Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/3130332e37362e33312e302f32342d3234203d3e20313530343732.roa
File:                     3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (raw, json)
Hash identifier:          rUHpYIR2vJnsoxcjoNwsrIMb/p49L2kYzJuwadosSIk=
Subject key identifier:   A0:41:49:64:9C:B0:2E:18:66:48:0F:22:A8:15:FA:83:3F:5C:C7:5B
Certificate issuer:       /CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
Certificate serial:       18F93004CD1A69B8C5E61367178FE72402D6FC64
Authority key identifier: 71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/3130332e37362e33312e302f32342d3234203d3e20313530343732.roa
Signing time:             Sun 03 May 2026 02:32:00 +0000
ROA not before:           Sun 03 May 2026 02:27:00 +0000
ROA not after:            Sun 02 May 2027 02:32:00 +0000
asID:                     150472
IP address blocks:        103.76.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl
                          rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f9:30:04:cd:1a:69:b8:c5:e6:13:67:17:8f:e7:24:02:d6:fc:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E3BB710F592146B82A3C1CFCF36A2BD1C5A795
        Validity
            Not Before: May  3 02:27:00 2026 GMT
            Not After : May  2 02:32:00 2027 GMT
        Subject: CN=A04149649CB02E1866480F22A815FA833F5CC75B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:ac:a4:cc:40:f2:5d:a7:5c:67:30:09:7a:
                    0a:ad:2b:8e:e7:69:3d:d8:4b:05:90:e2:00:04:4d:
                    a6:8b:2e:d7:a8:a6:3a:5e:9f:5b:42:4f:84:88:e2:
                    ec:88:3f:75:34:47:00:30:94:4e:84:69:71:de:08:
                    2d:99:c6:f5:ac:15:1e:af:c4:6f:0b:ba:36:df:32:
                    7a:39:a1:3a:85:e3:d7:78:96:a9:2a:a8:87:fb:7b:
                    99:24:7b:4b:25:3e:20:4e:3c:1e:45:65:e2:d7:d9:
                    b6:a9:f2:07:68:c6:30:b0:68:ed:30:97:56:31:c0:
                    73:a8:7f:e5:41:bc:e0:3f:62:b4:04:1e:bf:5f:c6:
                    be:7d:68:35:c4:4f:9b:c1:e6:80:f6:71:ed:5c:ed:
                    a6:f1:df:29:5b:3d:4b:a1:fc:fe:eb:e0:06:77:aa:
                    b4:34:04:9f:b2:7c:b9:f3:c7:83:e6:c5:0b:7f:15:
                    3e:a5:f4:4c:dc:27:4f:03:ca:b8:0d:5e:a8:7b:d3:
                    6f:d0:d3:ea:08:b4:7f:89:89:ce:59:3f:65:62:5d:
                    20:c5:76:9b:cc:c0:11:06:1b:43:64:0a:3b:a2:d5:
                    42:34:b2:93:cd:96:63:45:59:cc:62:92:b8:53:88:
                    e4:55:7c:77:10:ef:af:9b:c7:a9:10:aa:c6:af:b0:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:41:49:64:9C:B0:2E:18:66:48:0F:22:A8:15:FA:83:3F:5C:C7:5B
            X509v3 Authority Key Identifier:
                keyid:71:E3:BB:71:0F:59:21:46:B8:2A:3C:1C:FC:F3:6A:2B:D1:C5:A7:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71E3BB710F592146B82A3C1CFCF36A2BD1C5A795.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/3130332e37362e33312e302f32342d3234203d3e20313530343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:3b:ea:30:50:ca:05:4b:28:ae:c4:e2:6c:d7:16:03:65:
         a0:41:4b:f5:a2:70:24:15:c2:64:e3:98:d2:57:c6:a8:60:0f:
         3c:f6:8a:c2:f0:4a:bf:ed:3f:2e:1b:e0:a4:5d:5c:23:76:f5:
         0d:7f:1e:05:ea:5b:ee:ac:b1:eb:1a:ff:6d:58:ba:de:dc:a8:
         ac:d4:12:7e:85:c8:aa:7a:dd:8c:76:cc:5e:99:b9:86:40:30:
         b2:7f:6c:a0:2a:4e:39:4e:ab:b1:ea:cc:3d:c3:94:05:89:70:
         4a:e8:10:62:02:b7:e1:ca:d8:19:10:b1:8b:43:6b:69:75:77:
         dd:10:04:2a:77:48:be:a7:9f:0e:8d:f6:a4:5e:38:9d:10:d8:
         e1:95:16:7a:52:fc:ac:9f:22:1d:19:24:2d:c0:85:fb:76:4e:
         c5:4c:70:2c:a4:5f:e1:c0:60:e2:0f:b6:73:ee:5f:1e:be:e7:
         13:59:df:83:a7:ef:68:fc:98:1b:87:85:fa:a8:9a:83:d0:40:
         a1:11:3b:1d:09:f3:7b:fd:b0:32:1b:b4:82:20:eb:24:73:56:
         42:85:14:bf:b4:33:97:06:f0:8e:6a:80:b3:9e:7e:db:e2:ec:
         38:57:23:38:2f:e9:41:08:30:db:6a:9c:ae:14:93:27:e3:cb:
         6c:0d:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:50 2026 by rpki-client