Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa
File:                     3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa (raw, json)
Hash identifier:          C3zLhXQdm0Y8L/fkvQyrUb6nvy5u+LmWUMPrd0571WA=
Subject key identifier:   B2:9E:E4:AF:16:31:02:A8:0B:AD:23:D0:52:AD:08:1E:09:15:9B:56
Certificate issuer:       /CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C
Certificate serial:       1CDB79DFF91CF8EB03474A1C8AE853BA58DCF328
Authority key identifier: CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa
Signing time:             Sun 03 May 2026 02:50:26 +0000
ROA not before:           Sun 03 May 2026 02:45:26 +0000
ROA not after:            Sun 02 May 2027 02:50:26 +0000
asID:                     58819
IP address blocks:        103.240.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl
                          rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:db:79:df:f9:1c:f8:eb:03:47:4a:1c:8a:e8:53:ba:58:dc:f3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C
        Validity
            Not Before: May  3 02:45:26 2026 GMT
            Not After : May  2 02:50:26 2027 GMT
        Subject: CN=B29EE4AF163102A80BAD23D052AD081E09159B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5f:c9:8a:5a:bc:df:ff:7f:db:ce:d9:fb:1b:
                    7e:9d:37:8f:85:5e:e3:10:29:15:80:2a:d1:6d:3f:
                    58:f8:f2:4b:b4:cd:13:ec:b5:c3:1e:68:91:6c:88:
                    7e:31:a1:bd:e7:e7:91:2a:3d:42:76:a9:89:45:bd:
                    12:c8:7a:e2:e8:c5:d1:73:cb:07:0d:f6:e3:9b:18:
                    f6:e9:e8:6f:f8:74:39:d8:51:66:16:a0:73:c1:83:
                    fa:fb:6b:db:cd:41:e7:23:b8:c6:d5:24:7c:11:7f:
                    3c:d2:70:be:e2:ff:f5:49:64:59:b9:d6:a0:3f:78:
                    d9:b1:2c:ca:d2:36:76:f7:6e:54:a3:15:45:31:3d:
                    8b:ad:c0:80:85:6c:d7:f7:3e:29:d2:af:1f:4f:27:
                    4a:fb:1a:b0:2f:3a:b3:7d:16:b2:90:a5:b9:d8:51:
                    b4:05:23:37:30:48:1c:00:ab:12:c4:41:a8:06:60:
                    d0:54:35:87:48:60:e4:43:c3:61:36:ed:4f:c1:a2:
                    ab:77:57:45:7d:03:17:7e:4c:2d:9c:e1:0d:47:d9:
                    e0:28:74:70:ae:0a:0c:a7:80:6d:b2:fd:f0:07:2f:
                    66:5f:29:51:72:29:54:fa:8e:84:6d:3e:e3:c7:50:
                    ce:8c:43:aa:4d:75:58:11:64:9d:1c:2a:76:2d:31:
                    6b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9E:E4:AF:16:31:02:A8:0B:AD:23:D0:52:AD:08:1E:09:15:9B:56
            X509v3 Authority Key Identifier:
                keyid:CE:62:0D:0F:51:CB:0E:E1:C8:DF:26:4C:48:8C:E3:4D:0C:F3:3C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE620D0F51CB0EE1C8DF264C488CE34D0CF33C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3131302e302f32342d3234203d3e203538383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:eb:d5:d6:72:db:77:13:3d:c7:12:e1:d9:12:5f:23:0b:
         99:5a:78:ee:a5:df:68:6f:67:a2:25:ca:a0:29:49:3d:68:b7:
         32:29:5a:ee:41:73:de:8f:43:ed:a2:64:18:e9:03:0c:3d:e4:
         3b:52:8e:7b:cc:2e:8b:fe:02:59:9e:af:f1:70:25:e7:e6:1d:
         35:2d:b1:bc:e9:11:a7:8f:86:e7:43:52:03:94:38:4b:5e:b6:
         19:42:d3:2b:e9:d1:c3:80:2d:47:e7:77:7e:5d:74:cc:77:e3:
         9b:da:0f:51:86:99:d5:de:89:78:a3:dc:7c:8e:49:3d:e6:1e:
         ec:37:7a:38:c7:4c:f1:1c:a6:90:3b:6b:4e:67:61:61:71:78:
         17:69:2d:8f:bc:37:0a:c8:b6:61:ee:72:86:38:12:8d:8a:5b:
         e9:b2:78:43:de:bb:9b:6b:a6:bd:af:56:c4:2d:c7:34:15:02:
         60:21:2b:a9:46:85:93:17:f1:95:8a:e5:4a:fb:0a:a7:e5:0e:
         c9:3f:a1:64:bb:58:61:2a:cc:f8:91:b9:6c:03:bb:8b:ba:cc:
         dd:4a:39:95:aa:1f:9a:5c:e1:03:db:d4:1c:38:0f:6d:0c:74:
         2c:46:66:2b:57:92:98:b1:5e:59:18:99:0a:00:60:ad:0f:6e:
         0a:0d:af:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:56 2026 by rpki-client