Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa
File:                     3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (raw, json)
Hash identifier:          FlW8AQthNAZk7wdn9A/ucMYJBX7Z+jCvkR413ayO2Ss=
Subject key identifier:   78:57:D8:30:D1:86:9D:C8:C8:E5:D1:09:84:AC:06:12:44:58:9A:AE
Certificate issuer:       /CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A
Certificate serial:       73092EC0291CFDCB62BAD285F6F89D3136CBCC8A
Authority key identifier: CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa
Signing time:             Sun 03 May 2026 03:11:04 +0000
ROA not before:           Sun 03 May 2026 03:06:04 +0000
ROA not after:            Sun 02 May 2027 03:11:04 +0000
asID:                     150210
IP address blocks:        103.10.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl
                          rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:09:2e:c0:29:1c:fd:cb:62:ba:d2:85:f6:f8:9d:31:36:cb:cc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF89794EBA26CE0126FCB172A8D35407DD0DCF4A
        Validity
            Not Before: May  3 03:06:04 2026 GMT
            Not After : May  2 03:11:04 2027 GMT
        Subject: CN=7857D830D1869DC8C8E5D10984AC061244589AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:ee:0b:ef:8a:3f:43:88:4a:68:30:af:46:
                    f8:cf:31:91:45:59:ac:98:d1:a6:0b:04:ef:f9:51:
                    0b:29:eb:29:00:b4:8b:ce:e9:20:2a:8d:3e:56:3a:
                    c6:ff:9b:0d:13:ad:57:18:8e:75:ad:d4:3e:94:1f:
                    2f:e0:b6:a0:80:c3:2e:ea:b7:52:2e:3f:14:e2:e1:
                    12:9a:30:93:67:44:30:9c:fe:36:5f:4e:82:5c:15:
                    1b:53:25:c8:60:0b:8c:1c:65:e1:97:73:38:91:c6:
                    c2:8d:11:f5:70:19:a1:82:d9:1a:4a:da:c3:20:65:
                    c5:ab:6a:27:fe:a4:ba:38:b2:8e:61:21:3f:f7:c2:
                    82:25:df:3b:e8:94:4b:53:f9:58:0b:b0:5e:c9:cc:
                    17:77:a6:f1:2d:e7:3b:c6:86:d6:d2:2b:c4:dd:e4:
                    ca:f6:e5:d2:e8:f8:bc:91:eb:f4:d0:59:df:47:44:
                    b5:e2:57:37:8a:0a:ef:cb:04:ba:85:2b:04:af:93:
                    f6:ec:c7:52:30:af:b9:62:f3:3c:8e:32:fc:64:dd:
                    65:2e:14:3c:e8:71:20:e1:6b:0a:bf:29:c4:cf:b0:
                    2e:19:35:59:8c:24:c3:07:88:77:01:1b:c8:24:70:
                    88:4e:35:ce:05:1d:b9:1f:15:a2:ea:84:f5:67:d3:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:D8:30:D1:86:9D:C8:C8:E5:D1:09:84:AC:06:12:44:58:9A:AE
            X509v3 Authority Key Identifier:
                keyid:CF:89:79:4E:BA:26:CE:01:26:FC:B1:72:A8:D3:54:07:DD:0D:CF:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CF89794EBA26CE0126FCB172A8D35407DD0DCF4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37312e302f32342d3234203d3e20313530323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:84:c0:97:4c:1c:c4:63:a3:66:13:30:94:3f:05:0b:ff:51:
         33:66:51:38:22:18:10:d0:df:14:cd:17:e3:09:9a:13:07:4a:
         a6:83:69:10:f6:36:d6:3d:20:38:6f:85:9e:fc:22:2a:df:c0:
         8f:22:9e:41:1b:97:98:9b:7e:c5:c4:df:dd:7c:e7:d7:ad:e0:
         b8:66:a3:4f:b1:1c:b5:07:1e:c7:a2:0f:8b:ae:91:02:f9:46:
         6c:37:89:0e:d5:70:c2:f1:a1:fe:28:6f:18:37:0d:2a:a5:8d:
         76:44:1e:b7:05:8e:ae:85:66:92:4f:e9:19:d3:0c:22:0a:48:
         1f:38:5e:08:ec:1d:97:53:c1:6f:ce:d2:77:11:7a:34:6d:39:
         87:35:89:11:e1:41:ab:1d:d6:8a:f0:bb:c0:e2:af:b3:f8:4d:
         9b:6c:b3:84:fe:3c:1e:a8:7b:e5:18:9e:3a:59:a0:c4:c9:b4:
         6f:ed:9b:95:6a:3e:28:21:1b:e5:2e:bc:18:73:85:3a:7a:7b:
         95:29:16:bc:23:48:e1:43:9c:70:f9:82:c4:da:79:95:3b:ce:
         ea:c4:dc:d2:d6:ae:40:19:e4:f8:64:46:34:45:74:a9:ab:4d:
         77:ee:ed:58:e2:1c:1e:2c:2b:52:f6:65:57:87:87:79:1e:45:
         1c:b1:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:03 2026 by rpki-client