Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa
File:                     3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa (raw, json)
Hash identifier:          e18vtFsO2rq7V5cmuPD5QY+txt6xvfQ7TNg+W5usCFI=
Subject key identifier:   E4:1B:BE:7F:3B:11:70:21:5F:8A:77:BE:D6:C3:62:9F:AB:1B:75:B7
Certificate issuer:       /CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
Certificate serial:       5C3ECD44B5244335B2EE9234124355CF667B271B
Authority key identifier: 7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa
Signing time:             Sun 03 May 2026 02:48:09 +0000
ROA not before:           Sun 03 May 2026 02:43:09 +0000
ROA not after:            Sun 02 May 2027 02:48:09 +0000
asID:                     64027
IP address blocks:        103.214.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl
                          rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3e:cd:44:b5:24:43:35:b2:ee:92:34:12:43:55:cf:66:7b:27:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DD6B50A2D41EAEB848E7C42D74C0D77D1303506
        Validity
            Not Before: May  3 02:43:09 2026 GMT
            Not After : May  2 02:48:09 2027 GMT
        Subject: CN=E41BBE7F3B1170215F8A77BED6C3629FAB1B75B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:a8:06:9c:1b:68:be:66:7f:f8:89:0d:99:
                    a5:bb:38:29:b1:6a:87:a2:53:53:ad:dc:b6:33:8d:
                    81:61:04:a2:c1:30:e8:02:a1:f9:74:ef:07:d4:58:
                    da:46:7a:51:9e:e0:a1:21:79:d3:7b:47:9f:47:14:
                    bc:53:cd:25:45:9f:d2:37:77:8e:15:81:c6:41:30:
                    98:24:4f:9b:68:95:da:e9:2b:dc:fc:68:e5:d5:38:
                    a6:b4:f8:9d:5a:ae:76:4c:a5:2b:20:96:4b:06:7e:
                    9e:91:96:ff:3a:21:51:dc:d9:54:2e:2f:67:22:70:
                    b7:a8:27:22:3a:25:c5:a5:7b:32:46:33:03:01:94:
                    7d:a5:e9:be:8a:b3:2e:83:29:1d:f1:a8:42:b9:d1:
                    be:f6:64:13:a3:83:da:24:ba:70:fb:be:f2:ad:d7:
                    c9:9d:b8:88:be:be:f2:3e:91:72:e0:5d:60:4a:e6:
                    2c:ee:c3:81:6d:12:6a:fd:53:28:ac:7d:2d:1c:28:
                    29:eb:e7:39:40:a5:e8:f5:80:f6:ee:fa:7b:ff:18:
                    39:fe:7c:75:42:ac:17:62:85:8d:00:ec:fa:ce:93:
                    73:ac:15:a2:b7:70:b5:5b:2d:f6:5c:77:f7:81:11:
                    a4:ff:93:50:b7:7c:7d:23:ce:11:3e:aa:ca:ce:2c:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:BE:7F:3B:11:70:21:5F:8A:77:BE:D6:C3:62:9F:AB:1B:75:B7
            X509v3 Authority Key Identifier:
                keyid:7D:D6:B5:0A:2D:41:EA:EB:84:8E:7C:42:D7:4C:0D:77:D1:30:35:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7DD6B50A2D41EAEB848E7C42D74C0D77D1303506.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85e51875-5087-4264-a8bd-4156f55baaab/0/3130332e3231342e3130312e302f32342d3234203d3e203634303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:25:23:9d:31:cb:bb:60:74:27:7a:b2:bc:e6:18:60:36:38:
         c9:bb:a7:5d:72:0c:cb:c4:75:38:4b:86:72:fb:d9:70:14:4f:
         78:5c:33:4f:3c:16:31:40:62:ef:95:26:ea:2a:4a:62:58:2a:
         1a:69:a1:0b:e6:b9:28:d0:10:bc:c6:4a:5d:eb:9d:2e:f2:6c:
         06:b9:82:6d:90:67:c7:4f:d9:06:36:7f:7b:38:df:f1:04:86:
         94:32:09:f6:e2:34:cf:01:33:5e:93:3d:3b:a1:5f:ba:a3:ce:
         e3:2f:11:a4:76:01:21:bd:2f:a1:4e:21:02:77:e9:ae:11:94:
         c8:17:c3:42:82:19:af:ce:c3:a7:f2:53:0b:f5:05:d1:5d:9d:
         6d:35:39:56:a0:15:b0:65:50:b6:b8:50:b4:c0:73:b4:f6:f2:
         f8:95:53:99:da:c6:4e:bf:60:64:3c:42:07:a7:8c:ed:b5:f8:
         99:75:e9:cf:10:c8:42:1f:86:fd:7e:05:99:80:8c:df:5d:f3:
         a9:9b:b5:82:36:c2:b1:db:a8:12:fb:72:dc:19:6a:d9:74:f1:
         a0:6c:a8:8b:e1:b4:6e:e0:95:95:67:b6:b0:34:da:84:5b:ae:
         91:c0:e7:55:21:96:36:e9:ed:80:ad:1e:cd:76:46:b0:2a:b7:
         8f:da:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:50 2026 by rpki-client