Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
File:                     3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (raw, json)
Hash identifier:          obnag6K+/PYNxyPn5mnr74fqA7ofmhwpwaEP4tBMPxc=
Subject key identifier:   94:E3:42:C4:A2:DA:C1:4A:16:FF:FF:41:FD:6D:5A:58:17:37:1C:97
Certificate issuer:       /CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47
Certificate serial:       6F15892296CB9738C900068B0B9C53D45B6F55F1
Authority key identifier: AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa
Signing time:             Sun 03 May 2026 02:28:54 +0000
ROA not before:           Sun 03 May 2026 02:23:54 +0000
ROA not after:            Sun 02 May 2027 02:28:54 +0000
asID:                     150474
IP address blocks:        103.110.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl
                          rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:32:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:89:22:96:cb:97:38:c9:00:06:8b:0b:9c:53:d4:5b:6f:55:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47
        Validity
            Not Before: May  3 02:23:54 2026 GMT
            Not After : May  2 02:28:54 2027 GMT
        Subject: CN=94E342C4A2DAC14A16FFFF41FD6D5A5817371C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:31:d2:41:9e:d3:61:00:60:d7:82:96:e0:5f:
                    3b:1d:09:a7:06:ff:23:e8:b7:56:b0:92:da:92:f9:
                    83:6b:4b:c3:3c:ed:20:d6:79:ee:06:5f:c9:b6:19:
                    e8:86:21:70:bc:32:78:68:9c:57:c5:b7:56:75:d3:
                    26:3f:e0:60:25:6b:8c:f6:bc:52:86:ac:ba:71:7c:
                    3d:98:b2:b5:6b:fb:21:e2:d1:65:8b:8c:67:48:1f:
                    e6:35:2f:f7:fb:4b:d8:ae:a7:98:70:9a:84:af:b6:
                    7f:61:05:fd:3d:2c:6e:52:f4:57:0c:38:2c:69:f8:
                    71:6c:d4:bf:46:d4:38:66:41:c6:b8:63:b0:4f:ea:
                    37:64:14:41:0f:1e:13:b0:f2:2f:bd:e0:97:b0:23:
                    77:96:d3:d2:9d:d9:82:22:77:bc:8e:81:d5:64:9b:
                    bb:4b:cf:43:ad:72:35:aa:d6:af:f0:fc:38:d9:ba:
                    01:0c:61:31:bc:1a:bb:5c:9c:01:19:99:88:08:61:
                    82:fc:74:bf:96:7b:59:08:d5:e8:c1:e2:28:fa:12:
                    fe:96:7f:22:09:ae:8f:b1:ba:01:5e:74:2b:39:b9:
                    92:38:64:26:6e:e0:02:cd:7d:a1:08:a8:65:09:18:
                    19:61:1e:f5:e9:63:1a:6d:4c:72:3d:46:c1:e2:be:
                    c5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E3:42:C4:A2:DA:C1:4A:16:FF:FF:41:FD:6D:5A:58:17:37:1C:97
            X509v3 Authority Key Identifier:
                keyid:AC:7E:AF:B0:07:F3:DD:9B:32:32:7F:16:3D:AF:2A:92:B5:CE:EC:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AC7EAFB007F3DD9B32327F163DAF2A92B5CEEC47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:95:a5:46:5d:06:ea:3b:8c:1d:2b:93:6e:b7:c0:2e:b8:02:
         a4:5b:11:d1:7b:48:4f:7c:0c:e2:cc:2d:fc:78:de:c7:c4:8b:
         85:1b:07:b2:65:19:3a:85:54:6b:b5:c0:66:98:74:83:a7:76:
         85:43:0c:52:f1:17:c7:c6:0d:74:3d:8e:44:d7:60:aa:aa:bc:
         2e:05:b1:30:51:b1:43:5e:87:6b:6c:ff:7e:bb:be:cb:25:48:
         75:3b:9f:b8:77:d4:7a:99:40:d8:52:fe:9c:48:b9:49:38:de:
         84:1c:94:f9:8e:68:12:c2:68:2d:d4:c5:cc:41:6a:e4:59:41:
         7c:43:7b:43:be:c2:70:09:fc:09:1f:f5:87:40:8c:1d:37:33:
         56:e7:c4:cb:5e:63:0d:37:98:f9:eb:04:2b:34:fa:27:5a:1f:
         3b:f7:8e:f6:2d:5c:32:8f:b0:9c:0d:fc:5a:5d:88:ec:f2:e2:
         f8:00:f7:4a:92:d6:df:2f:77:82:35:7b:59:be:73:cb:88:69:
         e4:55:10:ae:4b:dc:c9:85:b0:89:16:3a:69:dc:3d:d6:ab:fc:
         49:48:85:3f:4c:2c:6d:14:99:f3:c0:2c:83:6b:49:11:a0:5d:
         76:88:09:67:89:b8:3b:8b:48:7f:fc:ab:2c:f3:4a:f1:3a:2d:
         b9:69:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:36 2026 by rpki-client