Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa
File:                     3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (raw, json)
Hash identifier:          4MzusLkn8wvWUBvFiEkops16kBYmlHHlayjI7RCIrok=
Subject key identifier:   8A:5D:D3:74:D9:0F:7F:D2:33:E0:2A:FC:F2:4C:63:F9:9A:3B:1B:80
Certificate issuer:       /CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
Certificate serial:       044AF953742FD10150FC259C09F43989D07D6ED8
Authority key identifier: 70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa
Signing time:             Sun 03 May 2026 03:03:16 +0000
ROA not before:           Sun 03 May 2026 02:58:16 +0000
ROA not after:            Sun 02 May 2027 03:03:16 +0000
asID:                     142382
IP address blocks:        103.172.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl
                          rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:4a:f9:53:74:2f:d1:01:50:fc:25:9c:09:f4:39:89:d0:7d:6e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619
        Validity
            Not Before: May  3 02:58:16 2026 GMT
            Not After : May  2 03:03:16 2027 GMT
        Subject: CN=8A5DD374D90F7FD233E02AFCF24C63F99A3B1B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fa:97:cf:9f:c0:e4:c2:bc:cd:84:e2:32:0f:
                    21:b2:9f:b5:fd:ed:66:8a:94:0a:bb:e4:0b:50:46:
                    ac:29:7c:90:72:a4:dd:dd:c3:6c:59:ec:a8:d0:52:
                    05:7d:c2:56:26:09:7e:a6:42:f0:e9:d6:d9:03:07:
                    e9:68:25:ee:4e:bd:6f:7c:ce:c6:86:a9:2d:24:11:
                    50:6d:4d:9f:37:d5:a2:db:cd:0a:40:26:d0:bc:6f:
                    89:a3:09:41:fb:dd:e8:75:0e:63:86:8f:f0:92:ad:
                    a7:a3:0b:df:fc:56:85:e3:e3:b5:f8:12:20:92:6d:
                    a5:c6:52:e7:12:0e:f9:02:3f:b0:2e:b3:87:dc:a8:
                    09:af:c7:d9:16:2f:74:80:45:77:f5:4d:ab:31:02:
                    88:d7:14:84:18:52:bc:ba:a5:04:cb:84:ed:9a:4e:
                    4a:5d:6f:f6:59:4c:5e:a6:15:b0:42:c0:0f:30:8a:
                    72:eb:19:57:51:e2:0b:bf:43:58:6b:1c:73:b0:a9:
                    a5:83:60:c8:f4:4a:c0:56:22:f4:b8:b3:39:73:33:
                    a5:1e:6e:bd:b0:d7:d6:66:d6:0d:2e:6b:f0:f2:2a:
                    b5:29:ff:49:ab:b7:c6:58:b3:4b:a8:22:3b:c4:fb:
                    07:a8:c3:13:9e:3f:88:2e:aa:d9:78:e5:1e:3e:81:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5D:D3:74:D9:0F:7F:D2:33:E0:2A:FC:F2:4C:63:F9:9A:3B:1B:80
            X509v3 Authority Key Identifier:
                keyid:70:D3:B5:85:49:EF:2C:A4:AB:0F:91:BC:00:33:CB:4D:04:EA:86:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70D3B58549EF2CA4AB0F91BC0033CB4D04EA8619.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:94:5e:08:f9:18:eb:31:82:f2:32:e8:a2:72:a7:8b:07:7a:
         0e:58:e8:f4:71:c1:50:0c:2a:35:70:e7:70:cc:df:1c:45:69:
         c8:ca:3c:c5:bb:21:24:5f:67:34:85:0f:af:08:2d:a9:b4:eb:
         f6:be:c7:b8:ea:84:47:35:95:3e:3a:f5:38:26:4f:3d:d1:c9:
         1c:06:43:59:50:e6:9b:ba:b3:1d:65:ba:60:bc:c2:f6:cb:a8:
         d5:58:66:38:2e:5d:ed:c5:9c:cd:03:08:26:a8:33:bd:b4:a7:
         11:50:65:bd:58:db:cd:c5:a5:70:22:44:84:d4:af:a1:10:d8:
         0f:bd:cf:d6:98:a0:15:e2:9e:f3:e4:3a:a7:56:66:31:e6:2a:
         a2:eb:bf:f9:1b:a8:c4:95:69:7e:ad:2e:14:0e:1b:8a:f8:37:
         bd:58:0e:5d:30:6f:b9:fe:9c:09:0e:cf:5a:bd:f8:b7:36:90:
         0c:ec:63:8c:fb:4a:89:6d:ea:6d:a9:82:a0:f2:2b:88:57:f1:
         ae:d1:5d:98:d9:08:39:c3:d8:5f:e6:97:b9:f9:2c:71:56:87:
         ac:8c:5b:c2:6f:36:ad:fb:e9:f1:11:0d:a2:e8:3e:57:86:68:
         b2:68:27:66:b1:77:ad:d0:3d:93:16:6b:8d:8e:80:6c:25:30:
         18:0b:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:22 2026 by rpki-client