Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137302e302f32342d3234203d3e203536323631.roa
File:                     3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (raw, json)
Hash identifier:          O1jacwkaM82L67sDrz7lXelPyRl9Rz1j5J3jiVwgpPw=
Subject key identifier:   80:40:73:88:45:2D:4D:E2:66:B3:D9:F4:6C:00:E1:18:D4:6D:DA:A9
Certificate issuer:       /CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D
Certificate serial:       112A10CB07EEB1A651D93A1305B6D0CEBF91418D
Authority key identifier: E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137302e302f32342d3234203d3e203536323631.roa
Signing time:             Sun 03 May 2026 03:13:10 +0000
ROA not before:           Sun 03 May 2026 03:08:10 +0000
ROA not after:            Sun 02 May 2027 03:13:10 +0000
asID:                     56261
IP address blocks:        103.29.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl
                          rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:10:cb:07:ee:b1:a6:51:d9:3a:13:05:b6:d0:ce:bf:91:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4FD11A334BDCA34C2EAB964DCA226B6942B929D
        Validity
            Not Before: May  3 03:08:10 2026 GMT
            Not After : May  2 03:13:10 2027 GMT
        Subject: CN=80407388452D4DE266B3D9F46C00E118D46DDAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1c:ce:ae:da:5f:1c:4d:86:6b:c8:a0:f0:1c:
                    1a:35:43:f8:69:f1:bc:10:21:4a:01:c8:b5:1b:f7:
                    47:cb:55:81:91:fc:3c:00:86:75:57:c4:e2:2e:7f:
                    8b:be:7c:81:e0:82:5f:ed:2b:83:fc:c6:16:7d:22:
                    4e:3e:61:55:26:7d:f1:ed:c2:eb:e5:8f:dc:6e:e4:
                    c9:4c:97:01:51:19:09:10:0b:42:9a:6a:b3:ba:cb:
                    09:15:3a:88:0d:39:7b:cc:fb:7f:c7:ad:0d:a3:a8:
                    d8:af:33:03:c5:28:43:94:16:42:ee:cd:fa:91:64:
                    05:8c:a2:5d:d9:c9:ce:30:bb:7c:ac:03:74:35:a3:
                    ba:87:a2:2e:2e:cf:f9:09:d4:71:3a:ed:bb:b9:0a:
                    8f:95:1e:64:dc:cd:b4:2d:62:4b:43:d7:0c:06:db:
                    1d:24:84:b1:6f:ab:83:b2:0c:65:9c:24:5e:92:7f:
                    e3:b7:7c:3f:25:a1:4b:b1:d5:da:d3:f3:da:ed:64:
                    e5:e9:50:8d:7c:50:06:05:9e:69:4f:8a:3b:06:a2:
                    d3:90:21:83:9e:95:5f:dd:23:c3:cd:14:7f:f1:4a:
                    b0:02:14:8a:a3:5d:cf:4c:9e:42:19:fb:73:fc:4e:
                    e5:15:99:40:cd:91:c3:77:9d:2b:84:57:1c:fd:1f:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:73:88:45:2D:4D:E2:66:B3:D9:F4:6C:00:E1:18:D4:6D:DA:A9
            X509v3 Authority Key Identifier:
                keyid:E4:FD:11:A3:34:BD:CA:34:C2:EA:B9:64:DC:A2:26:B6:94:2B:92:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E4FD11A334BDCA34C2EAB964DCA226B6942B929D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/3130332e32392e3137302e302f32342d3234203d3e203536323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:fa:2f:16:76:ec:ff:24:30:f7:ea:99:75:90:40:8c:e6:9a:
         c0:21:54:3f:c9:af:07:c5:3d:df:41:64:1f:c4:ba:46:1b:5a:
         67:1b:29:c2:5f:27:a9:96:36:76:42:18:f0:c1:b7:68:f9:16:
         3a:63:70:76:f8:86:fa:cf:99:19:90:e3:99:d9:fc:0b:d1:48:
         6c:48:3c:2f:2b:02:a7:d6:f3:05:a8:6f:58:0f:0f:ac:07:f5:
         07:54:38:ae:46:dd:a0:e1:ea:33:1d:79:b6:9b:26:82:5a:76:
         4f:de:2c:c6:74:9e:8e:54:49:99:7b:83:03:11:f6:cb:be:84:
         23:69:08:f1:0e:0e:f3:bd:ae:2d:e9:42:d0:a0:28:cb:a2:e2:
         5f:9d:70:9b:aa:52:5f:41:09:13:04:a7:0d:62:4b:aa:c5:4d:
         1a:59:fc:63:3e:0f:bd:df:c6:85:27:62:a2:fb:bb:64:6d:61:
         4b:16:5e:87:9f:87:7b:10:9d:cb:af:b5:0d:0d:d4:15:4a:2a:
         6b:5d:0f:d9:1c:8d:73:fd:62:d6:cc:3f:28:fa:14:e6:b1:4a:
         4e:27:0f:42:f0:89:5c:2a:c9:a4:c3:67:3b:66:bd:f7:e9:9f:
         6a:7e:ef:6d:13:73:ea:d6:99:ca:8b:70:ea:b7:31:a4:6a:91:
         aa:be:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:13 2026 by rpki-client