Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
File:                     3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          I2RP+h+ruVedIe2ZDABEWOHH2T2e3+KmQHhUPUy4u6I=
Subject key identifier:   DB:93:12:3A:9A:80:69:8A:87:57:73:20:F3:DD:8C:96:D0:54:0B:7A
Certificate issuer:       /CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
Certificate serial:       6C5489822832FC92852D5AFD654637DC9BDC960D
Authority key identifier: 79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
Signing time:             Sun 03 May 2026 03:14:29 +0000
ROA not before:           Sun 03 May 2026 03:09:29 +0000
ROA not after:            Sun 02 May 2027 03:14:29 +0000
asID:                     58821
IP address blocks:        103.172.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl
                          rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:54:89:82:28:32:fc:92:85:2d:5a:fd:65:46:37:dc:9b:dc:96:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79D7805EA3D3D55C21529C0E575D7BFF197F3772
        Validity
            Not Before: May  3 03:09:29 2026 GMT
            Not After : May  2 03:14:29 2027 GMT
        Subject: CN=DB93123A9A80698A87577320F3DD8C96D0540B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:15:e6:73:d7:17:ce:72:0a:e3:cd:d3:60:10:
                    54:9e:73:7c:21:13:87:42:98:b8:45:1e:80:6e:8a:
                    b0:3d:2b:30:c6:23:dd:2e:24:69:92:3e:21:68:df:
                    62:51:ea:5b:70:a0:73:c0:65:e2:00:44:53:98:9b:
                    0c:f1:86:9c:d3:25:b3:80:5c:4c:3c:36:78:52:ec:
                    ed:00:2c:78:ca:88:ef:7c:28:89:0d:1c:be:64:21:
                    7a:8e:9d:93:b1:72:c0:07:b4:38:99:2e:ed:d3:5e:
                    90:b1:d5:e2:d9:2c:07:be:da:01:a4:03:2f:75:ac:
                    49:42:c0:01:c6:f7:ca:2e:ff:28:2b:f0:1b:45:51:
                    f1:7c:04:c7:38:e6:d9:e5:fd:a6:c8:f9:b5:95:88:
                    d6:43:80:85:38:42:f1:71:c8:b2:aa:f5:08:c4:ef:
                    87:6c:e0:4c:89:96:c4:33:cf:5f:5f:83:0f:9b:2f:
                    b1:57:aa:2c:4c:b8:91:05:88:45:ea:6f:1f:67:ce:
                    d5:5b:5b:c9:45:8b:92:08:7d:a5:94:33:79:6b:07:
                    d8:e2:72:cc:22:39:e3:af:c6:a2:cc:6b:24:d8:ed:
                    f4:b2:bd:9e:41:bc:12:cd:56:f0:e9:b2:70:ca:23:
                    21:aa:3e:f5:ad:fa:e4:e1:57:18:c5:ce:41:47:c5:
                    c8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:93:12:3A:9A:80:69:8A:87:57:73:20:F3:DD:8C:96:D0:54:0B:7A
            X509v3 Authority Key Identifier:
                keyid:79:D7:80:5E:A3:D3:D5:5C:21:52:9C:0E:57:5D:7B:FF:19:7F:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/79D7805EA3D3D55C21529C0E575D7BFF197F3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/79D7805EA3D3D55C21529C0E575D7BFF197F3772.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:f4:ee:66:8c:14:c1:7c:45:ae:85:18:05:ba:c3:16:9f:a1:
         97:62:89:6e:d0:c3:34:4b:ea:1e:49:88:e6:d9:b5:71:6f:58:
         6a:1a:33:56:7f:c5:52:69:13:8e:23:f7:71:22:20:59:8c:25:
         2a:12:22:db:42:fe:8d:f2:f8:a3:49:ed:8b:af:9a:ea:31:82:
         4c:f0:3e:15:20:3e:3e:09:0c:37:93:77:5e:6b:09:68:67:75:
         a0:3b:9b:59:36:6e:db:f7:cd:a9:3b:3b:1c:0a:7a:df:3d:89:
         7d:ab:f8:ac:52:19:ff:79:56:63:60:d2:5e:5a:90:cb:3c:e0:
         8b:a4:83:b2:c5:10:d0:6a:8c:6b:97:ae:fd:3a:90:d9:66:c6:
         14:06:84:1d:13:3e:0d:49:d7:5b:1d:07:95:10:b8:74:e0:59:
         b3:20:a1:f6:a9:bc:5f:27:ec:9f:46:a1:e6:31:68:42:a8:ed:
         2e:5b:5a:43:35:d1:71:24:4a:7c:3a:07:d6:a5:ea:14:d5:82:
         fb:2d:bd:10:3c:d7:38:8e:ae:85:6f:39:b2:7f:b8:f9:68:ad:
         85:bd:99:51:ea:10:93:68:7b:50:d8:a8:60:b7:69:16:62:dc:
         b7:86:19:a9:15:d9:21:a2:80:d9:e9:6f:05:db:fe:05:7e:13:
         fb:7c:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:26 2026 by rpki-client