Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
File:                     3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          wUatHRzXPbqClBH0MY0iHzp1TX6/WqqHKhroEbt+8Ko=
Subject key identifier:   E3:8C:B5:B8:67:6F:A0:1C:E7:03:70:6A:50:A2:7E:55:3C:49:27:93
Certificate issuer:       /CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
Certificate serial:       6F2CB27C84D8A9AF49681856829E615B21F5DC3B
Authority key identifier: 32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa
Signing time:             Sun 03 May 2026 02:45:01 +0000
ROA not before:           Sun 03 May 2026 02:40:01 +0000
ROA not after:            Sun 02 May 2027 02:45:01 +0000
asID:                     142360
IP address blocks:        103.170.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl
                          rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2c:b2:7c:84:d8:a9:af:49:68:18:56:82:9e:61:5b:21:f5:dc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D
        Validity
            Not Before: May  3 02:40:01 2026 GMT
            Not After : May  2 02:45:01 2027 GMT
        Subject: CN=E38CB5B8676FA01CE703706A50A27E553C492793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:e6:5b:fa:27:d4:13:2d:ae:98:dd:99:6f:
                    b5:1b:94:ab:c6:f3:01:ab:ef:68:e5:01:bb:7b:18:
                    07:81:f7:72:ae:cb:e6:bf:de:c7:30:5c:5e:e4:d0:
                    b7:ff:f0:89:fe:88:03:b4:85:84:6f:54:d4:0d:cf:
                    4e:36:d7:ce:b7:59:9c:05:a9:3a:4c:63:b1:30:5a:
                    9d:41:4b:3a:4a:b8:9f:38:c2:a9:98:b5:86:5b:e1:
                    13:56:84:e9:b0:97:7e:61:c7:f2:6e:a0:15:32:94:
                    3a:d7:6f:e3:09:ec:20:35:69:dd:a6:1c:6f:fd:55:
                    cb:ef:36:20:6f:91:2c:ab:d9:88:97:59:11:28:78:
                    fb:9e:2a:9d:e0:c5:1d:1e:30:39:dc:fe:51:6f:87:
                    31:b2:19:8f:ed:a8:ab:db:b3:89:12:be:a9:41:fc:
                    47:29:c0:82:22:4b:95:00:a2:b1:ab:e3:02:a3:6a:
                    17:74:7f:38:e8:c4:ed:d5:94:7d:d0:93:1c:6a:6d:
                    5c:1d:e0:0f:92:dc:93:7b:ac:70:63:5a:85:d3:f2:
                    fa:c1:1a:26:6f:56:fd:76:0e:60:07:34:49:5e:3c:
                    39:be:96:67:61:24:d3:f9:b6:8b:12:1d:84:1f:bd:
                    c6:b3:ca:36:c8:36:56:db:ef:ad:1c:2f:2b:d7:90:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:B5:B8:67:6F:A0:1C:E7:03:70:6A:50:A2:7E:55:3C:49:27:93
            X509v3 Authority Key Identifier:
                keyid:32:B2:BC:6F:FC:56:10:D2:1D:60:7C:D2:EE:5C:E1:C1:68:88:3E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/32B2BC6FFC5610D21D607CD2EE5CE1C168883E2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:e4:5f:03:9b:7b:25:a3:c5:0b:8f:14:93:77:81:7a:0e:
         dd:9d:df:fd:8e:1f:7c:0a:70:eb:25:f9:18:3e:25:ab:56:5c:
         c0:50:63:79:42:8d:2a:d6:d0:32:a7:43:53:8c:96:a9:d5:86:
         92:c3:c9:96:d4:58:de:a1:f5:1e:30:4e:1c:78:f3:2a:c8:8a:
         57:2b:7c:fe:af:24:6a:2d:7e:ef:ba:a5:43:4d:95:9f:0c:f7:
         8f:ba:3b:24:0f:a0:3d:ac:72:a9:63:07:31:9e:85:de:d3:3f:
         24:5a:3a:ef:6c:a2:28:a7:00:43:89:be:65:9e:8c:8f:c6:ca:
         dd:d1:ab:95:80:81:bc:2e:e5:68:c7:3b:34:b1:64:8b:e1:06:
         66:50:13:25:4a:68:29:5a:86:1b:79:a8:a7:9c:4d:9c:1b:7c:
         25:74:d4:d7:de:0a:97:50:f3:72:0a:35:b2:8c:f7:72:ef:eb:
         83:ab:b7:b9:f3:16:b2:42:96:bf:84:68:e3:cb:d2:cb:1b:cc:
         60:4a:54:db:46:ef:31:35:0c:6e:ab:86:cf:c7:12:d7:4a:c7:
         65:fe:c6:5e:16:26:c9:44:39:af:1f:54:b0:ce:8b:44:8d:cf:
         99:99:4d:da:07:f6:25:e5:d6:4b:96:ef:2d:ec:f0:ed:25:90:
         81:30:c7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:33 2026 by rpki-client