Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36392e302f32342d3234203d3e203536323334.roa
File:                     3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier:          wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=
Subject key identifier:   B2:C0:27:DC:82:2F:18:27:93:E3:D4:EA:C8:88:53:39:DA:DE:1E:C6
Certificate issuer:       /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial:       79211F2917898646D16C25DB7D95C5627E935A15
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36392e302f32342d3234203d3e203536323334.roa
Signing time:             Sun 03 May 2026 02:29:19 +0000
ROA not before:           Sun 03 May 2026 02:24:19 +0000
ROA not after:            Sun 02 May 2027 02:29:19 +0000
asID:                     56234
IP address blocks:        117.103.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
                          rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:21:1f:29:17:89:86:46:d1:6c:25:db:7d:95:c5:62:7e:93:5a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
        Validity
            Not Before: May  3 02:24:19 2026 GMT
            Not After : May  2 02:29:19 2027 GMT
        Subject: CN=B2C027DC822F182793E3D4EAC8885339DADE1EC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:05:ce:9c:11:51:1a:c2:b8:1e:1c:43:55:
                    3c:07:4e:18:bf:ab:7f:db:a8:26:7c:f9:a1:52:b8:
                    dd:f7:c1:25:72:de:62:7b:f8:19:e0:ce:cb:74:69:
                    0c:6f:22:eb:9a:2c:48:20:1f:d6:a2:96:f7:b3:43:
                    99:b5:10:00:66:d4:b4:49:c3:42:da:ed:b2:97:1f:
                    f8:f0:32:c3:33:90:12:f9:31:d5:d7:a4:7d:e6:60:
                    a8:3d:e8:fe:a1:c2:21:84:13:82:c5:2f:07:d8:65:
                    a8:5e:ff:0b:23:68:4f:05:77:e5:f2:8b:4a:bb:c2:
                    a9:8b:77:fd:e8:97:ce:01:dd:3e:f4:84:9a:a4:8b:
                    43:9b:4a:5a:be:f5:fc:aa:54:3f:a5:ed:6d:90:46:
                    7e:4d:09:cc:0f:24:fc:b1:d0:34:38:f3:af:2a:46:
                    c0:e9:e0:b2:65:00:c8:c9:ad:76:8b:3a:2c:10:68:
                    d9:61:bd:93:de:3e:61:1a:73:4e:9b:91:a5:79:62:
                    fe:f2:f4:63:a3:35:e8:7b:9b:2c:7e:28:c3:3e:ce:
                    39:39:a5:29:76:ef:48:99:02:bf:7e:fe:38:a4:20:
                    ce:e9:26:24:a3:05:8c:04:0c:29:c3:84:90:d5:2d:
                    94:3b:e1:fa:8a:fb:92:a8:b8:34:fe:e7:75:30:a9:
                    fd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C0:27:DC:82:2F:18:27:93:E3:D4:EA:C8:88:53:39:DA:DE:1E:C6
            X509v3 Authority Key Identifier:
                keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e36392e302f32342d3234203d3e203536323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f0:e1:a7:13:8d:60:22:44:38:cd:05:4a:e0:d3:0a:c7:86:
         9e:54:1a:33:4a:64:e9:8b:c3:35:7c:4b:f4:c3:18:11:96:22:
         2e:23:92:6e:1b:9e:2e:a3:1e:98:77:50:ce:89:f3:27:40:98:
         aa:04:64:cc:92:0b:9c:18:28:76:b0:c3:cc:e4:94:de:c6:87:
         ae:05:27:74:58:a2:08:b5:2c:5f:aa:73:43:09:78:ca:f8:e8:
         53:c3:da:fd:15:62:b2:c6:d1:7f:3a:e7:a2:49:e2:44:f5:fd:
         7c:04:c6:cc:29:2a:40:f0:40:d3:9c:95:24:77:e0:0d:86:6c:
         01:1d:87:1a:71:23:fa:ab:54:99:95:05:15:4f:ee:0d:2f:15:
         a8:22:da:5d:13:74:85:eb:fb:56:99:3a:bf:4d:e6:6f:de:d1:
         c1:9f:9a:47:b0:05:22:cb:b9:60:42:e9:a2:42:50:16:74:57:
         27:50:0d:9d:69:0c:7f:84:80:2b:f9:d0:4e:66:e9:62:3a:a5:
         28:95:bf:1f:fd:94:95:39:08:14:98:47:9e:7a:48:ae:61:6c:
         a0:13:96:f2:0f:24:5f:c8:41:48:ad:15:82:78:73:4e:4c:ae:
         b0:0c:e3:02:f6:45:67:57:19:0e:78:2d:f2:f8:00:ff:21:70:
         1f:50:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:10:30 2026 by rpki-client