Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa
File:                     3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (raw, json)
Hash identifier:          nN+scnQd2Bf1TJPwjOUkyJEyMV9Spsgs/notSfMcxTE=
Subject key identifier:   B0:2B:85:64:A2:F2:58:43:0F:21:C4:43:9A:A3:00:2A:3C:42:A1:66
Certificate issuer:       /CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69
Certificate serial:       348EDC0A80FFEF7ACE185152F6AEAC1ED16A5456
Authority key identifier: 71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa
Signing time:             Sun 03 May 2026 03:15:01 +0000
ROA not before:           Sun 03 May 2026 03:10:01 +0000
ROA not after:            Sun 02 May 2027 03:15:01 +0000
asID:                     136107
IP address blocks:        103.112.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl
                          rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:8e:dc:0a:80:ff:ef:7a:ce:18:51:52:f6:ae:ac:1e:d1:6a:54:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71B6074C811D4B60D79A64DA0B9DD38E9AE78B69
        Validity
            Not Before: May  3 03:10:01 2026 GMT
            Not After : May  2 03:15:01 2027 GMT
        Subject: CN=B02B8564A2F258430F21C4439AA3002A3C42A166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:ad:0f:c8:31:9c:9b:a7:3c:f1:9d:2a:64:
                    27:6d:f0:01:7f:73:58:0e:dc:9e:10:de:85:51:78:
                    fb:6b:5d:5b:83:06:a3:9a:29:bc:b7:a5:81:ed:d0:
                    14:c9:a0:0b:e6:4f:ef:85:6a:d4:ed:ed:50:2e:eb:
                    41:1b:a5:4a:89:0d:b8:69:5e:b8:69:6b:18:04:74:
                    0e:53:44:ad:ae:2a:09:20:32:25:d1:d3:45:37:04:
                    10:af:42:b3:59:fe:53:5b:ff:ab:af:ad:35:94:44:
                    ae:bc:e2:9d:38:b1:b4:5d:32:b8:0c:63:00:ce:07:
                    ab:81:04:0c:a7:c7:6d:af:70:7f:c9:a7:5c:1e:e2:
                    b7:b0:e0:1e:9f:43:fa:df:1a:82:1c:80:ca:4c:fc:
                    7b:74:61:26:7e:58:d0:54:25:c3:43:c8:05:90:e6:
                    a8:d1:1f:c0:fb:18:6c:ec:42:24:87:99:07:4e:e0:
                    6b:59:24:22:4f:38:bb:40:8b:78:8e:33:39:76:3f:
                    58:a1:48:31:d6:08:cd:77:41:f8:bc:2d:30:f0:fc:
                    17:1d:03:82:0d:23:1e:ab:64:49:6a:b0:46:bd:15:
                    4d:1f:3d:0b:80:bb:9c:88:b8:c5:2f:14:89:cc:00:
                    a8:53:25:0e:7c:6f:ea:ea:48:1b:c7:95:f3:e8:0c:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2B:85:64:A2:F2:58:43:0F:21:C4:43:9A:A3:00:2A:3C:42:A1:66
            X509v3 Authority Key Identifier:
                keyid:71:B6:07:4C:81:1D:4B:60:D7:9A:64:DA:0B:9D:D3:8E:9A:E7:8B:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71B6074C811D4B60D79A64DA0B9DD38E9AE78B69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:09:7e:eb:c1:6f:e9:83:17:37:81:4c:60:f5:51:1d:fb:15:
         f5:31:0b:24:65:32:55:9e:bf:59:e3:4f:7a:f3:6a:8a:63:1e:
         ef:6a:f0:81:02:de:b1:99:12:83:02:e4:68:ca:10:90:3f:fd:
         fd:88:ef:8a:ec:87:99:de:da:01:df:37:d9:f0:92:46:a7:03:
         b3:14:6a:68:e6:0e:48:af:34:22:a3:a7:e1:d7:7f:d6:f7:69:
         38:3e:3d:52:a0:b0:b5:a3:07:ae:5a:7d:6b:29:11:83:55:00:
         54:68:27:54:dd:89:eb:a3:51:85:95:02:19:5f:8e:de:df:f1:
         68:11:9d:b9:48:a5:f2:9d:a7:29:e2:a4:9c:e3:5e:7c:5f:d7:
         0c:75:20:c2:16:83:95:33:14:b0:db:44:a0:f1:dd:17:aa:a5:
         c7:e2:89:ff:b0:2e:b6:b7:1d:49:6c:17:72:d2:f5:55:4a:ca:
         d9:c2:e4:22:f7:43:a7:f8:6c:87:a7:e3:ed:ba:f0:af:64:81:
         9e:a4:64:09:1e:8c:b1:53:a5:1e:e3:2b:9e:77:f2:47:dc:bd:
         57:51:73:76:9d:26:e6:a4:4a:60:6c:23:e7:d0:30:c7:3f:67:
         6d:d3:86:6b:f5:8b:65:7e:5a:93:2a:52:c4:c7:6a:06:00:31:
         dd:a7:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:14 2026 by rpki-client