Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
File:                     3130332e372e38342e302f32332d3234203d3e20313331363934.roa (raw, json)
Hash identifier:          zoQ/J/6Jm2OBRNguUNV6YFc5PoQWEqsjad+WhZYc2Y4=
Subject key identifier:   63:07:16:95:32:63:43:4F:B6:7F:FF:83:7F:FB:C0:AB:4D:A0:11:6A
Certificate issuer:       /CN=17742FC0C74368833EBF6E2F4739E40851DF22B3
Certificate serial:       5428B82277544ACA386EF2A43128F606AED20C5E
Authority key identifier: 17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa
Signing time:             Sun 03 May 2026 03:07:55 +0000
ROA not before:           Sun 03 May 2026 03:02:55 +0000
ROA not after:            Sun 02 May 2027 03:07:55 +0000
asID:                     131694
IP address blocks:        103.7.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl
                          rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:28:b8:22:77:54:4a:ca:38:6e:f2:a4:31:28:f6:06:ae:d2:0c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17742FC0C74368833EBF6E2F4739E40851DF22B3
        Validity
            Not Before: May  3 03:02:55 2026 GMT
            Not After : May  2 03:07:55 2027 GMT
        Subject: CN=630716953263434FB67FFF837FFBC0AB4DA0116A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:1f:ec:b8:1a:d3:e2:07:20:f9:8e:2d:66:
                    74:12:20:ca:16:dc:ee:84:4a:68:2e:4b:41:f9:b6:
                    69:a6:52:42:a1:ce:22:8a:62:9d:48:5a:c8:3b:f4:
                    62:be:3e:d1:66:4f:39:49:8d:97:14:65:25:65:23:
                    c4:38:47:de:eb:40:1d:66:8a:ef:41:16:19:84:cb:
                    76:6d:44:53:f9:fa:8f:b2:67:f7:c2:95:2a:fc:05:
                    4a:b2:38:72:cb:26:8d:42:80:ca:fb:d3:a2:f9:e9:
                    a0:ea:2d:00:72:dc:4c:42:e2:49:d4:95:82:e3:59:
                    61:6b:c8:a2:bb:17:ab:2f:d2:d1:39:50:e0:1d:5d:
                    18:60:fc:56:ed:dd:66:17:ff:0f:bd:63:d6:ad:bf:
                    11:52:49:48:cc:99:d7:2b:c3:69:5f:74:42:3d:5f:
                    f5:56:3f:ff:24:da:86:11:6b:f6:a1:97:b5:17:76:
                    a6:85:57:51:f9:67:83:d1:a8:42:e2:43:cc:47:4f:
                    f7:e1:28:98:9b:61:fe:f4:52:24:f7:8e:d1:f1:ee:
                    a0:28:76:88:f4:12:bc:8d:7d:9c:a9:60:3c:07:48:
                    4b:e3:08:a6:e1:5e:d8:7d:ae:ec:c0:a3:5d:f6:7e:
                    00:4a:48:d7:6e:27:27:c7:a3:9d:5c:5f:47:9c:56:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:07:16:95:32:63:43:4F:B6:7F:FF:83:7F:FB:C0:AB:4D:A0:11:6A
            X509v3 Authority Key Identifier:
                keyid:17:74:2F:C0:C7:43:68:83:3E:BF:6E:2F:47:39:E4:08:51:DF:22:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/17742FC0C74368833EBF6E2F4739E40851DF22B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/17742FC0C74368833EBF6E2F4739E40851DF22B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/3130332e372e38342e302f32332d3234203d3e20313331363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:97:46:d5:74:7d:49:88:17:0d:36:81:e8:56:6d:2b:a7:51:
         e7:7a:c1:8a:9f:14:0e:e4:30:e3:5e:ed:d4:b1:dd:03:9a:6c:
         b8:69:6d:56:1e:21:2b:cd:ca:4b:2f:d0:fc:9e:3f:cb:52:8e:
         91:21:22:38:1f:53:e2:eb:10:40:30:af:dc:82:45:f0:87:f1:
         82:22:01:8d:a2:23:db:a4:f8:67:bb:13:22:48:dc:57:16:df:
         82:4a:42:e2:32:28:2b:de:de:3f:c7:85:6b:d2:de:5b:d3:40:
         34:ab:98:38:8b:94:c0:6f:90:f6:b6:fd:42:02:9a:17:f1:ef:
         0c:38:e7:26:f2:b2:aa:9b:b9:3e:be:3f:5d:e1:44:22:38:77:
         83:d5:ae:4d:ad:e4:9e:05:24:5e:5d:de:aa:b7:93:df:4b:13:
         e2:10:e8:64:ce:b5:2a:78:56:22:d1:1a:de:28:80:8e:f0:47:
         e6:88:27:68:b7:d5:c6:b6:93:05:74:9a:57:d5:58:7c:71:dd:
         51:41:7a:ce:cb:e7:a2:80:6c:cd:42:a4:ad:a4:fa:be:1a:f8:
         a7:19:49:6b:a9:6c:fa:07:25:1a:9e:e0:c7:fe:c9:ba:23:bb:
         82:54:0a:1f:7b:79:74:87:67:92:c0:e8:8d:38:38:ea:a2:53:
         e2:f0:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:34 2026 by rpki-client