Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa
File:                     3130332e31302e3137312e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          xliXiEUEZwSaL+L9KbxePpEFEAbRpcaYYQQzzGHYr2w=
Subject key identifier:   09:43:23:89:24:33:F6:43:25:A8:24:0B:0E:83:6F:81:63:B7:61:7B
Certificate issuer:       /CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
Certificate serial:       5C1FF751313CB20321CB5B5830778B39D49C7A58
Authority key identifier: 77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa
Signing time:             Sun 03 May 2026 03:06:44 +0000
ROA not before:           Sun 03 May 2026 03:01:44 +0000
ROA not after:            Sun 02 May 2027 03:06:44 +0000
asID:                     56255
IP address blocks:        103.10.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl
                          rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1f:f7:51:31:3c:b2:03:21:cb:5b:58:30:77:8b:39:d4:9c:7a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7728EB07F9E7F61C8C04F8EE4FB652D01AC88914
        Validity
            Not Before: May  3 03:01:44 2026 GMT
            Not After : May  2 03:06:44 2027 GMT
        Subject: CN=094323892433F64325A8240B0E836F8163B7617B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:36:f9:84:11:f7:e4:40:8b:3a:98:a8:0a:
                    15:e3:ac:86:10:cc:3c:d4:12:fd:2e:79:ed:e6:52:
                    18:ea:60:46:b7:3d:dc:2d:60:ba:fb:d5:48:15:d4:
                    96:60:ba:1a:95:01:62:0a:ba:b5:65:fe:31:e2:c7:
                    01:82:ab:fe:b2:20:07:ec:8f:92:a4:d9:05:1d:08:
                    94:c6:a2:e4:48:02:03:ea:77:84:84:49:1c:5c:7c:
                    a4:c0:4b:fc:a3:3d:f8:08:10:06:44:6c:b3:8f:01:
                    db:1b:5d:a7:aa:dd:06:03:0b:3a:1d:2e:c7:73:09:
                    43:8b:c0:ea:95:f2:c8:f2:e9:da:00:2a:8d:35:70:
                    7a:62:de:0d:b8:7d:dd:7a:a5:be:6e:93:24:84:aa:
                    ec:03:0c:27:31:8b:2d:0e:6e:6a:8f:35:59:63:d8:
                    bc:3d:7e:e0:77:8c:0c:99:51:e8:a4:85:dc:74:d3:
                    13:e4:14:cd:90:bb:f4:52:aa:ca:88:3d:94:9c:d3:
                    cc:1a:70:2c:c3:db:28:ef:de:48:96:09:ff:55:b8:
                    41:ac:88:d7:e6:a1:0e:f3:96:11:cb:54:9b:73:a2:
                    3d:98:d5:4b:74:cd:35:c7:dc:23:fc:99:4a:e9:9a:
                    c0:af:0f:3f:ad:7d:15:12:9e:99:0d:d3:0b:ab:ab:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:23:89:24:33:F6:43:25:A8:24:0B:0E:83:6F:81:63:B7:61:7B
            X509v3 Authority Key Identifier:
                keyid:77:28:EB:07:F9:E7:F6:1C:8C:04:F8:EE:4F:B6:52:D0:1A:C8:89:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7728EB07F9E7F61C8C04F8EE4FB652D01AC88914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca631d77-f805-439c-98f4-b0da60fe8dd1/0/3130332e31302e3137312e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e2:82:db:55:35:28:c2:7f:40:6a:d7:35:71:bc:b6:09:28:
         ae:83:98:fe:e6:86:1a:ba:ca:b5:5b:3c:ba:8c:95:e4:f3:b9:
         74:61:78:ac:a5:19:72:86:34:54:94:7b:62:26:60:5d:cc:bf:
         15:97:74:45:17:e1:f2:5a:39:70:e9:95:e2:45:a6:84:5e:40:
         bd:7d:dd:e9:e4:e7:68:6e:67:1b:a5:8e:e2:24:99:23:d8:3a:
         10:dc:61:4f:66:5c:97:6f:12:7f:bc:0f:ca:28:1e:ef:6a:5d:
         d0:74:b3:a6:20:f6:91:41:d2:13:49:76:56:ea:ba:d2:1a:9e:
         ce:14:41:45:1e:59:f7:ab:cc:49:e3:32:d2:e3:1e:eb:10:15:
         5e:06:b7:da:10:91:07:9b:e7:d9:cb:ba:cc:d4:0b:da:cf:87:
         22:ff:e8:e9:c0:7a:5e:ad:d5:c3:14:1a:4f:77:27:ee:c5:fa:
         f6:a6:fc:53:44:c3:d6:88:83:a1:54:fa:14:1d:cb:59:be:ed:
         1b:78:de:da:aa:74:02:ac:0d:f7:65:14:68:e1:1c:8d:d8:99:
         2c:3f:b1:dd:11:4d:ab:60:b3:c5:72:6b:5c:42:d8:4a:cc:4a:
         24:4d:7d:aa:58:d9:76:74:52:90:0a:d9:23:09:5e:25:91:52:
         48:29:90:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:11 2026 by rpki-client