Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
File:                     3130332e37392e39362e302f32342d3234203d3e203634333038.roa (raw, json)
Hash identifier:          9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=
Subject key identifier:   F9:3A:B4:CC:AB:58:51:73:56:E4:AF:8C:75:A5:A2:D6:70:E9:1A:07
Certificate issuer:       /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial:       4C80F859E9AE46B3C558464228E936A03E5A96F5
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa
Signing time:             Sun 03 May 2026 02:32:39 +0000
ROA not before:           Sun 03 May 2026 02:27:39 +0000
ROA not after:            Sun 02 May 2027 02:32:39 +0000
asID:                     64308
IP address blocks:        103.79.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
                          rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:f8:59:e9:ae:46:b3:c5:58:46:42:28:e9:36:a0:3e:5a:96:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
        Validity
            Not Before: May  3 02:27:39 2026 GMT
            Not After : May  2 02:32:39 2027 GMT
        Subject: CN=F93AB4CCAB58517356E4AF8C75A5A2D670E91A07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:39:a4:ec:0b:3e:b4:dd:72:d4:95:7e:e0:95:
                    bc:8a:ec:b5:32:3b:e3:84:7d:be:49:c3:39:06:37:
                    f9:7d:a8:3c:09:52:9f:88:ad:f2:ed:cf:83:a2:17:
                    df:4e:df:fb:41:36:a1:d7:da:0e:ee:95:de:8a:09:
                    d0:b9:75:63:27:4c:a4:19:a2:e7:a2:1f:28:eb:b5:
                    55:e3:64:38:19:83:c8:4a:c1:40:e4:f0:a8:62:ed:
                    21:29:43:e9:f7:ad:79:be:14:d8:15:c0:79:b4:a6:
                    15:5f:fb:93:c9:f6:d0:4f:ec:f2:00:ee:da:3d:02:
                    55:6f:67:22:f3:2f:33:21:af:75:97:d5:ed:78:65:
                    df:2e:e2:38:0d:a6:95:66:8a:e7:27:ac:81:ed:e4:
                    84:44:bc:4a:f6:28:4d:67:06:5e:a4:0d:83:c6:e0:
                    40:6b:36:be:1a:53:3e:7e:cd:87:da:8c:7b:40:99:
                    76:a6:d6:03:45:a1:48:07:1a:cc:ec:7f:43:62:2d:
                    ef:39:a7:c0:58:f4:b9:e4:b5:85:b2:1c:83:cb:59:
                    81:5e:aa:41:b8:a3:a5:ad:fa:87:d6:6a:b1:56:d4:
                    f0:e7:24:82:6b:85:d2:cb:11:ef:14:7b:0e:a9:c7:
                    1e:51:f4:1d:bc:b5:93:51:2f:dc:ee:ce:a6:9b:94:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3A:B4:CC:AB:58:51:73:56:E4:AF:8C:75:A5:A2:D6:70:E9:1A:07
            X509v3 Authority Key Identifier:
                keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/3130332e37392e39362e302f32342d3234203d3e203634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:f9:23:e3:a0:8c:c8:57:f1:63:63:85:da:59:d5:79:1c:a3:
         98:14:1b:c9:46:c5:22:2d:81:6e:e7:6a:ca:25:c5:20:6a:ac:
         5f:c5:21:fc:d5:a9:f4:c3:b7:3f:52:18:3d:c6:78:1c:68:17:
         49:06:f7:f0:7a:7c:8e:7f:66:8c:5d:96:35:62:7a:33:b3:43:
         d9:20:27:96:c4:e2:e1:ca:85:93:c5:1c:4c:c1:32:d5:ba:4e:
         4e:f3:33:52:c3:3b:d6:cc:a3:65:0d:a0:cd:61:3b:08:a4:60:
         56:12:6d:ad:f6:c4:e6:0e:9d:25:72:13:29:e1:bb:95:3e:9c:
         0c:f3:20:cc:56:01:94:e5:6f:ff:76:b0:84:e8:15:55:ec:ae:
         66:d5:89:1d:73:af:b0:53:c3:51:f5:88:e3:24:4b:0c:0e:0d:
         12:0d:cb:82:15:f2:6b:15:50:61:50:d6:9d:07:82:1d:02:c6:
         fa:60:67:c9:d7:89:30:89:8f:b0:54:37:01:0d:b3:e4:14:dd:
         0c:1a:1e:a8:06:cb:1d:72:4a:ac:50:9a:4d:bc:1a:b5:73:2e:
         77:8b:6e:66:58:68:ea:6a:98:6e:67:e7:52:ac:d2:26:72:de:
         b0:82:cd:2e:3a:29:45:9a:89:08:95:36:cd:19:da:00:9d:c3:
         b8:5e:98:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:01 2026 by rpki-client