Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          SLypnwrf3BxVH5EVMKZIAtA3FLjbxPQy2OlEBbQP8b8=
Subject key identifier:   9F:F2:10:89:12:43:7F:FC:7D:31:79:2C:51:6F:B8:44:1E:62:53:F2
Certificate issuer:       /CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
Certificate serial:       1B0B4BCF6CF31DAAAE89BEFB281C4B6C0BCE454B
Authority key identifier: E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa
Signing time:             Sun 03 May 2026 02:34:16 +0000
ROA not before:           Sun 03 May 2026 02:29:16 +0000
ROA not after:            Sun 02 May 2027 02:34:16 +0000
asID:                     142364
IP address blocks:        103.170.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl
                          rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0b:4b:cf:6c:f3:1d:aa:ae:89:be:fb:28:1c:4b:6c:0b:ce:45:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2
        Validity
            Not Before: May  3 02:29:16 2026 GMT
            Not After : May  2 02:34:16 2027 GMT
        Subject: CN=9FF2108912437FFC7D31792C516FB8441E6253F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:4e:31:76:33:af:b4:c2:d5:67:dd:a1:d1:
                    99:7d:82:a8:63:11:d0:36:f3:24:41:d1:0b:f2:13:
                    b8:66:ba:64:6c:2a:09:14:7b:33:2e:6c:1d:87:d6:
                    66:06:1a:e7:95:5d:5c:a1:d6:ae:e3:8b:7b:cc:1e:
                    bc:90:3b:55:ae:f5:9c:54:48:d7:b2:00:74:d5:f4:
                    42:88:bf:23:30:2a:33:23:45:94:5e:2f:4d:0d:b4:
                    24:41:ee:1c:4b:ce:cb:22:42:20:39:da:2e:70:3e:
                    81:ff:a9:5d:bb:ea:6f:52:16:e1:c8:d9:17:cd:2a:
                    0e:e4:9d:c8:a0:38:01:f4:d9:00:23:24:a0:1f:fc:
                    55:d6:ec:78:d6:80:87:9c:fd:7e:1d:21:0a:75:74:
                    34:e7:69:82:00:52:01:84:b6:e3:cf:d5:3b:bf:b5:
                    8e:f1:52:31:d1:11:d6:27:d6:c5:81:57:64:99:f9:
                    9f:73:84:f4:fa:1b:fe:87:b6:41:a6:7b:70:f4:7e:
                    83:45:83:63:f9:60:06:19:98:19:75:a3:4a:de:78:
                    b8:cb:2b:fe:cc:3b:e7:d7:e4:35:98:92:d0:90:73:
                    e5:0f:a4:0a:85:c8:da:60:72:2b:35:dc:4f:64:bd:
                    69:1a:ad:18:52:55:1d:cf:1c:73:55:4f:08:66:36:
                    c8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F2:10:89:12:43:7F:FC:7D:31:79:2C:51:6F:B8:44:1E:62:53:F2
            X509v3 Authority Key Identifier:
                keyid:E3:0A:78:29:4D:1A:6B:6A:63:D2:7E:37:DD:6F:C6:E7:B8:0F:9E:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E30A78294D1A6B6A63D27E37DD6FC6E7B80F9ED2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130312e302f32342d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:e9:d0:76:bc:57:59:ab:a4:d4:4e:52:bc:a4:15:63:3f:74:
         fb:55:68:34:9a:53:a1:c6:20:a4:0f:6d:73:d3:bc:98:e1:d4:
         19:6e:c9:4f:48:e3:f9:a3:d3:29:d8:e4:3f:ef:af:7b:1c:58:
         63:a0:f2:ef:5f:f8:c5:7d:cb:c2:09:53:c5:76:73:9f:c0:ca:
         fb:cc:70:31:84:e8:69:aa:77:a4:f7:49:73:b9:99:68:aa:36:
         f9:e4:4f:b9:bc:9c:5b:2b:36:e4:19:e2:ae:50:57:55:fa:16:
         e4:21:7f:e9:f9:a5:8c:1b:b6:96:1f:2b:68:20:de:88:cb:15:
         5b:36:35:73:1e:a2:0f:50:02:28:f9:4e:ee:1b:51:80:1f:fa:
         27:a8:4b:48:e8:97:13:11:ca:d1:94:af:62:24:2b:fd:34:6a:
         63:f6:4a:ed:7e:14:82:fc:ea:14:68:a0:f0:8f:03:6b:b5:5f:
         8f:3b:4f:85:b0:f5:3f:4a:57:ca:eb:87:38:a4:6d:31:83:f7:
         e4:69:0e:28:59:8b:26:c8:84:a9:60:27:ac:97:85:67:39:ac:
         d5:62:77:f9:e4:82:82:5d:31:a3:4e:99:3c:e8:19:2a:21:5b:
         fb:bd:22:14:a1:91:c5:49:6a:1c:ca:9c:38:e7:79:53:af:12:
         0f:93:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:01 2026 by rpki-client