Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa
File:                     3130332e35362e39322e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          d1IJ4T81r3K/uk2231YZmItFa5G4LBBNAf/1wVmUa9c=
Subject key identifier:   7A:3A:6E:CD:4F:2C:6B:CC:27:86:F2:69:2E:6B:9F:3A:86:C4:8D:C0
Certificate issuer:       /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
Certificate serial:       02291BD91E6D583762589F30A5C939130D623A64
Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 02:42:44 +0000
ROA not before:           Sun 03 May 2026 02:37:44 +0000
ROA not after:            Sun 02 May 2027 02:42:44 +0000
asID:                     58477
IP address blocks:        103.56.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl
                          rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:29:1b:d9:1e:6d:58:37:62:58:9f:30:a5:c9:39:13:0d:62:3a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
        Validity
            Not Before: May  3 02:37:44 2026 GMT
            Not After : May  2 02:42:44 2027 GMT
        Subject: CN=7A3A6ECD4F2C6BCC2786F2692E6B9F3A86C48DC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:89:26:7b:2c:ca:7e:90:8e:ea:94:95:4a:
                    bc:36:c0:0c:bd:ec:26:36:5f:1d:76:d5:e8:47:55:
                    c0:91:9c:6f:87:cf:26:f0:18:0c:aa:77:38:80:ef:
                    f7:b6:31:d9:d4:a6:33:48:b6:8d:00:77:c5:ba:d8:
                    d7:ac:52:31:b4:e2:ac:b0:1a:35:e0:11:35:7e:08:
                    3d:69:89:53:8d:7b:f8:29:8e:dd:79:e9:5b:90:fc:
                    b9:a4:d6:80:68:bb:8c:a6:82:fc:25:7f:75:c0:6c:
                    92:31:42:02:98:99:61:4f:f8:50:25:3f:b3:6c:1d:
                    b9:e0:39:15:87:56:83:06:44:22:4d:5c:fd:ac:62:
                    2e:65:0b:d5:1a:ba:18:99:21:b7:66:e3:3d:6f:ec:
                    b0:8f:92:90:64:e6:a3:29:70:b9:6e:7d:f0:0d:dd:
                    3c:73:30:2a:66:19:7f:94:90:ef:3f:6c:99:08:2e:
                    89:fb:73:dc:16:2a:c8:33:b5:54:47:dd:c9:23:73:
                    f2:53:5d:e7:89:d2:34:15:26:2a:91:5a:f6:23:99:
                    51:da:41:b4:8b:fc:b1:83:80:5a:61:bf:ff:0d:b5:
                    8a:9e:3d:23:5d:bc:49:ac:15:67:d2:55:99:50:2f:
                    a9:b0:06:bc:ff:f8:df:06:57:8a:3c:9c:50:7d:18:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3A:6E:CD:4F:2C:6B:CC:27:86:F2:69:2E:6B:9F:3A:86:C4:8D:C0
            X509v3 Authority Key Identifier:
                keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39322e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f4:51:94:8a:3f:af:44:66:d6:c0:fb:4b:70:01:c6:c7:22:
         89:68:cd:82:fe:c0:5a:f1:70:c6:ad:7d:a9:b0:70:db:fd:b8:
         e9:f1:4b:68:c3:93:26:6c:36:c1:75:29:90:d2:69:e4:44:8e:
         3b:5c:f0:4c:82:8d:99:e9:78:a1:55:39:4f:13:68:8c:51:06:
         c4:78:42:37:ee:40:47:22:d3:3c:ed:d5:29:da:bb:26:92:93:
         cb:89:0a:30:82:3e:fb:db:56:41:98:ee:82:cb:85:10:10:5a:
         a2:39:f5:1a:72:a9:96:b2:ff:cb:19:0a:b8:78:6b:72:7b:c3:
         27:e6:c5:83:37:4f:68:06:2a:cc:0e:b3:93:d3:da:05:6b:4d:
         4d:e3:c9:94:2e:5a:19:fa:4c:c1:93:bf:39:3e:c4:9a:81:61:
         58:71:f8:a4:e2:07:7b:36:db:2e:c9:4a:dc:2f:0d:67:f1:d6:
         6b:02:af:f4:c6:1c:ba:ba:e6:e1:55:31:b0:77:18:f5:50:54:
         85:3c:81:7a:b6:50:56:fd:de:6d:03:9f:24:e8:27:b3:dd:24:
         ac:b0:71:c9:d6:60:5a:63:b6:94:ba:76:bc:a4:ff:d9:a0:c3:
         44:41:f6:ab:e2:81:0c:8e:d0:1f:a1:e2:37:9c:76:e3:64:4c:
         75:68:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:44 2026 by rpki-client