Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
File:                     3130332e35362e39332e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          vqVbxn6Wjao5k2JYe2+RI+TcQAfRr5R7zs7bd5wdsLk=
Subject key identifier:   64:E4:94:EC:5F:D7:81:38:98:B5:A3:D6:D2:6B:77:F1:A4:44:5A:7A
Certificate issuer:       /CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
Certificate serial:       4D86ADD92FC2B8901B9BAA1B71EAA1776D72BFBB
Authority key identifier: 71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 02:42:44 +0000
ROA not before:           Sun 03 May 2026 02:37:44 +0000
ROA not after:            Sun 02 May 2027 02:42:44 +0000
asID:                     58477
IP address blocks:        103.56.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl
                          rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:86:ad:d9:2f:c2:b8:90:1b:9b:aa:1b:71:ea:a1:77:6d:72:bf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71A45C05D7D5DF9D16E9C3B0607535DB2B906B32
        Validity
            Not Before: May  3 02:37:44 2026 GMT
            Not After : May  2 02:42:44 2027 GMT
        Subject: CN=64E494EC5FD7813898B5A3D6D26B77F1A4445A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:9d:bb:11:76:e1:d3:f5:8c:44:97:54:91:
                    2a:e1:08:c7:85:1a:7c:03:f7:b5:15:a1:b6:f4:fe:
                    88:1f:fa:9f:28:c3:05:8d:18:67:e2:d2:1d:c5:3e:
                    36:18:d3:e5:a0:c1:bd:cf:3b:bc:d9:f3:b1:0b:4c:
                    d2:c0:dd:20:17:e5:88:8a:69:4f:a8:04:ba:05:b8:
                    77:bb:fa:56:8e:e4:f4:ef:83:3d:94:09:33:5a:0e:
                    ea:24:9d:7e:5e:a4:da:56:4a:64:e3:cf:c9:3a:48:
                    b6:4d:e6:a1:55:36:62:88:f4:69:0b:5f:09:77:76:
                    f2:3f:95:e0:34:99:81:ff:30:de:fd:b3:54:33:64:
                    0f:f8:a7:1f:32:cc:92:1e:99:a0:4c:74:3a:d9:49:
                    ac:e3:d9:b5:e1:23:59:3f:00:59:19:34:03:23:d1:
                    64:4e:12:62:6c:63:90:4a:a8:6b:8f:dd:ea:76:d2:
                    95:5f:e1:9d:6d:7b:00:a6:a4:4e:6b:84:62:6f:21:
                    39:ae:d5:a6:99:4d:74:3d:c6:69:98:7d:9b:74:88:
                    b0:3e:38:5d:a4:df:99:d2:0c:39:58:10:7f:6a:08:
                    25:e2:68:3e:4b:f0:f0:a3:22:e4:c0:d8:5d:92:4f:
                    c3:a7:61:67:cd:50:3e:8c:e9:22:5a:6b:bb:de:6e:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E4:94:EC:5F:D7:81:38:98:B5:A3:D6:D2:6B:77:F1:A4:44:5A:7A
            X509v3 Authority Key Identifier:
                keyid:71:A4:5C:05:D7:D5:DF:9D:16:E9:C3:B0:60:75:35:DB:2B:90:6B:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71A45C05D7D5DF9D16E9C3B0607535DB2B906B32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:4b:38:d4:88:21:3c:b5:f4:64:a9:3e:8f:5d:cd:b6:62:
         e1:29:4b:34:57:73:fe:03:48:a9:fc:76:7b:cd:f9:2d:a1:93:
         fc:9c:cc:7d:0a:c2:f4:71:4e:2b:c3:b8:dc:81:1e:73:a2:80:
         25:56:9c:9b:ab:45:09:93:1b:5d:aa:31:30:b3:9d:2f:41:18:
         5c:d3:8a:1b:4d:ad:5b:82:24:61:e1:45:e4:e9:37:9c:52:bf:
         e9:d9:72:b6:ac:2f:e8:ec:d8:49:3a:09:ac:d7:c9:b9:3e:45:
         59:78:33:88:f9:4e:37:0a:b4:4c:1d:13:2d:10:cc:05:f2:d1:
         b6:61:cd:0d:02:83:db:12:fb:1b:7c:9e:7e:bc:e7:58:f4:79:
         c7:ac:88:b4:1e:9b:11:12:29:52:45:7d:b2:4c:60:f3:b9:c5:
         c1:1c:26:79:33:3b:01:22:cd:66:b6:72:cd:31:24:60:86:e4:
         6b:60:f0:6e:45:ce:48:ae:0c:8a:71:e1:21:10:d8:5d:49:15:
         1a:19:ed:03:a2:d1:4f:bb:a2:14:6c:1f:39:ff:7b:2d:73:de:
         1d:c8:e0:5a:1f:e6:df:a5:23:c8:7f:d4:6e:00:a2:61:33:29:
         97:11:1f:f1:28:9b:d2:e1:4d:98:bd:3f:7b:9d:a9:dc:89:1e:
         c4:af:33:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:05 2026 by rpki-client