Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa
File:                     3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa (raw, json)
Hash identifier:          CWrmFGiKwBYgiggQgjB1LyJpABcJ6sa0nfq8I7iWRCk=
Subject key identifier:   76:B9:1F:57:64:36:2E:85:C7:F9:30:35:4A:76:D3:97:D8:7E:46:C2
Certificate issuer:       /CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
Certificate serial:       2D40CD558B1217A30FC17C025786DB78C29D54F3
Authority key identifier: C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa
Signing time:             Sun 03 May 2026 02:37:07 +0000
ROA not before:           Sun 03 May 2026 02:32:07 +0000
ROA not after:            Sun 02 May 2027 02:37:07 +0000
asID:                     132678
IP address blocks:        103.241.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl
                          rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:40:cd:55:8b:12:17:a3:0f:c1:7c:02:57:86:db:78:c2:9d:54:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80F1ABFA2D82FD943F357E54256F9D077A237B6
        Validity
            Not Before: May  3 02:32:07 2026 GMT
            Not After : May  2 02:37:07 2027 GMT
        Subject: CN=76B91F5764362E85C7F930354A76D397D87E46C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:53:c3:bd:31:c7:1b:6e:d1:3d:a1:4d:3c:
                    43:d2:c0:5a:5a:84:8c:e9:5d:69:f9:e9:45:a9:f6:
                    c5:21:b3:96:d8:7e:24:3c:bd:08:6e:57:01:e9:d4:
                    4f:b6:91:5c:a0:2e:67:b9:db:f7:8d:10:df:fc:e1:
                    15:80:8f:45:2e:99:ff:67:4c:19:37:b0:a5:b2:16:
                    9a:99:bf:10:82:54:ea:6b:a0:61:14:26:ac:6c:df:
                    a5:77:bd:99:b4:af:e1:05:68:ab:3b:27:e2:a9:32:
                    d0:a1:c9:39:bf:e9:ef:fe:58:83:57:a4:95:2e:8e:
                    0c:6f:dd:32:1d:df:64:17:45:93:65:59:35:b1:be:
                    30:b4:18:99:47:5b:db:18:3b:e1:b7:2b:35:84:f8:
                    2c:5e:f4:e8:7b:1c:61:e0:8e:90:4c:eb:56:47:0d:
                    ba:b3:6b:a9:cf:d9:c1:ae:d7:28:66:3b:97:5d:0d:
                    c9:ec:17:37:45:d6:0e:75:96:33:4f:15:8b:bb:9d:
                    f9:d3:0c:13:6b:f0:e1:fd:2d:f5:fd:71:1e:29:d0:
                    e3:58:cf:71:61:52:7b:03:cf:f3:06:4e:78:b9:41:
                    95:3b:98:fd:66:e1:60:98:47:94:fa:39:d9:61:ad:
                    76:58:54:81:fb:1d:cd:4d:db:f4:cf:5d:98:4b:a6:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:1F:57:64:36:2E:85:C7:F9:30:35:4A:76:D3:97:D8:7E:46:C2
            X509v3 Authority Key Identifier:
                keyid:C8:0F:1A:BF:A2:D8:2F:D9:43:F3:57:E5:42:56:F9:D0:77:A2:37:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/C80F1ABFA2D82FD943F357E54256F9D077A237B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C80F1ABFA2D82FD943F357E54256F9D077A237B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5ea0cf9a-c57d-4395-9249-bfcf46724282/0/3130332e3234312e3230342e302f32342d3234203d3e20313332363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:7f:04:c7:dd:28:c9:aa:2b:4f:0b:bf:78:e4:93:b2:8a:
         1f:ed:bb:14:ac:54:43:60:09:93:e4:77:0e:40:98:23:df:6b:
         1a:9a:d7:d1:07:31:46:34:93:67:4d:95:17:a9:ca:53:3f:cd:
         df:7c:3c:d6:73:29:e3:6d:7c:52:06:7b:0b:91:54:10:85:c7:
         0b:19:72:e4:10:df:9f:e9:7a:36:d1:00:bb:20:12:aa:be:7a:
         88:0c:03:aa:0f:ad:be:15:55:0b:7a:68:ae:2e:99:b5:86:47:
         5e:4a:13:41:13:0d:e0:b6:70:e8:bf:e8:90:bc:2f:9d:20:2a:
         37:fa:56:c1:9d:68:c0:43:73:73:b1:06:70:82:bb:a8:ed:91:
         35:80:8f:3e:d1:bc:d2:8b:4f:80:0f:51:da:50:08:79:bb:08:
         03:66:e7:6f:97:e7:76:40:bf:23:af:f4:db:97:ea:da:5c:9c:
         71:df:5d:2d:94:d6:8f:98:39:3f:c5:ec:59:c7:3c:cb:a3:9b:
         ff:81:23:4f:81:75:df:bd:e6:e5:a7:f2:2f:95:e0:58:d1:b9:
         33:36:c0:bc:44:2b:0b:5c:9b:f9:0f:e0:43:08:d7:0b:e6:d0:
         7f:4b:f9:c8:c3:c3:1e:96:f2:f2:8c:ae:fc:bc:87:42:c1:d2:
         d3:bd:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:00 2026 by rpki-client