Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e37312e302f32342d3234203d3e203536323334.roa
File:                     3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (raw, json)
Hash identifier:          +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=
Subject key identifier:   8E:4F:9A:5A:16:23:51:63:FA:BF:5F:0F:1E:C8:7D:71:83:3F:66:D4
Certificate issuer:       /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial:       0DC71417AEADE77C6A23AB4450D4EAABEBF230BA
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e37312e302f32342d3234203d3e203536323334.roa
Signing time:             Sun 03 May 2026 02:29:21 +0000
ROA not before:           Sun 03 May 2026 02:24:21 +0000
ROA not after:            Sun 02 May 2027 02:29:21 +0000
asID:                     56234
IP address blocks:        117.103.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
                          rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c7:14:17:ae:ad:e7:7c:6a:23:ab:44:50:d4:ea:ab:eb:f2:30:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
        Validity
            Not Before: May  3 02:24:21 2026 GMT
            Not After : May  2 02:29:21 2027 GMT
        Subject: CN=8E4F9A5A16235163FABF5F0F1EC87D71833F66D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:2c:8b:a3:fb:54:12:fa:19:1b:90:55:63:
                    68:a1:36:6e:8e:22:d0:93:c2:f1:bd:cc:cf:c0:db:
                    f2:f3:89:02:c0:c3:9c:82:f3:c6:48:8c:6e:a2:44:
                    a7:3c:24:6b:53:62:54:c6:e9:3e:a3:72:98:70:18:
                    f5:a6:59:79:58:ed:ab:3f:ce:be:67:f6:fc:ab:4f:
                    40:cc:3d:37:3e:03:3b:71:40:ef:3b:d0:50:e8:7b:
                    dc:86:e2:e8:f0:cc:1b:6d:83:bf:7a:70:f7:4e:b5:
                    f9:b7:cc:e6:d7:c3:bb:c4:f6:86:26:e7:4d:b2:89:
                    3f:14:a5:3c:ac:47:02:fb:f0:f8:70:54:7d:2b:4a:
                    ce:ba:8f:7d:ad:7a:6e:6b:c1:0a:93:50:e4:a1:6c:
                    dd:29:98:d1:cd:67:a1:54:e9:d7:9d:d6:ad:97:7e:
                    1f:9d:a1:2a:25:ae:78:ab:8d:85:14:ac:53:bb:a1:
                    6d:fb:2c:cb:0c:b9:dc:2c:d2:42:aa:7d:00:60:17:
                    80:52:92:78:84:09:8d:e7:de:9c:9c:27:c2:04:c2:
                    8e:74:3c:10:af:93:a5:31:00:50:24:c4:51:c9:83:
                    b3:db:c9:13:00:41:95:d3:d5:18:ff:54:d7:70:68:
                    70:bb:a9:1c:b1:98:4d:4a:d0:f6:ad:11:06:13:12:
                    a2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4F:9A:5A:16:23:51:63:FA:BF:5F:0F:1E:C8:7D:71:83:3F:66:D4
            X509v3 Authority Key Identifier:
                keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/3131372e3130332e37312e302f32342d3234203d3e203536323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c8:79:53:72:5d:78:75:e3:19:ef:f2:d9:f3:9f:45:e2:3f:
         ad:20:c7:fe:b7:1f:d0:e9:34:6b:eb:1f:1b:24:f9:71:9e:28:
         79:d2:00:98:af:14:f8:03:23:9f:7c:de:11:15:43:93:81:bd:
         d2:c8:59:40:ad:57:66:35:01:87:77:b0:be:d4:f2:a3:51:62:
         ad:95:93:84:95:cc:17:ca:76:b4:2b:6b:2f:9c:21:e9:4c:c1:
         db:af:c2:87:df:3e:ea:ec:b6:6e:b5:65:c4:31:6f:41:10:05:
         30:d5:73:62:21:15:b0:6b:56:36:ad:4f:92:54:36:81:56:a7:
         22:14:9e:19:d3:1a:e2:6e:bf:22:ea:84:53:63:f9:1b:e4:23:
         ac:26:6a:77:ae:6b:44:ad:41:f4:6a:be:e9:ec:2e:31:8a:11:
         85:f4:6c:39:9f:e3:b0:6f:ca:90:85:4d:e1:ca:65:e1:23:3b:
         9e:d0:b4:b1:1d:86:ee:9c:2c:ca:f9:46:cb:35:cf:7e:c9:e9:
         48:0a:a5:62:4c:f6:b6:8f:1d:61:8a:a6:8b:1d:c0:ca:fc:e7:
         40:c9:1a:91:29:4b:b4:77:fe:47:24:47:cc:33:0e:de:57:36:
         71:f0:ad:5a:2e:69:9b:52:c2:f9:95:b9:1b:28:89:0a:63:f0:
         a4:42:54:a5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDccUF66t53xqI6tEUNTqq+vyMLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI0Mjc5OTA4QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5
RDRCNkFEQTAeFw0yNjA1MDMwMjI0MjFaFw0yNzA1MDIwMjI5MjFaMDMxMTAvBgNV
BAMTKDhFNEY5QTVBMTYyMzUxNjNGQUJGNUYwRjFFQzg3RDcxODMzRjY2RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeECyLo/tUEvoZG5BVY2ihNm6O
ItCTwvG9zM/A2/LziQLAw5yC88ZIjG6iRKc8JGtTYlTG6T6jcphwGPWmWXlY7as/
zr5n9vyrT0DMPTc+AztxQO870FDoe9yG4ujwzBttg796cPdOtfm3zObXw7vE9oYm
502yiT8UpTysRwL78PhwVH0rSs66j32tem5rwQqTUOShbN0pmNHNZ6FU6ded1q2X
fh+doSolrnirjYUUrFO7oW37LMsMudws0kKqfQBgF4BSkniECY3n3pycJ8IEwo50
PBCvk6UxAFAkxFHJg7PbyRMAQZXT1Rj/VNdwaHC7qRyxmE1K0PatEQYTEqLbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUjk+aWhYjUWP6v18PHsh9cYM/ZtQwHwYDVR0j
BBgwFoAUkkJ5kIpHwQEbS2pUqgXHvZ1LatowDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDJjN2RmZDQtZTUxMC00NzA3LTk4MTgtYTJiMWUyYzZiMjE2LzAvOTI0Mjc5OTA4
QTQ3QzEwMTFCNEI2QTU0QUEwNUM3QkQ5RDRCNkFEQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MjQyNzk5MDhBNDdDMTAxMUI0QjZBNTRBQTA1QzdCRDlENEI2
QURBLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQyYzdkZmQ0LWU1MTAtNDcwNy05
ODE4LWEyYjFlMmM2YjIxNi8wLzMxMzEzNzJlMzEzMDMzMmUzNzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVnRzANBgkqhkiG
9w0BAQsFAAOCAQEAoMh5U3JdeHXjGe/y2fOfReI/rSDH/rcf0Ok0a+sfGyT5cZ4o
edIAmK8U+AMjn3zeERVDk4G90shZQK1XZjUBh3ewvtTyo1FirZWThJXMF8p2tCtr
L5wh6UzB26/Ch98+6uy2brVlxDFvQRAFMNVzYiEVsGtWNq1PklQ2gVanIhSeGdMa
4m6/IuqEU2P5G+QjrCZqd65rRK1B9Gq+6ewuMYoRhfRsOZ/jsG/KkIVN4cpl4SM7
ntC0sR2G7pwsyvlGyzXPfsnpSAqlYkz2to8dYYqmix3AyvznQMkakSlLtHf+RyRH
zDMO3lc2cfCtWi5pm1LC+ZW5GyiJCmPwpEJUpQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:10:32 2026 by rpki-client