Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
File:                     3130332e31302e3137302e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          NXLcQ+blDb5dMf5SDKTtsVDU3AWQ+fRs2QfS3XROXYw=
Subject key identifier:   42:C1:1C:93:3C:FC:73:AB:F7:BA:D4:D7:9F:78:E6:3E:70:CB:03:0B
Certificate issuer:       /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
Certificate serial:       2FFC57F19D1EC09B4325D2A2DE80E14B832B701A
Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa
Signing time:             Sun 03 May 2026 03:06:44 +0000
ROA not before:           Sun 03 May 2026 03:01:44 +0000
ROA not after:            Sun 02 May 2027 03:06:44 +0000
asID:                     56255
IP address blocks:        103.10.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl
                          rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:57:f1:9d:1e:c0:9b:43:25:d2:a2:de:80:e1:4b:83:2b:70:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
        Validity
            Not Before: May  3 03:01:44 2026 GMT
            Not After : May  2 03:06:44 2027 GMT
        Subject: CN=42C11C933CFC73ABF7BAD4D79F78E63E70CB030B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:a4:f1:21:c2:57:05:39:dd:d8:dd:fe:e8:
                    ea:2c:6a:b5:2b:7c:73:3e:09:09:38:63:e7:8c:e3:
                    ca:fe:78:a0:92:26:29:31:62:54:5f:75:d8:ca:4e:
                    47:6a:99:44:b7:e2:f4:53:39:03:74:03:8e:1e:6a:
                    3b:5e:86:82:eb:99:1e:44:dd:c8:ea:c6:62:19:36:
                    e7:cb:99:68:72:b3:2e:da:a5:e5:2e:e8:9d:fb:c5:
                    bd:f8:f9:f1:f7:fc:eb:d6:cb:e7:47:a6:6c:c1:69:
                    f5:ce:c1:6f:aa:65:b4:4d:38:0f:2e:e6:19:20:61:
                    d6:08:50:e1:a4:65:85:40:b4:f4:ea:11:1d:f7:c4:
                    b0:15:d1:a9:11:10:fe:2a:71:0b:aa:b2:03:b6:f7:
                    6e:ff:21:d3:a0:e6:65:13:94:57:25:49:13:31:18:
                    82:f2:3f:44:09:44:92:15:b0:00:65:83:e3:ec:6b:
                    13:8e:02:db:84:ee:71:ed:76:7b:6b:50:45:f2:ae:
                    4d:b0:89:4e:04:76:e9:f4:e1:82:57:50:11:5a:bb:
                    15:45:92:b8:77:f0:da:84:43:55:a6:9a:fb:d8:2a:
                    99:e9:f2:09:da:17:74:a1:ed:20:12:c2:eb:95:16:
                    39:74:10:fe:e9:8b:14:a8:67:30:91:36:ef:0d:14:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:1C:93:3C:FC:73:AB:F7:BA:D4:D7:9F:78:E6:3E:70:CB:03:0B
            X509v3 Authority Key Identifier:
                keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137302e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:12:a5:61:d0:10:7a:08:eb:53:cd:a7:de:5e:a9:c9:a4:
         08:48:1f:bf:0f:96:b3:e1:7a:6e:a0:f3:db:e5:14:e1:fe:14:
         be:d4:b3:fa:53:cb:9f:0b:2d:2d:c6:2a:63:36:ee:81:17:3c:
         53:97:ad:f9:8c:4c:45:40:63:44:1c:72:ad:28:fd:48:df:ab:
         0c:64:96:a4:cb:e0:5c:b3:24:15:38:e6:cf:b1:eb:1e:e5:5e:
         9c:3e:27:83:1c:de:f8:7a:b9:0a:74:4d:b9:52:bb:9a:e2:23:
         64:27:05:93:c2:02:98:a9:ef:a1:23:8b:65:72:18:e2:f2:9b:
         72:74:a0:71:72:82:a4:d7:3b:7d:fb:37:96:f8:40:98:16:b2:
         dd:3e:51:2e:ef:86:55:f4:2a:f2:bc:99:2e:35:43:8f:8a:bb:
         75:28:f1:3c:52:bc:8a:bc:3b:49:e8:0b:69:ae:1c:72:5a:75:
         79:dd:78:1c:0c:ea:ef:af:9c:d2:04:71:47:ad:b6:ab:b0:5a:
         36:04:4c:77:5b:89:71:cc:e8:3e:39:24:c7:55:3f:f1:f3:10:
         36:04:a9:40:48:3e:d0:17:2a:4e:22:02:b2:88:0c:f7:70:c7:
         6a:11:1c:3e:8b:c4:e6:71:a7:98:9e:f1:52:64:0e:2c:1e:98:
         1f:89:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:58 2026 by rpki-client