Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa
File:                     3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (raw, json)
Hash identifier:          Z0k2HMfcMKksaFrziJOtsyyQXBDq/OhSupVq38YlMrI=
Subject key identifier:   06:77:42:0C:28:5C:14:EB:0D:26:D3:21:B0:6D:65:99:C2:04:BF:5D
Certificate issuer:       /CN=4DC2282186B6221A7A52575CE005F2B42354E4A6
Certificate serial:       34181066AC9C9429E65F6BC71E0A92A67598C25A
Authority key identifier: 4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa
Signing time:             Sun 03 May 2026 03:02:49 +0000
ROA not before:           Sun 03 May 2026 02:57:49 +0000
ROA not after:            Sun 02 May 2027 03:02:49 +0000
asID:                     150207
IP address blocks:        103.36.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl
                          rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:18:10:66:ac:9c:94:29:e6:5f:6b:c7:1e:0a:92:a6:75:98:c2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DC2282186B6221A7A52575CE005F2B42354E4A6
        Validity
            Not Before: May  3 02:57:49 2026 GMT
            Not After : May  2 03:02:49 2027 GMT
        Subject: CN=0677420C285C14EB0D26D321B06D6599C204BF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:f9:9e:98:3c:9b:ea:29:04:64:29:e2:c6:
                    4c:2d:2a:14:0f:b3:af:9e:fb:fa:c7:57:c8:ab:d8:
                    a7:32:3e:5b:b7:54:cd:14:b8:74:82:5c:b3:40:21:
                    82:99:15:ad:a7:5d:c2:6a:b2:18:3c:df:96:ff:01:
                    f4:c2:64:b7:18:52:db:7e:95:81:b1:c3:e7:5a:b2:
                    c3:87:b4:3c:dd:80:78:0c:2d:b0:52:49:08:8c:a0:
                    47:4e:39:cb:ca:58:a3:04:50:f9:35:17:5f:08:b2:
                    7b:18:d5:3a:8c:1d:72:81:c1:d4:82:86:55:d0:56:
                    3c:fb:31:4e:8f:cc:2c:db:ea:92:ba:9d:f0:9b:7d:
                    1a:c9:75:7e:08:ec:d1:38:bd:b5:c4:ca:17:32:76:
                    ff:56:d1:65:5d:ce:39:32:25:92:d5:35:82:3b:7a:
                    2f:20:36:40:d1:5d:d3:58:dd:86:26:4e:be:44:2f:
                    10:9c:08:8f:72:f4:18:da:61:60:52:b4:d6:d0:19:
                    a8:9f:9b:80:79:fb:32:38:5d:b5:1b:54:e1:7d:21:
                    77:0c:1e:7f:49:24:2d:29:2f:38:98:71:52:47:19:
                    74:bf:35:70:d6:6f:9a:85:19:ef:75:5c:67:8f:3b:
                    68:e1:6f:4f:db:57:e4:ef:fd:ab:4a:6a:b0:d1:14:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:77:42:0C:28:5C:14:EB:0D:26:D3:21:B0:6D:65:99:C2:04:BF:5D
            X509v3 Authority Key Identifier:
                keyid:4D:C2:28:21:86:B6:22:1A:7A:52:57:5C:E0:05:F2:B4:23:54:E4:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/4DC2282186B6221A7A52575CE005F2B42354E4A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4DC2282186B6221A7A52575CE005F2B42354E4A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/3130332e33362e37302e302f32342d3234203d3e20313530323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:e7:8d:ce:2b:a3:11:b3:cf:85:15:59:c4:86:2e:43:74:
         46:0a:88:0c:d4:97:74:0d:5c:f6:e4:ee:49:14:db:c2:cb:b7:
         99:ec:d4:39:96:9b:7f:2c:c8:ba:e5:27:07:ad:8c:92:6c:7e:
         e6:e4:e4:b5:9e:85:3b:69:36:35:15:4a:e0:b0:ed:36:96:ef:
         60:bc:95:2d:c3:02:a9:79:9d:b6:c1:87:61:fe:e8:83:20:44:
         1c:fa:bb:98:9e:87:6d:65:c5:53:28:62:93:56:f4:05:b7:4d:
         0f:ae:87:d6:32:54:c0:f3:aa:17:d6:ad:bb:b4:6a:e3:1c:b3:
         df:60:3b:ae:ca:04:84:7a:4c:b2:b3:7c:2f:8d:d4:59:b2:21:
         f6:32:7a:fb:3a:8f:4b:b0:47:84:a2:de:43:52:40:c7:78:8e:
         df:fd:eb:2c:e5:2a:d1:0d:a7:d7:d3:69:20:a4:bf:5e:76:5a:
         3e:0f:c3:9b:bf:a5:2f:1f:fc:43:cb:3f:7a:77:f1:18:62:f0:
         58:62:27:de:b6:bb:f9:71:94:f8:9d:64:eb:de:d7:b4:c7:ee:
         eb:23:31:b0:0d:b4:8b:8e:e7:0b:47:46:38:fb:3d:65:d4:b4:
         e1:a5:b5:61:a9:a7:5c:a0:e8:38:a6:b5:89:17:b7:8b:81:df:
         5a:ec:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:40 2026 by rpki-client