Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e37302e36382e302f32342d3234203d3e20313335343634.roa
File:                     3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (raw, json)
Hash identifier:          7qm6JzeL/7hHG1DAohfubeGddIvVsEzpvxGKto8u6kI=
Subject key identifier:   12:76:B2:93:10:73:A4:8E:9E:50:3E:2C:D8:A2:A4:0B:FE:87:33:96
Certificate issuer:       /CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0
Certificate serial:       6BF879CB4FE6B3FD6162FB04D1F33D1CB7EFAA41
Authority key identifier: B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e37302e36382e302f32342d3234203d3e20313335343634.roa
Signing time:             Sun 03 May 2026 02:32:55 +0000
ROA not before:           Sun 03 May 2026 02:27:55 +0000
ROA not after:            Sun 02 May 2027 02:32:55 +0000
asID:                     135464
IP address blocks:        103.70.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl
                          rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:13:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f8:79:cb:4f:e6:b3:fd:61:62:fb:04:d1:f3:3d:1c:b7:ef:aa:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7B88E63A9666BD2EC77ADE32E085AC5877A84C0
        Validity
            Not Before: May  3 02:27:55 2026 GMT
            Not After : May  2 02:32:55 2027 GMT
        Subject: CN=1276B2931073A48E9E503E2CD8A2A40BFE873396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:1b:f5:ff:6f:42:9a:31:9f:77:0a:d7:9f:
                    43:0f:93:ea:00:e1:c2:b6:91:26:2f:cd:99:63:5a:
                    09:d1:ed:30:7f:42:30:c4:72:2c:51:d8:bb:80:b5:
                    0d:9a:ac:6b:11:77:b6:37:23:ce:1b:8e:76:33:b3:
                    78:e4:92:f0:9b:71:3e:79:3e:26:2e:c8:b8:c9:04:
                    89:95:0c:f0:40:63:f4:92:a5:76:97:79:db:3c:cc:
                    78:d6:4e:81:d8:1f:31:b0:f3:4b:8b:00:bf:12:5e:
                    7d:5e:db:5e:72:00:75:d9:5f:e1:87:32:ff:13:cd:
                    8f:5d:e5:fc:c9:5b:ca:33:c3:f8:b1:10:21:7f:63:
                    85:2d:66:2b:e7:2c:4d:52:f2:2f:c4:17:3b:33:0e:
                    e4:a9:59:17:04:ac:8c:53:46:63:83:5c:8d:83:2f:
                    65:0c:61:e3:1c:40:fd:57:26:0b:e6:75:13:6a:ca:
                    66:92:79:28:71:a2:ed:a9:27:aa:2d:65:9a:11:8f:
                    62:ce:2a:d8:70:f4:a7:10:ec:4b:69:32:33:77:1c:
                    ed:bb:a8:59:39:b8:25:5b:38:13:af:8a:3c:73:f5:
                    32:da:56:fb:f1:7a:cb:ff:43:26:3b:d9:bc:90:8c:
                    86:fe:8a:0a:6c:e4:34:7f:fe:c4:56:f0:be:53:c3:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:76:B2:93:10:73:A4:8E:9E:50:3E:2C:D8:A2:A4:0B:FE:87:33:96
            X509v3 Authority Key Identifier:
                keyid:B7:B8:8E:63:A9:66:6B:D2:EC:77:AD:E3:2E:08:5A:C5:87:7A:84:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B7B88E63A9666BD2EC77ADE32E085AC5877A84C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/3130332e37302e36382e302f32342d3234203d3e20313335343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:76:46:f8:2e:95:4e:ac:70:e9:a6:a9:94:91:ba:64:c8:05:
         9a:21:68:c5:d0:3f:10:b3:b7:ea:5b:ba:82:9a:e8:33:0f:f6:
         2e:a1:ec:a6:df:9b:36:af:79:1a:1d:c6:1d:fc:3f:69:20:95:
         0c:22:40:b6:b9:7e:2e:82:81:64:7b:4b:f5:e9:a3:c6:e3:0d:
         1d:0a:98:81:9f:a8:04:d1:e5:62:f0:ad:c0:fb:08:4a:8a:fb:
         a6:12:71:09:63:ae:cb:fd:56:79:12:61:21:c0:99:38:64:06:
         1b:8f:f5:c1:cf:90:04:94:37:09:58:2c:a0:65:2d:bd:22:60:
         f0:3c:ae:93:8f:98:f1:2a:83:8a:e1:71:fa:9f:76:72:82:c0:
         1c:99:6e:9e:94:f6:a4:df:a7:c2:c2:20:91:c9:ca:4b:23:e1:
         aa:93:46:a6:82:cf:c8:22:72:57:21:8a:2b:8f:6e:6f:fd:66:
         e1:38:74:ca:42:02:14:99:d4:4d:2f:b5:12:75:f7:37:11:f4:
         82:32:59:ec:39:88:af:3b:28:de:5b:4a:9b:9a:d7:48:55:24:
         d2:62:49:dd:0c:ff:a6:02:38:ab:ea:2a:9e:a8:2b:81:cd:ce:
         d7:fc:b4:db:33:c5:70:36:ad:a9:a0:58:69:6f:03:e7:9b:5d:
         da:b8:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:35 2026 by rpki-client