Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          8oVNIEb4TBtSy7unBowYQdxL5C3MJEoVeAhJrnkcXHw=
Subject key identifier:   2B:C7:C1:AA:B9:7F:0B:B5:4D:CB:02:0D:B4:AA:A6:16:FD:08:A6:B5
Certificate issuer:       /CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
Certificate serial:       77862C13A3757F73FB9F6B7716FA190AC296240F
Authority key identifier: 7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
Signing time:             Sun 03 May 2026 03:18:46 +0000
ROA not before:           Sun 03 May 2026 03:13:46 +0000
ROA not after:            Sun 02 May 2027 03:18:46 +0000
asID:                     131111
IP address blocks:        103.171.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl
                          rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:86:2c:13:a3:75:7f:73:fb:9f:6b:77:16:fa:19:0a:c2:96:24:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D0202669BD03E4199957B5E95EBFDC8A3B23814
        Validity
            Not Before: May  3 03:13:46 2026 GMT
            Not After : May  2 03:18:46 2027 GMT
        Subject: CN=2BC7C1AAB97F0BB54DCB020DB4AAA616FD08A6B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:44:5b:5e:13:ad:5f:27:c0:ca:57:b7:d8:
                    5e:3d:d6:1d:5e:cd:43:93:18:40:85:48:2f:ca:e8:
                    69:01:55:5f:1b:27:65:58:55:24:91:54:21:32:8a:
                    e4:d2:dd:83:41:c6:d4:19:cc:89:52:77:d9:27:1e:
                    3f:de:11:4e:df:3d:00:09:67:42:82:fb:6b:6b:c9:
                    a5:38:5f:98:0f:4d:51:ef:af:81:84:cf:ec:72:23:
                    83:ed:22:20:98:0c:69:6e:62:01:ee:72:0d:13:25:
                    44:f1:6e:4f:d3:37:2e:40:2e:f3:52:c4:86:78:41:
                    48:aa:94:90:f3:24:4e:ea:b9:b5:b3:af:08:53:88:
                    2b:31:62:02:83:d0:cc:ed:c6:54:43:2a:82:8c:27:
                    c9:f3:fd:0e:4d:2f:ab:13:93:0b:f2:be:72:0f:8c:
                    12:8a:37:65:94:bb:33:01:ca:8c:67:c5:91:30:d1:
                    e9:f6:8e:89:00:7c:ba:af:d9:22:02:31:b6:22:58:
                    bf:b3:b3:55:46:24:21:7d:cb:c3:16:ed:12:a6:26:
                    ce:ab:d3:43:0a:b5:f4:e9:e2:78:b0:f1:f6:7f:e4:
                    d1:5c:4a:cc:c2:00:42:5b:53:a9:4b:92:af:8f:b4:
                    29:e2:1a:ef:96:61:b3:bc:bc:d7:a6:e0:de:da:4d:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C7:C1:AA:B9:7F:0B:B5:4D:CB:02:0D:B4:AA:A6:16:FD:08:A6:B5
            X509v3 Authority Key Identifier:
                keyid:7D:02:02:66:9B:D0:3E:41:99:95:7B:5E:95:EB:FD:C8:A3:B2:38:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/7D0202669BD03E4199957B5E95EBFDC8A3B23814.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7D0202669BD03E4199957B5E95EBFDC8A3B23814.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:a7:2d:35:ba:4d:2c:5c:73:10:d5:38:e2:f1:b9:6d:89:f9:
         6c:66:89:35:21:3f:f2:3d:89:ec:a9:5e:b8:38:ec:d8:ce:d2:
         c1:c3:b6:13:c3:74:a6:83:ff:69:d0:39:0c:f8:7d:ad:bd:c2:
         27:6d:e0:bc:8e:13:be:a7:d3:b3:b5:a7:e9:34:e7:44:f3:c3:
         90:15:7b:22:45:42:21:bc:f6:22:18:0b:19:c4:1a:d5:bc:b2:
         01:27:d0:1b:71:6b:70:96:a9:55:92:2e:ce:5e:03:1f:c5:ea:
         6a:40:22:ad:a5:49:e5:2d:8e:30:10:78:cb:aa:9d:3f:9f:47:
         2c:b5:00:bd:30:c2:e4:8e:4e:45:6f:29:79:e8:9a:6d:c2:64:
         85:cc:83:a3:7e:ad:ab:f2:68:0d:06:52:85:ae:86:b9:60:be:
         4f:66:9c:ad:f7:da:01:87:61:9c:5c:e1:b3:49:e2:b4:0e:94:
         22:97:ca:8c:3e:61:83:60:7d:a8:27:11:cc:c3:49:fc:3c:f2:
         20:7b:36:0a:cd:6f:9a:5f:90:39:d4:16:d3:7e:49:58:88:49:
         8e:cc:07:55:eb:fa:13:14:39:09:88:ca:0e:08:db:7a:1a:a4:
         65:3b:dd:5c:9b:eb:21:3f:a1:ed:09:61:dd:80:77:2f:c7:9d:
         50:e7:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:54 2026 by rpki-client