Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
File:                     3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (raw, json)
Hash identifier:          aoz9FF3zaBxJcTS/CNaTKvg2hS72RZ/WIHtE0qTjGI0=
Subject key identifier:   27:1C:27:C4:D1:C0:7B:96:A6:D2:79:EF:A8:6B:88:C6:3C:6A:8F:68
Certificate issuer:       /CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
Certificate serial:       2E3F1BA21DFFC71CDBD27E96A6BE8C018C298AFD
Authority key identifier: A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa
Signing time:             Sun 03 May 2026 03:07:42 +0000
ROA not before:           Sun 03 May 2026 03:02:42 +0000
ROA not after:            Sun 02 May 2027 03:07:42 +0000
asID:                     142387
IP address blocks:        103.172.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl
                          rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3f:1b:a2:1d:ff:c7:1c:db:d2:7e:96:a6:be:8c:01:8c:29:8a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E11F793F01828AF09B99BCD923D78E53C244F8
        Validity
            Not Before: May  3 03:02:42 2026 GMT
            Not After : May  2 03:07:42 2027 GMT
        Subject: CN=271C27C4D1C07B96A6D279EFA86B88C63C6A8F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:f4:bd:f9:bd:61:f3:0c:e9:89:5e:ab:8c:
                    50:92:66:8d:11:5c:5a:8f:5a:2d:4d:c9:77:87:44:
                    bc:ad:68:32:d9:1b:f5:9a:8a:23:c5:db:0e:0b:19:
                    14:2f:73:18:04:f3:c8:46:e6:2f:cb:f2:d8:dc:81:
                    0c:ca:93:dc:29:38:d3:be:8d:b3:c5:b8:d8:f6:a0:
                    92:0f:2a:7f:d6:e1:e8:ad:0d:67:00:8b:44:71:76:
                    ee:b7:66:64:fb:87:2a:e6:4c:94:78:a1:22:51:cf:
                    5f:69:d5:d5:3c:18:15:ab:68:4c:94:1e:e4:ac:8c:
                    c0:a7:86:d7:68:d7:4d:3a:5e:df:64:91:8e:75:8c:
                    80:7e:40:51:bd:48:81:c4:30:46:4c:82:7f:fe:a0:
                    8b:3a:0b:6f:0e:20:5f:84:60:87:4e:c6:b7:d8:55:
                    ac:1e:8f:65:75:d7:5a:7a:1e:b9:68:2d:5b:ef:b5:
                    47:b0:6d:2d:0a:76:b8:44:a5:2e:fa:78:f4:80:61:
                    fa:0c:61:b3:f4:be:f3:61:15:57:2d:09:14:eb:a0:
                    7a:ee:d3:84:ea:34:d9:7b:67:76:02:86:d9:57:b4:
                    a7:31:b5:4b:df:26:8d:3d:8b:00:02:f9:2e:32:77:
                    3e:3f:16:f2:eb:e3:c3:12:aa:8f:68:a3:4d:9b:03:
                    b1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1C:27:C4:D1:C0:7B:96:A6:D2:79:EF:A8:6B:88:C6:3C:6A:8F:68
            X509v3 Authority Key Identifier:
                keyid:A1:E1:1F:79:3F:01:82:8A:F0:9B:99:BC:D9:23:D7:8E:53:C2:44:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/A1E11F793F01828AF09B99BCD923D78E53C244F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A1E11F793F01828AF09B99BCD923D78E53C244F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:81:2b:ee:1c:7e:b5:be:c3:ac:e0:42:cd:ce:c1:7b:b0:
         3a:e0:ff:5b:66:6c:62:b0:f2:db:2a:58:65:44:fb:fc:15:a8:
         c4:72:d0:75:5a:42:e9:80:ed:b6:57:01:db:c0:c8:b9:13:78:
         f4:ca:0f:8f:7a:87:47:be:87:a0:48:9e:fe:14:a4:90:ff:01:
         92:c7:c1:27:7f:71:4a:a6:03:3c:c8:3c:99:67:62:7e:18:9d:
         a4:44:5e:8b:12:6e:cc:25:fc:a6:a1:45:71:7a:0b:8c:1b:49:
         9d:41:23:90:5b:d7:df:eb:ea:2e:90:bd:43:76:dd:dc:07:a1:
         46:6e:1a:df:5c:33:21:f7:ff:9a:12:08:83:0d:a2:5f:49:cc:
         a7:44:f1:14:51:03:d0:95:0e:de:9e:5b:80:a0:55:b7:84:a8:
         79:be:06:1d:cd:21:7e:fd:61:4a:b4:d9:df:bf:d8:5f:60:24:
         31:9e:ef:34:dd:4e:e1:87:7e:a6:ca:82:64:6a:20:c8:0e:29:
         f1:88:f0:ec:2a:3b:e9:67:35:a3:60:aa:2a:3e:d6:9a:1f:39:
         03:06:b5:06:49:9f:3f:92:c2:88:aa:bd:95:6c:54:28:f7:cb:
         b9:c3:06:79:58:2d:06:26:3c:e1:dd:68:7b:6a:c8:93:db:61:
         dd:cc:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:09 2026 by rpki-client