Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e31302e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          xrvvTuKeO8SacVcwiQahe3cKGxd7wl87Mxfi5VJfmZk=
Subject key identifier:   A7:1E:DB:72:6F:4B:66:32:11:2E:2E:6B:56:53:B7:2B:0E:AE:A0:13
Certificate issuer:       /CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
Certificate serial:       26071191D8DC70E5A92682F6F08EBC895D64337D
Authority key identifier: FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
Signing time:             Sun 03 May 2026 03:13:54 +0000
ROA not before:           Sun 03 May 2026 03:08:54 +0000
ROA not after:            Sun 02 May 2027 03:13:54 +0000
asID:                     45722
IP address blocks:        103.94.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl
                          rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:07:11:91:d8:dc:70:e5:a9:26:82:f6:f0:8e:bc:89:5d:64:33:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0
        Validity
            Not Before: May  3 03:08:54 2026 GMT
            Not After : May  2 03:13:54 2027 GMT
        Subject: CN=A71EDB726F4B6632112E2E6B5653B72B0EAEA013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:c5:5b:e5:41:87:b7:e9:a7:6d:35:b0:56:
                    95:0a:ce:7e:ae:da:b9:df:32:1c:de:68:b3:e9:64:
                    8e:3e:19:a6:2f:4f:d2:6b:16:a9:23:08:3b:f4:51:
                    d9:f7:e9:90:10:b9:41:e0:19:91:05:01:6a:e0:fd:
                    0c:c7:20:83:62:61:54:e9:2d:09:bc:31:da:52:e0:
                    04:16:e1:ac:08:64:71:fd:9b:1b:5e:cf:ab:10:a7:
                    bc:a6:5a:bd:a1:df:0e:ac:c3:66:96:56:eb:d4:e6:
                    34:8f:81:62:7e:1d:88:dc:c2:cc:ec:8e:64:47:45:
                    e6:c9:c2:33:d2:6d:dd:85:10:df:71:68:70:21:b1:
                    0a:8c:6d:74:38:83:56:7c:bd:d7:94:ec:6c:04:24:
                    32:c4:71:5b:d6:7d:3a:58:45:b7:bf:df:97:51:7e:
                    32:6c:b0:e4:e1:25:f3:e6:05:e9:93:e1:0c:2b:07:
                    33:d5:27:d3:e7:de:b7:98:4b:66:fe:d7:8a:38:e4:
                    5b:59:dd:28:b7:7e:da:6f:e7:e2:05:9d:22:ee:52:
                    0f:cf:8e:eb:69:30:45:1a:47:c9:74:7a:7e:2e:3a:
                    76:b4:de:ac:b7:2a:8d:44:73:c5:70:e5:ca:64:d2:
                    b1:6a:69:e3:dc:e7:d2:7f:80:96:84:a7:00:8a:20:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1E:DB:72:6F:4B:66:32:11:2E:2E:6B:56:53:B7:2B:0E:AE:A0:13
            X509v3 Authority Key Identifier:
                keyid:FC:7B:C0:6A:FF:64:0D:4C:BB:0F:95:A3:77:1E:C6:23:4F:CF:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FC7BC06AFF640D4CBB0F95A3771EC6234FCF3ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:7a:ed:de:8b:51:92:c5:f4:49:d4:08:f7:f9:f4:61:b3:
         07:65:0d:9d:cb:97:b0:59:64:3f:15:2c:d2:76:b9:4f:d5:95:
         ed:2d:b7:ca:60:55:bd:f6:01:5e:58:97:e0:5f:18:6a:ef:ff:
         8e:f8:f2:06:5d:c6:b1:3e:82:c3:86:e8:f6:47:bc:7b:a4:3a:
         2c:21:91:c7:d2:af:03:8e:1b:ae:49:17:df:6a:db:3c:5a:b6:
         e7:ff:4f:8c:af:dd:73:de:99:56:5d:40:4f:3c:d3:ca:e8:42:
         b2:46:21:4e:7b:3b:4d:83:25:44:21:b4:e4:44:b8:f5:09:54:
         36:f9:00:96:17:be:6b:00:90:dc:8d:88:db:e4:0f:2a:ed:84:
         4d:d3:08:32:6b:06:89:30:1e:d3:ad:54:b0:16:00:52:3f:f3:
         80:de:d9:53:5a:0a:05:ba:cc:b2:ee:42:7f:3c:c3:c0:dc:f2:
         3d:0f:09:c5:45:a2:49:b7:a5:c1:8e:36:0f:f8:07:56:00:27:
         91:3a:81:8c:30:15:a7:31:ab:b3:95:34:40:0b:22:d9:66:4b:
         8a:59:d8:1b:eb:db:7a:d2:e6:57:e6:b0:17:70:63:97:0e:83:
         36:f8:61:ed:fe:96:91:ff:14:48:0b:95:ea:db:75:fc:15:20:
         98:cc:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:35 2026 by rpki-client