:4f:8c:b0:fd:8a:f3:40:a1:
         e2:17:b8:96:e8:58:bd:de:6d:b8:ed:3c:e7:53:62:84:f8:4c:
         b2:11:0c:a6:ff:cb:38:11:c0:0d:cd:d6:f4:3a:1e:6f:8a:e6:
         c4:c2:85:56:d2:e4:09:a1:36:db:eb:b8:6e:93:86:cd:77:52:
         2f:b5:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:27:26 2026 by rpki-client