Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          OU9KpCVaFyFqRPmbCa6ZHBE8msf8iFpD0/BG/bOi1fc=
Subject key identifier:   7F:D4:AF:10:CB:38:09:01:EE:56:0F:51:E9:1B:DF:BB:6B:DC:67:8E
Certificate issuer:       /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
Certificate serial:       2BC7453E19BEE84C63F83EF5662A9F82625B4D2C
Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
Signing time:             Sun 03 May 2026 02:34:17 +0000
ROA not before:           Sun 03 May 2026 02:29:17 +0000
ROA not after:            Sun 02 May 2027 02:34:17 +0000
asID:                     142364
IP address blocks:        103.170.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl
                          rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:c7:45:3e:19:be:e8:4c:63:f8:3e:f5:66:2a:9f:82:62:5b:4d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
        Validity
            Not Before: May  3 02:29:17 2026 GMT
            Not After : May  2 02:34:17 2027 GMT
        Subject: CN=7FD4AF10CB380901EE560F51E91BDFBB6BDC678E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:fc:fd:86:8e:1d:d0:5a:e2:1a:3d:ef:f0:
                    bb:6d:eb:7b:8f:3f:1d:86:93:84:63:10:f4:0a:27:
                    9d:47:23:05:bb:2d:6e:f3:2e:ed:de:32:78:c3:d2:
                    85:15:66:5a:48:9c:7b:5c:c1:9c:bf:ad:2f:f0:50:
                    09:a1:eb:c3:b6:a3:ca:71:bf:6b:f2:d2:11:5c:71:
                    08:de:fe:4a:bc:96:87:88:f8:f6:67:97:32:cb:4b:
                    72:c6:5f:c2:24:cf:5a:73:a5:18:67:a3:b9:6b:4b:
                    b5:92:c1:b0:0c:d9:b5:b2:e6:45:b4:70:db:ba:a2:
                    0e:13:b9:8b:2f:94:07:7c:28:86:ec:2d:f4:d0:b6:
                    c5:0b:67:ac:cd:e6:a8:d0:89:ef:3f:e2:9a:60:a4:
                    54:24:a5:bc:ae:f4:68:a3:1c:cf:15:6c:10:41:82:
                    99:08:f8:31:55:1f:a2:15:f5:16:25:a3:57:b6:5a:
                    91:ca:a5:56:fd:a8:2e:b3:9a:14:0c:45:7e:9f:4a:
                    f6:59:83:ec:f3:02:31:db:b7:fa:af:f1:ae:f1:2e:
                    f7:b5:78:dc:ca:95:39:c2:56:26:70:dc:cc:e8:a4:
                    07:0b:2b:f3:ab:94:e2:db:02:cd:d0:e3:ee:74:d9:
                    83:ca:12:c4:5a:06:72:a4:a3:05:99:f8:a4:a1:21:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D4:AF:10:CB:38:09:01:EE:56:0F:51:E9:1B:DF:BB:6B:DC:67:8E
            X509v3 Authority Key Identifier:
                keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:83:97:0c:98:ac:a1:b6:e8:d5:a0:19:77:1a:9a:67:62:
         43:15:3e:37:cb:b2:00:ce:cd:a7:e3:34:92:98:44:2d:b1:3d:
         0d:42:e9:35:13:ae:2f:79:6b:12:8c:ac:6e:55:b4:6e:73:e2:
         e2:67:42:b8:74:b6:4b:41:e0:cd:59:39:f6:16:42:48:e4:9f:
         2e:63:1a:5f:7c:04:44:f9:e5:41:66:f1:65:55:c1:90:01:fe:
         48:41:04:29:a4:2f:b7:fd:c7:59:80:12:df:01:f0:95:98:e4:
         60:74:4f:45:bb:87:07:2d:fe:75:d9:b8:00:47:14:8f:29:8d:
         10:c9:c8:7f:63:a8:19:4a:36:a0:1f:55:5e:76:39:5b:78:d5:
         79:08:4c:a7:f1:9e:92:ac:27:1b:6e:66:83:53:d8:c7:50:f5:
         fb:aa:78:99:2f:3b:1b:26:9d:38:c9:ac:c7:a8:71:a8:c7:18:
         38:7b:91:13:3d:a8:2d:83:f0:57:b5:57:87:f0:2f:84:aa:2e:
         c7:ee:71:6d:3b:a6:9f:37:d7:68:19:ff:bf:5b:b9:68:8f:c4:
         d5:b7:2d:1c:25:fd:18:e6:b7:34:9e:f0:b1:65:c6:35:d7:5d:
         2b:ef:18:d0:07:84:6b:cf:51:b4:94:87:ad:8c:42:5e:41:13:
         be:e1:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:45 2026 by rpki-client