Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa
File:                     3130332e32392e31302e302f32332d3233203d3e20313431303634.roa (raw, json)
Hash identifier:          IBUQjMZ5NNzGmdB2zhWUusvHNKo79g9C811Va7sgvlo=
Subject key identifier:   95:DA:66:CC:E3:D1:41:D0:E1:4D:5B:CF:73:E5:A8:51:81:0F:C6:96
Certificate issuer:       /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87
Certificate serial:       0535B1F01B484BD25064070A1D16F92BA2E3E1A0
Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa
Signing time:             Sun 03 May 2026 02:35:26 +0000
ROA not before:           Sun 03 May 2026 02:30:26 +0000
ROA not after:            Sun 02 May 2027 02:35:26 +0000
asID:                     141064
IP address blocks:        103.29.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl
                          rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:35:b1:f0:1b:48:4b:d2:50:64:07:0a:1d:16:f9:2b:a2:e3:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87
        Validity
            Not Before: May  3 02:30:26 2026 GMT
            Not After : May  2 02:35:26 2027 GMT
        Subject: CN=95DA66CCE3D141D0E14D5BCF73E5A851810FC696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:56:3f:30:8c:8b:43:16:23:eb:40:7d:85:fe:
                    95:80:c9:e8:da:08:bc:4f:af:9e:14:5f:9d:92:8c:
                    8e:76:34:5a:62:ff:98:d9:d8:4f:0f:36:8d:75:5b:
                    54:25:0b:46:2a:ad:e9:46:3b:5d:46:cd:4d:8c:e5:
                    65:01:7a:11:4d:19:9c:ef:c2:36:9d:aa:95:4c:76:
                    c6:ca:06:4e:51:f7:61:85:e7:7e:7f:ee:1b:28:d8:
                    fd:07:b4:b2:4a:8d:63:5e:b8:88:6e:12:fa:70:07:
                    de:4b:8c:44:df:46:36:4b:d5:12:a2:31:e0:89:51:
                    91:de:3c:03:1e:2d:51:68:b7:2d:17:b1:f0:06:46:
                    f8:51:bd:16:98:62:77:4f:a4:fe:81:5a:9b:a8:47:
                    9e:2a:f7:5e:0f:f2:95:96:80:7c:b3:2f:d1:ef:87:
                    28:2c:c8:1f:08:25:53:07:dd:ee:82:92:01:f9:29:
                    cd:b6:76:e8:3a:32:ee:db:9e:33:9e:f5:7a:1e:d0:
                    97:01:99:f0:9f:a8:37:0e:a9:8e:b2:8b:79:81:fe:
                    48:38:99:93:bd:b7:4c:e5:22:f4:de:51:54:5c:14:
                    20:56:7c:75:ad:ad:e6:90:1f:8d:a9:0f:36:85:d9:
                    41:dd:cc:b0:f0:94:a7:45:ba:06:b9:d8:8c:f2:c0:
                    73:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:66:CC:E3:D1:41:D0:E1:4D:5B:CF:73:E5:A8:51:81:0F:C6:96
            X509v3 Authority Key Identifier:
                keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31302e302f32332d3233203d3e20313431303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:af:46:0a:4b:22:87:b5:f2:d1:17:6e:be:7b:57:5f:60:3a:
         0f:60:fb:8f:8d:c3:47:08:2f:52:d7:a5:bf:e9:2e:e3:a6:e9:
         1b:a4:45:56:8e:2b:30:78:0d:19:01:c9:05:83:fd:2b:91:11:
         30:01:83:d2:96:6f:fd:f9:ac:a9:c1:ca:f6:d4:55:ef:31:1b:
         18:50:6f:f3:53:c7:3d:73:3b:a9:91:8e:75:5e:ba:ec:38:20:
         cd:d2:b3:6f:f4:c6:dc:de:7f:d0:3c:2c:ee:72:dd:9b:97:6f:
         50:25:3a:4d:9d:88:40:84:8b:33:fb:73:2a:87:c9:56:f2:28:
         10:75:22:00:78:a6:c9:83:4e:61:7f:53:f7:22:37:4f:1a:41:
         ae:7f:55:41:be:d5:38:70:8d:5d:ef:24:87:49:49:a3:65:01:
         5c:8e:f5:05:15:be:5d:e0:42:37:7d:ea:ae:99:b7:7f:0f:34:
         66:ad:5a:b9:0c:41:84:48:3c:ed:24:c6:6c:5a:08:1d:bd:08:
         cc:d5:6e:b5:fc:18:55:1e:82:92:20:2a:09:1d:0b:f5:62:56:
         de:6c:67:b9:bc:a5:1c:96:dd:d1:88:5d:01:ae:96:b4:bb:93:
         a9:39:96:24:7e:45:2c:1f:ae:6f:43:f1:7a:53:89:33:c1:42:
         44:45:57:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:52 2026 by rpki-client