Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa
File:                     3130332e3137392e37322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          TegVUYYe5gOwN7mrD/SnKHy2yely92AejadYc0IsKS8=
Subject key identifier:   99:69:06:62:C8:C4:4A:B1:51:5B:66:2F:4B:90:FB:4B:2B:9B:F5:AC
Certificate issuer:       /CN=0421C76E96397265BFB6174D98D3541B99E072CD
Certificate serial:       630FEFBA154DE9298DB9F86583D9ED15129C45B0
Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:24:03 +0000
ROA not before:           Sun 03 May 2026 02:19:03 +0000
ROA not after:            Sun 02 May 2027 02:24:03 +0000
asID:                     9341
IP address blocks:        103.179.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl
                          rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0f:ef:ba:15:4d:e9:29:8d:b9:f8:65:83:d9:ed:15:12:9c:45:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD
        Validity
            Not Before: May  3 02:19:03 2026 GMT
            Not After : May  2 02:24:03 2027 GMT
        Subject: CN=99690662C8C44AB1515B662F4B90FB4B2B9BF5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:7f:fe:9d:6f:82:e9:26:95:48:1f:fc:58:
                    e6:a7:ce:b4:8c:ba:df:df:c8:83:45:1b:3c:83:c9:
                    c9:19:f5:9e:ae:f3:5c:4c:71:55:57:c0:bc:be:66:
                    d6:42:35:b7:26:38:50:19:bc:9b:87:21:9b:55:01:
                    79:20:e1:ea:c1:21:0e:49:21:3e:13:9a:70:dc:3e:
                    3e:59:c0:5c:fa:32:f1:e8:5f:74:15:30:12:b1:65:
                    bd:22:67:67:94:11:32:c9:0a:cf:ce:41:a8:48:9e:
                    4a:cc:5d:ea:fa:a2:df:ca:be:00:6c:be:91:12:d1:
                    90:73:c1:2d:e1:45:65:af:19:2d:ef:8a:ad:fe:f8:
                    59:11:a7:19:08:53:26:f6:b9:20:e3:5e:8d:2d:1a:
                    a8:d8:08:48:8e:75:a6:a9:2c:bb:e2:4b:b2:a3:ea:
                    d4:b1:2f:92:d3:9e:ec:16:c9:b2:0b:d4:a5:7d:a4:
                    77:31:14:06:4e:b3:1b:d0:40:41:01:02:ea:e0:c0:
                    74:2c:14:45:50:d7:96:57:b6:ea:be:e4:42:05:48:
                    a9:e3:42:e3:ec:eb:36:81:49:ec:8f:e5:fb:a7:5f:
                    77:09:c6:6e:4a:c5:41:c6:2f:7d:c0:9d:e8:7e:24:
                    46:86:ad:75:f7:57:4b:0e:ac:1e:34:e7:e9:5c:b8:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:69:06:62:C8:C4:4A:B1:51:5B:66:2F:4B:90:FB:4B:2B:9B:F5:AC
            X509v3 Authority Key Identifier:
                keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:0b:b3:1c:50:c7:df:b3:f4:cb:93:d7:9e:03:c1:1b:a6:e7:
         f7:86:5d:da:86:90:fd:e6:8d:35:3c:59:15:c7:32:38:33:53:
         5b:fc:0b:cb:f5:3d:ae:be:98:f9:49:7f:1b:09:84:01:c2:57:
         3c:95:e4:ba:b6:88:05:25:c0:6a:aa:55:cb:e3:3e:59:1a:c3:
         cd:ae:95:49:35:a9:ca:e0:47:6d:2d:a6:47:28:dd:0b:ea:64:
         19:7b:e0:29:30:20:8c:a0:af:67:24:93:34:20:eb:1e:91:12:
         cb:e4:1d:b2:9d:b3:8c:1a:80:8e:3f:20:91:6e:89:af:2c:1d:
         5c:bb:b4:dc:98:ed:14:16:ba:13:30:6b:19:e1:f2:eb:e8:d0:
         65:47:fa:91:dd:3f:e7:ff:06:17:61:be:b1:10:9b:54:43:73:
         d5:a8:54:b8:b6:8e:c6:ad:eb:d6:14:93:29:33:17:8e:13:7b:
         3d:4f:42:4e:80:95:61:89:6f:63:e7:b9:df:47:8c:99:13:d2:
         23:7f:73:ea:a0:52:85:65:4f:b2:00:79:72:86:2e:02:67:fb:
         b9:24:9a:ae:1b:7c:df:4b:1a:af:b2:7e:f4:0a:80:36:91:19:
         e2:93:74:e9:1b:bc:34:f4:72:d9:c4:78:83:81:51:9e:5f:93:
         64:67:0f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:25 2026 by rpki-client