Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
File:                     3130332e37332e37382e302f32342d3234203d3e20313335343734.roa (raw, json)
Hash identifier:          fT68kWtVG7tb/2BD15Iw8Gz0m1fnSGaiw117JzC3oaA=
Subject key identifier:   A2:93:94:4E:99:D7:B4:62:0B:A9:35:22:13:4B:EA:68:65:41:5A:FF
Certificate issuer:       /CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
Certificate serial:       07992C7A9A8E2642873770BB4C2CE0EBDACA58BD
Authority key identifier: 62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa
Signing time:             Sun 03 May 2026 02:38:57 +0000
ROA not before:           Sun 03 May 2026 02:33:57 +0000
ROA not after:            Sun 02 May 2027 02:38:57 +0000
asID:                     135474
IP address blocks:        103.73.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl
                          rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:99:2c:7a:9a:8e:26:42:87:37:70:bb:4c:2c:e0:eb:da:ca:58:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62B2A4312116C7B41E1FAF110B76B37E3AD66DD4
        Validity
            Not Before: May  3 02:33:57 2026 GMT
            Not After : May  2 02:38:57 2027 GMT
        Subject: CN=A293944E99D7B4620BA93522134BEA6865415AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:26:db:3d:9e:9c:3c:37:4e:0d:91:24:e4:1c:
                    bc:35:6d:c0:79:8c:fa:aa:62:97:1d:7e:2a:4b:a2:
                    dc:08:d5:2f:02:1f:d2:bf:0d:b9:57:05:3b:2b:d9:
                    2d:72:f6:0e:92:97:a8:eb:cd:ac:1e:50:61:f3:cc:
                    ba:10:74:04:e0:ee:b8:e0:65:30:54:4c:77:ba:51:
                    fe:38:72:aa:db:d5:f2:c9:79:6e:5f:b9:58:ff:f7:
                    67:c0:47:98:a0:b3:89:79:cf:e5:36:45:14:3f:22:
                    1d:24:83:cf:27:40:c1:1d:7d:5d:99:e2:c9:0a:a3:
                    b7:cc:48:ab:ea:27:e1:ae:2b:9e:92:d4:a4:9b:31:
                    9e:b5:4f:d3:5e:27:0c:c1:5e:dc:42:1e:6b:a1:6f:
                    72:9c:62:ce:50:26:bf:54:ef:48:55:e6:1e:e8:86:
                    a6:de:6d:ec:51:eb:20:ca:84:96:7b:b5:3f:56:0a:
                    db:6e:e7:e7:59:0c:17:cd:58:91:66:e2:c3:bb:7f:
                    e1:66:99:14:af:6e:cc:d3:34:39:aa:13:35:2d:15:
                    98:a3:64:58:2d:5e:27:81:c5:6a:2b:55:d1:95:9e:
                    36:9f:25:aa:11:db:a9:6f:2c:d4:10:1b:d6:e9:3f:
                    e0:20:6d:e9:ab:57:2f:b5:2c:bc:6f:91:b5:7c:0b:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:93:94:4E:99:D7:B4:62:0B:A9:35:22:13:4B:EA:68:65:41:5A:FF
            X509v3 Authority Key Identifier:
                keyid:62:B2:A4:31:21:16:C7:B4:1E:1F:AF:11:0B:76:B3:7E:3A:D6:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62B2A4312116C7B41E1FAF110B76B37E3AD66DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63c8f4d7-e4b3-4b41-a685-514940fec819/0/3130332e37332e37382e302f32342d3234203d3e20313335343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:3c:89:f8:e0:45:7a:c5:12:43:79:34:18:b6:3d:2e:a4:b6:
         41:5e:01:eb:8f:3a:26:e7:73:56:3d:7e:ee:a9:a6:71:9a:78:
         2b:15:f7:ea:7f:62:63:99:1d:2b:34:56:26:60:34:f6:50:4d:
         d8:1a:5e:b2:97:24:7f:2b:cc:70:6f:37:7c:42:08:6b:a0:f3:
         e1:c7:3e:d2:5d:31:12:88:f1:94:40:20:6f:27:1c:f9:96:a9:
         1f:6f:a0:93:c5:93:ef:63:80:4d:b8:a5:1c:f9:c5:54:27:e7:
         37:14:b5:df:47:75:0e:2c:de:1b:56:c3:b3:58:52:50:36:48:
         b8:0a:ca:42:7f:c1:e4:5d:b3:76:9c:35:a5:80:a6:88:78:a3:
         ac:e8:d2:4a:3a:74:8a:f9:7f:09:61:50:1a:60:7b:bf:d1:68:
         a1:dc:ab:5a:41:29:03:5a:bf:4f:f0:0a:3a:75:8e:44:ec:a4:
         34:29:96:cb:c3:05:1b:58:f7:11:03:c8:cb:d5:43:f9:f5:92:
         1d:06:d5:da:28:cf:e1:1f:25:ac:90:87:9e:a4:f9:40:bd:6e:
         01:e7:d1:75:a3:22:34:a6:b5:d8:7c:b6:7b:82:7d:b4:ab:53:
         98:ba:17:bb:87:45:bf:37:0e:5b:e7:72:b0:0a:2f:f3:f5:3f:
         7e:ed:b6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:04 2026 by rpki-client