Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa
File:                     3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (raw, json)
Hash identifier:          g2AjzdAEtqq0A8I5lU8SFaDfey/4juluk8Yv9NeiwQM=
Subject key identifier:   78:96:08:D4:48:10:72:9D:BB:48:9F:01:73:45:8B:C5:49:CE:25:2F
Certificate issuer:       /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A
Certificate serial:       2291B28EEBDB38D29EB776124AAC8B0228E39C06
Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa
Signing time:             Sun 03 May 2026 03:11:04 +0000
ROA not before:           Sun 03 May 2026 03:06:04 +0000
ROA not after:            Sun 02 May 2027 03:11:04 +0000
asID:                     150210
IP address blocks:        103.10.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl
                          rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:91:b2:8e:eb:db:38:d2:9e:b7:76:12:4a:ac:8b:02:28:e3:9c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A
        Validity
            Not Before: May  3 03:06:04 2026 GMT
            Not After : May  2 03:11:04 2027 GMT
        Subject: CN=789608D44810729DBB489F0173458BC549CE252F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:51:9b:8e:9c:5a:ff:56:79:0b:de:3b:1d:
                    50:53:c9:c3:75:c7:62:4f:e6:34:18:18:b4:b2:11:
                    9d:21:52:2e:52:6e:ff:4c:6d:77:9b:61:dc:5a:61:
                    19:7e:35:e4:2a:d6:66:88:a2:5e:58:a6:00:0f:2c:
                    68:99:4d:3a:b4:04:45:b9:a2:a5:90:01:17:e2:98:
                    f7:7e:a9:b2:a9:65:0d:53:1c:7d:da:1b:56:56:a4:
                    51:56:81:dd:2a:60:82:b7:c7:ec:a5:bf:34:63:a1:
                    5b:0d:bd:df:65:99:9c:5d:14:e5:98:ea:74:c6:1f:
                    9e:48:0d:0e:0d:f0:88:9f:d3:c9:8a:d8:90:98:98:
                    1d:4d:3f:ac:41:76:33:fe:04:79:60:26:27:66:2b:
                    64:d1:18:fb:b5:12:7c:8f:a9:bb:3e:b8:14:cf:b9:
                    b8:dd:e2:a7:2a:9b:1c:c6:17:fe:9c:50:3d:a7:99:
                    4c:07:d9:58:61:59:b0:f8:97:6c:22:b0:d8:91:83:
                    91:1c:ac:5b:1f:eb:01:4e:83:2d:ae:ec:a3:a2:75:
                    70:c4:17:99:3e:6d:43:2c:0e:6f:48:3c:fe:73:fc:
                    25:0d:94:56:dc:7b:c6:f4:8d:98:84:45:05:85:b7:
                    9c:05:2a:49:60:61:23:9a:75:d4:67:c9:52:5f:f5:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:08:D4:48:10:72:9D:BB:48:9F:01:73:45:8B:C5:49:CE:25:2F
            X509v3 Authority Key Identifier:
                keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:35:bb:7a:2a:16:15:0d:0d:32:5e:b4:a3:17:41:f8:0e:
         43:5c:a2:e7:82:6f:71:7f:8d:38:06:01:12:3d:d3:b5:b2:7f:
         8d:e9:45:72:14:69:af:42:55:e5:98:32:54:c4:28:3e:47:b9:
         c5:f5:f9:5d:b0:7d:f9:93:a0:50:5d:b5:cf:87:9c:82:5e:6c:
         c1:41:f5:04:80:bf:85:70:1f:ab:73:01:d2:af:57:e8:12:87:
         30:8c:50:08:54:12:51:e1:8a:1a:fd:fc:2f:ac:c8:10:c2:5c:
         b7:3d:9d:1b:98:76:cf:e9:2d:9a:c8:86:cb:3b:28:74:31:9b:
         ad:bc:b9:0c:e9:e0:01:62:b2:6b:0f:f5:6b:81:c4:3f:7c:74:
         4a:79:a4:11:ed:f1:87:3c:82:c2:33:87:01:41:00:3b:0f:24:
         30:5e:32:08:93:4c:fe:81:3c:a1:e7:4e:93:25:bf:07:ca:e2:
         7f:f7:29:aa:5f:85:a3:b7:c4:12:c9:ac:60:f7:ca:9b:30:5c:
         e5:44:a3:32:c7:e0:0b:f1:9e:86:87:ef:a4:cc:39:72:b3:6a:
         5e:99:55:52:e3:4b:2c:b5:b4:33:05:3d:5b:6f:8c:cc:2b:eb:
         96:0f:53:12:29:3c:5e:e2:5a:aa:0a:ca:2b:21:5a:72:2e:9a:
         9c:f0:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:55 2026 by rpki-client