Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313339393832.roa
File:                     3130332e39372e37372e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          kjVWGrmA+VHTqA4xjxSxUv9AEMKkgjRqk/NxzJQ1RzM=
Subject key identifier:   C2:ED:7D:C0:75:C1:FF:62:0E:26:AB:9E:B0:77:20:D3:80:33:01:F4
Certificate issuer:       /CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
Certificate serial:       6F59A8F684A805C1746B20FE3B0FE90341B86AE3
Authority key identifier: F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313339393832.roa
Signing time:             Tue 29 Sep 2026 08:49:06 +0000
ROA not before:           Tue 29 Sep 2026 08:44:06 +0000
ROA not after:            Tue 28 Sep 2027 08:49:06 +0000
asID:                     139982
IP address blocks:        103.97.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl
                          rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 18:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:59:a8:f6:84:a8:05:c1:74:6b:20:fe:3b:0f:e9:03:41:b8:6a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07DE2A6041C4CCDF424D4FE299B586DABA22CAF
        Validity
            Not Before: Sep 29 08:44:06 2026 GMT
            Not After : Sep 28 08:49:06 2027 GMT
        Subject: CN=C2ED7DC075C1FF620E26AB9EB07720D3803301F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:99:a1:b3:be:36:e2:bb:48:1f:29:db:3a:
                    0d:9a:4f:1e:c7:05:e4:7a:1a:28:f0:0a:25:54:9c:
                    5b:64:56:19:fa:7f:3c:95:d0:31:b4:3e:27:ef:13:
                    21:40:23:22:7b:e1:d8:7b:18:a1:04:a3:ec:c1:e0:
                    7a:cf:e8:53:6e:8c:ef:45:07:e5:c1:2a:5e:14:1a:
                    dc:4d:d6:81:d5:83:ea:0f:c1:12:12:75:ba:6e:7f:
                    f5:7c:9e:a0:0b:67:08:fa:05:34:39:a3:e5:b3:a9:
                    e8:07:3a:ab:c1:38:4d:4d:7f:a2:d5:04:28:17:51:
                    6a:1d:6e:9c:e6:1f:47:2f:d5:66:3e:ae:44:20:f3:
                    0a:79:70:44:94:70:e3:cf:d3:16:89:ef:0f:0a:ac:
                    cf:83:8a:4d:34:fd:eb:3e:8e:04:1c:42:83:f8:57:
                    9c:0e:46:6b:4d:10:c2:ed:bd:a3:7f:29:23:17:20:
                    8f:41:2a:ed:eb:fa:88:6b:d7:48:4f:f5:c6:b4:ea:
                    73:7b:29:67:ec:8d:54:ce:69:1c:9f:93:e1:16:2a:
                    53:40:36:84:57:aa:cc:59:db:0b:7c:69:3b:e9:ad:
                    a7:ef:a0:f3:8b:40:b2:b2:79:7a:6d:9f:3d:8a:96:
                    b7:42:94:ef:0d:d7:31:fd:36:d6:ab:25:20:2e:78:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:ED:7D:C0:75:C1:FF:62:0E:26:AB:9E:B0:77:20:D3:80:33:01:F4
            X509v3 Authority Key Identifier:
                keyid:F0:7D:E2:A6:04:1C:4C:CD:F4:24:D4:FE:29:9B:58:6D:AB:A2:2C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F07DE2A6041C4CCDF424D4FE299B586DABA22CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/3130332e39372e37372e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:31:4d:5c:8b:bd:d2:cf:39:3a:e1:05:6f:c3:8b:02:14:73:
         d4:e7:80:ef:db:2c:aa:d6:b9:c2:d2:d7:0d:57:f3:ae:c8:bd:
         ee:7f:a0:4d:bf:4b:0e:fe:9d:c3:ab:b4:3d:dd:0d:73:10:a0:
         b0:34:f1:b8:19:2c:ec:48:48:f0:b5:d3:f0:cd:15:1f:79:ed:
         18:8f:40:47:83:65:7d:60:4c:1d:17:61:85:4f:fc:48:fc:9b:
         4c:85:be:91:0c:50:55:07:97:aa:0b:4f:b4:0d:3e:e1:30:3e:
         30:65:7e:3d:6c:6b:9e:b4:36:3c:0b:eb:b5:16:8f:18:9e:1c:
         e7:f8:43:75:d5:b9:1e:04:44:aa:8a:5e:c3:63:9c:83:d3:15:
         ae:1a:2a:14:bb:12:f8:1a:e8:e6:31:d0:c3:2a:1d:84:d3:82:
         53:78:a8:fc:d9:31:70:9f:53:b6:54:ae:54:a4:00:29:6c:6f:
         c8:98:5d:88:22:b2:e3:44:47:68:62:1a:c1:f5:ca:4b:e8:a9:
         c1:41:db:4b:b9:95:42:aa:79:dc:f6:8d:04:e4:5c:45:be:55:
         87:23:7a:dc:97:d9:16:37:93:8e:2b:45:f3:16:f8:f7:7d:db:
         c0:75:f6:bd:cc:21:c5:8b:72:3b:0f:3f:d6:9b:ac:d0:67:c4:
         2b:d0:86:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:03:01 2026 by rpki-client