Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa
File:                     3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier:          iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=
Subject key identifier:   5A:A6:34:54:23:F4:28:6F:D6:DD:8D:AD:13:97:32:70:7B:58:14:57
Certificate issuer:       /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial:       2F1996B0AE621819CC27212FDA0A656442D4B902
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa
Signing time:             Sun 03 May 2026 02:29:19 +0000
ROA not before:           Sun 03 May 2026 02:24:19 +0000
ROA not after:            Sun 02 May 2027 02:29:19 +0000
asID:                     56234
IP address blocks:        117.103.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
                          rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:19:96:b0:ae:62:18:19:cc:27:21:2f:da:0a:65:64:42:d4:b9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
        Validity
            Not Before: May  3 02:24:19 2026 GMT
            Not After : May  2 02:29:19 2027 GMT
        Subject: CN=5AA6345423F4286FD6DD8DAD139732707B581457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:5c:ab:dd:41:6e:de:3e:a6:70:ad:f5:f7:
                    d5:07:6e:ea:84:08:92:7c:37:10:34:09:69:a3:b6:
                    bc:86:e9:13:22:6a:ba:69:6e:63:e6:86:e1:2d:68:
                    c1:a9:b8:2b:92:ed:49:f1:ac:26:97:52:e1:d6:00:
                    19:59:5b:05:e6:4c:46:f0:01:eb:f4:1a:79:bc:40:
                    9c:57:6d:47:ff:0c:71:40:2b:02:58:d0:6e:b4:32:
                    49:00:71:2a:29:56:ec:fb:29:1e:64:18:ee:11:6d:
                    77:d9:5a:24:70:ff:4e:a1:9e:82:02:63:20:1c:da:
                    7a:fb:b6:e2:86:57:47:70:9d:d4:82:3c:5e:27:1d:
                    61:a4:02:cc:4f:bb:b1:e7:42:36:25:c9:f3:50:67:
                    aa:ef:8a:7f:fd:9e:ef:8c:81:79:8c:c7:8e:0b:fd:
                    ce:b3:75:d2:fd:a0:65:2e:8c:e4:6d:85:49:a8:f5:
                    7a:cd:7e:38:ca:4e:13:a4:2a:df:75:06:66:55:47:
                    0d:09:9c:48:4a:7a:74:3f:fe:4e:dd:e2:f7:37:13:
                    f6:6d:6b:fc:08:d2:77:57:7c:72:cc:c1:ac:db:52:
                    36:87:06:6c:fa:d7:2e:a6:1a:66:42:a4:b5:20:49:
                    62:34:3e:4f:6a:fc:c3:0f:81:e5:09:e0:e6:a4:16:
                    4e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A6:34:54:23:F4:28:6F:D6:DD:8D:AD:13:97:32:70:7B:58:14:57
            X509v3 Authority Key Identifier:
                keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36382e302f32342d3234203d3e203536323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ca:12:3f:95:82:90:e2:24:3b:3e:d4:01:09:5c:c3:51:85:
         cc:5e:bd:f1:73:70:e6:97:68:4a:04:44:49:f3:e3:2f:44:1e:
         95:6f:79:45:c7:32:f9:b4:2f:88:0a:3c:7a:ce:f0:fd:22:00:
         cf:3a:7b:f8:bf:3c:7f:d3:41:83:5c:56:d3:41:b4:23:f7:2c:
         37:a3:8b:35:07:21:55:1d:60:32:fb:9d:fe:d2:b5:50:a9:e7:
         b9:a8:65:9b:84:10:b8:44:64:32:64:a0:f6:e6:59:a6:12:12:
         5a:b0:17:7d:c1:ae:c2:ee:3b:3c:c1:01:0c:9c:71:d1:7b:42:
         51:fb:c8:57:3c:c1:2a:62:d1:c0:2e:49:a1:66:d1:c0:ed:ee:
         c5:57:82:c9:7d:d3:64:a3:4c:70:03:28:f5:05:15:c4:5a:7c:
         6f:ca:fd:ca:ff:98:d7:a5:3b:64:07:13:14:78:56:43:a4:f5:
         c0:10:7b:e2:99:31:f3:ab:6e:87:ed:21:3f:ea:29:7d:6b:52:
         a7:0f:fc:98:43:a5:6e:70:8e:c5:d8:6c:cd:4c:d0:be:87:06:
         8d:d3:3e:ae:82:61:c8:fa:38:02:f3:0b:3d:34:cc:df:e0:7a:
         cc:11:bc:73:16:84:08:3f:64:d5:26:1e:b5:3c:5c:34:0d:26:
         0a:64:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:34 2026 by rpki-client