Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa
File:                     3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa (raw, json)
Hash identifier:          +xmmKCCGNPjDepHqzXzJnlfxWWK0PUzYuwz3sX367Vg=
Subject key identifier:   62:40:6A:E4:49:4E:9C:08:FC:CF:1B:C1:76:0F:44:4E:BC:2B:97:2F
Certificate issuer:       /CN=309D66BED7C5AAB839669782F24FE6D817B8209A
Certificate serial:       5E325D05E19007603501A1CC03807D3CB9FCB209
Authority key identifier: 30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa
Signing time:             Sun 03 May 2026 02:56:27 +0000
ROA not before:           Sun 03 May 2026 02:51:27 +0000
ROA not after:            Sun 02 May 2027 02:56:27 +0000
asID:                     137364
IP address blocks:        103.116.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl
                          rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:32:5d:05:e1:90:07:60:35:01:a1:cc:03:80:7d:3c:b9:fc:b2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309D66BED7C5AAB839669782F24FE6D817B8209A
        Validity
            Not Before: May  3 02:51:27 2026 GMT
            Not After : May  2 02:56:27 2027 GMT
        Subject: CN=62406AE4494E9C08FCCF1BC1760F444EBC2B972F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:df:85:57:37:79:4a:71:6b:61:a1:37:cc:44:
                    25:68:cc:36:a5:40:90:c9:b1:7c:78:cd:37:e3:b0:
                    85:53:00:94:e2:be:93:0d:ed:f0:a5:36:55:1d:32:
                    9c:18:a1:b1:46:dd:fe:9e:bd:ec:74:7a:25:60:85:
                    b9:b9:d0:99:06:10:70:81:13:41:8f:98:32:a2:41:
                    95:9b:c3:93:b8:c8:45:4d:ac:6c:e2:4a:fe:8f:32:
                    47:9a:21:18:0a:5c:e6:3f:7c:2f:ce:3d:b2:26:ce:
                    59:e1:59:8f:65:c2:da:54:8c:55:f2:de:04:2a:ad:
                    37:c6:01:ef:10:b1:11:76:0e:28:e0:89:71:66:b4:
                    04:36:ee:92:80:a3:52:8c:2b:4c:4f:05:ef:d5:35:
                    06:cd:99:cf:08:96:96:24:e3:e3:9e:55:7c:97:68:
                    68:50:f8:d2:ac:78:b1:91:97:df:a4:7e:d7:2d:6b:
                    fb:a3:cf:3b:db:49:49:e9:63:9f:3b:f3:0d:d6:df:
                    33:82:98:e2:bc:48:ed:d5:60:66:6a:c2:72:d0:f5:
                    08:d5:97:88:92:fa:d6:36:7a:4f:b5:c3:0b:a9:7e:
                    17:45:9d:b0:55:c0:d7:07:5d:20:5d:7d:08:af:e7:
                    0a:fa:ec:fb:e5:a3:91:31:c9:6b:48:60:80:87:ea:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:40:6A:E4:49:4E:9C:08:FC:CF:1B:C1:76:0F:44:4E:BC:2B:97:2F
            X509v3 Authority Key Identifier:
                keyid:30:9D:66:BE:D7:C5:AA:B8:39:66:97:82:F2:4F:E6:D8:17:B8:20:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/309D66BED7C5AAB839669782F24FE6D817B8209A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/309D66BED7C5AAB839669782F24FE6D817B8209A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a40fccb2-ce1c-4862-8edf-8c35273011c2/0/3130332e3131362e3131302e302f32342d3234203d3e20313337333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b2:6b:8e:97:ce:6f:a2:04:33:75:f5:d9:e5:f8:41:75:10:
         fb:01:25:2b:71:27:fd:27:ea:1f:fc:c0:a1:ec:74:b8:00:10:
         ed:52:02:37:a5:5f:29:53:01:7d:a1:d9:65:e4:27:3c:dc:3a:
         92:87:b4:ee:51:5e:c0:c0:f9:8d:a2:a1:ed:40:c2:c2:a2:c7:
         b0:34:2a:a0:75:bc:24:44:17:9c:d7:3f:45:9f:74:db:03:dc:
         56:0a:0d:fa:7c:d0:ab:53:6d:29:09:f8:f7:d9:95:a4:15:16:
         c2:c7:b3:6d:dc:0a:84:2d:16:07:2b:18:fa:f9:6f:14:1b:c5:
         1d:a9:75:ff:76:54:1a:97:df:03:07:7a:25:cb:b7:21:4a:f3:
         1e:bb:b5:b1:3d:d5:23:5c:44:73:78:66:6c:0b:74:25:ae:34:
         b5:d3:a5:dc:b5:e5:a2:5a:70:77:65:d1:3e:28:51:64:cf:6f:
         b8:db:47:1e:9d:56:1b:77:03:a9:6a:13:5c:70:a5:f0:52:a6:
         d9:7d:fe:e0:f1:bb:7e:04:41:d5:f6:ec:fe:ae:d1:51:ac:61:
         ad:62:3e:bb:65:94:71:26:2e:68:ab:3f:f3:9c:47:4e:ed:06:
         bb:8b:be:c3:06:d2:8d:b1:57:ac:fe:72:da:5b:30:79:a9:b2:
         b2:ff:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:33 2026 by rpki-client