Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa
File:                     3130332e32392e31312e302f32342d3234203d3e20313431303634.roa (raw, json)
Hash identifier:          +AUN4MHHWAUjMgF6xm0EYpBlr5qq8MXy2UpCeEPacA4=
Subject key identifier:   74:DA:C0:32:F8:20:6D:38:99:03:34:29:20:34:FA:C3:F9:D1:32:B5
Certificate issuer:       /CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87
Certificate serial:       4AA0FB73EED6EF9697825608B0B18AFCEF85EE93
Authority key identifier: 67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa
Signing time:             Sun 03 May 2026 02:35:26 +0000
ROA not before:           Sun 03 May 2026 02:30:26 +0000
ROA not after:            Sun 02 May 2027 02:35:26 +0000
asID:                     141064
IP address blocks:        103.29.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl
                          rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a0:fb:73:ee:d6:ef:96:97:82:56:08:b0:b1:8a:fc:ef:85:ee:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=673062FFFBB87D54B24F800CA71D4C1DD77E2B87
        Validity
            Not Before: May  3 02:30:26 2026 GMT
            Not After : May  2 02:35:26 2027 GMT
        Subject: CN=74DAC032F8206D38990334292034FAC3F9D132B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4a:50:f8:57:ba:13:a1:f4:67:6e:b1:88:32:
                    17:84:71:46:f6:f9:34:69:59:88:24:43:d8:05:bf:
                    03:47:8e:8e:5d:26:0e:03:53:cd:9b:d8:a9:fe:37:
                    15:70:7e:cb:b9:af:85:ef:1f:2d:0d:a5:93:f3:7f:
                    7e:2d:62:6f:5a:a5:16:c2:61:a6:0c:f6:39:f6:33:
                    ea:ee:85:4c:9c:1a:78:64:2b:ac:fa:c8:2a:36:5c:
                    99:85:14:08:eb:67:9a:9d:61:1b:23:45:fa:a2:24:
                    b2:2f:a6:01:52:70:8b:21:09:12:21:95:8b:7d:bf:
                    4d:d9:fb:f9:8f:70:30:cb:2f:6f:3d:8e:04:68:f1:
                    04:df:77:eb:a7:b6:28:65:4d:0d:b2:47:72:1e:d2:
                    87:69:60:e2:e6:67:16:8d:a1:cd:80:8e:44:e8:7c:
                    49:14:f6:b3:8d:11:6d:30:ee:73:9b:1d:3e:47:57:
                    b7:a4:97:b9:dc:5f:c3:3b:30:f1:d1:9d:09:6e:31:
                    9a:b1:05:fe:b7:22:6c:20:ab:e1:00:40:e6:66:bf:
                    7b:1b:77:19:2e:e3:e7:68:41:d2:bf:a0:5d:33:6a:
                    c1:66:b8:c8:01:24:e7:4e:03:28:e3:51:fd:ab:00:
                    45:fe:40:9b:bb:24:03:d4:05:99:15:2c:9b:02:90:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:C0:32:F8:20:6D:38:99:03:34:29:20:34:FA:C3:F9:D1:32:B5
            X509v3 Authority Key Identifier:
                keyid:67:30:62:FF:FB:B8:7D:54:B2:4F:80:0C:A7:1D:4C:1D:D7:7E:2B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/673062FFFBB87D54B24F800CA71D4C1DD77E2B87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a532c65-80be-4fde-87d0-36c5bd288cd8/0/3130332e32392e31312e302f32342d3234203d3e20313431303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:80:89:37:cc:4a:9e:de:17:11:46:3f:60:80:dd:ed:ca:26:
         05:63:99:ca:e7:94:4c:30:60:0b:15:9a:b6:a8:40:2b:f8:6d:
         df:36:46:ed:f8:91:16:ab:a6:40:70:05:5b:16:02:ce:b0:10:
         a9:9a:37:5d:81:ad:3a:60:33:b9:e3:ae:3e:a2:70:68:38:d6:
         47:21:71:8f:4b:d6:52:b0:42:ef:da:ca:66:e3:f9:50:29:d2:
         7e:01:59:2e:3d:94:62:77:48:b0:d8:ff:dd:5c:d6:25:c9:29:
         75:74:4c:4c:6a:08:a7:15:ec:aa:60:14:cb:37:c4:4e:24:af:
         49:0d:e3:fc:44:66:08:7b:ba:f6:fd:0f:d4:21:90:f6:2e:8e:
         6c:91:9f:ac:2e:13:f3:2e:7c:e4:b8:d9:1c:c8:03:c0:e9:85:
         39:1d:62:43:5f:ed:c7:4d:14:7e:a4:db:68:51:8d:07:f5:ce:
         e8:3f:73:f6:48:94:b4:7c:e3:e5:f9:97:3e:b4:15:d3:58:48:
         7b:f2:8c:01:6f:97:ad:12:85:db:f6:3f:0a:b0:44:7c:f0:e1:
         0d:73:7d:bf:1a:9e:e5:4c:dd:83:8b:8b:fa:10:91:8f:fb:1a:
         a8:d2:2b:8a:7c:05:12:c1:2e:76:79:46:21:44:3c:78:09:5b:
         d8:65:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:46 2026 by rpki-client