Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
File:                     3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (raw, json)
Hash identifier:          sEoDdkF8E12rhFyrBqgXKYDjsjxjw7jMWvx8tEjZJI0=
Subject key identifier:   BF:64:C6:5C:C5:3B:58:6C:77:BB:7B:E9:6C:17:15:A4:0E:70:B8:F2
Certificate issuer:       /CN=1956B47266ADE221B617582972A27AAFA0CA985C
Certificate serial:       1321F2878690BC982AD592D1168D3285B5739A7F
Authority key identifier: 19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
Signing time:             Sun 03 May 2026 02:30:10 +0000
ROA not before:           Sun 03 May 2026 02:25:10 +0000
ROA not after:            Sun 02 May 2027 02:30:10 +0000
asID:                     135471
IP address blocks:        103.71.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl
                          rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:21:f2:87:86:90:bc:98:2a:d5:92:d1:16:8d:32:85:b5:73:9a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1956B47266ADE221B617582972A27AAFA0CA985C
        Validity
            Not Before: May  3 02:25:10 2026 GMT
            Not After : May  2 02:30:10 2027 GMT
        Subject: CN=BF64C65CC53B586C77BB7BE96C1715A40E70B8F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:70:6c:41:30:cc:c6:a5:f7:59:8a:4c:82:
                    be:51:76:65:f0:b0:1d:37:aa:7a:b7:48:58:60:ca:
                    ad:95:d9:25:cc:9a:96:a8:b0:49:df:ec:91:83:8e:
                    9f:3c:23:05:fa:7f:33:1e:a7:27:90:63:ad:7b:3a:
                    f4:f0:7a:fd:52:c5:fc:df:ad:f1:1f:7a:8a:fc:c8:
                    e3:0b:8b:d3:1f:97:db:43:42:d9:f3:e6:d6:09:38:
                    36:31:7c:51:bf:e6:8b:49:7e:72:6b:1c:f5:8e:38:
                    7f:82:06:96:2c:db:7f:8c:48:de:3d:30:b8:56:dc:
                    ec:85:c4:4f:71:a9:2a:39:93:bb:27:35:f0:1a:5b:
                    b4:1f:3b:3d:86:3c:96:e1:cb:c9:bd:09:23:d9:04:
                    dc:17:5c:05:05:18:6a:41:21:8e:bc:28:c0:a1:4b:
                    b0:a1:f9:97:1e:0c:4a:c8:1a:c2:87:8c:b4:01:6e:
                    4e:58:21:51:66:64:40:63:15:bb:6a:a7:c2:19:01:
                    87:6b:1a:ce:22:57:0d:47:81:7b:4e:b9:e3:df:85:
                    66:fa:7e:9c:e7:c7:fc:23:d9:68:e9:81:8e:80:cf:
                    0f:f8:33:19:a0:87:de:ee:29:d3:01:78:77:9d:43:
                    ec:5e:82:71:ce:ff:f4:05:2b:cc:e9:b4:87:36:55:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:64:C6:5C:C5:3B:58:6C:77:BB:7B:E9:6C:17:15:A4:0E:70:B8:F2
            X509v3 Authority Key Identifier:
                keyid:19:56:B4:72:66:AD:E2:21:B6:17:58:29:72:A2:7A:AF:A0:CA:98:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/1956B47266ADE221B617582972A27AAFA0CA985C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1956B47266ADE221B617582972A27AAFA0CA985C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c6:66:7c:1b:f0:71:ee:32:80:50:39:3c:24:37:ac:bd:b6:
         0e:e7:ab:b0:68:6b:ec:86:fa:09:94:61:f8:0b:0e:9a:94:ce:
         5c:60:b7:9f:27:c5:74:0a:92:a1:b9:9d:31:32:58:91:98:6b:
         94:d4:46:fd:a3:a7:29:94:48:5c:9b:42:52:23:de:c0:a0:b1:
         99:99:5c:ce:ef:41:42:11:25:5f:09:d0:f9:32:bf:cb:db:23:
         fa:b1:1b:83:ad:cc:b9:e0:00:08:5f:70:08:0f:0b:34:f2:91:
         7d:93:63:e0:67:bb:9c:f0:d0:e5:14:7e:5d:da:41:37:16:f8:
         6c:bc:5b:19:e3:a5:57:09:d5:e1:c7:94:e3:94:b2:7d:6b:cf:
         4d:66:38:a0:ce:76:fc:21:65:dd:d0:20:c5:75:f2:99:a8:87:
         2e:bc:c7:17:5a:77:1c:5c:38:0e:b2:5d:ce:b2:9f:83:df:1e:
         67:d1:c1:53:f9:d8:81:54:15:9a:76:07:a8:d5:51:b7:3f:c6:
         8e:29:55:3e:32:05:68:80:28:db:e2:b7:0e:1b:cf:21:54:6c:
         f4:40:3d:c4:18:88:ef:ae:97:e1:43:df:06:b0:06:b2:d0:40:
         47:15:9c:7a:16:d3:9f:d8:5b:f6:a4:17:f4:e7:f3:60:b8:d4:
         12:0b:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:13 2026 by rpki-client