Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
File:                     3130332e3137392e37322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          0OGZQMAls3NMHhv6JGCAOb69BHqnfQNmNotcAbFfySA=
Subject key identifier:   A1:87:41:4A:37:FD:D2:E3:37:02:B2:B2:15:5A:65:43:2C:FE:79:8C
Certificate issuer:       /CN=0421C76E96397265BFB6174D98D3541B99E072CD
Certificate serial:       19D920DCA4CBF0D8888BAC93D8CA48315FF121DF
Authority key identifier: 04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:24:02 +0000
ROA not before:           Sun 03 May 2026 02:19:02 +0000
ROA not after:            Sun 02 May 2027 02:24:02 +0000
asID:                     9341
IP address blocks:        103.179.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl
                          rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d9:20:dc:a4:cb:f0:d8:88:8b:ac:93:d8:ca:48:31:5f:f1:21:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0421C76E96397265BFB6174D98D3541B99E072CD
        Validity
            Not Before: May  3 02:19:02 2026 GMT
            Not After : May  2 02:24:02 2027 GMT
        Subject: CN=A187414A37FDD2E33702B2B2155A65432CFE798C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:4f:1a:7a:f6:a7:09:73:34:6c:ec:15:94:
                    7c:86:8a:23:9d:62:91:c3:28:68:06:25:7e:5f:c5:
                    c5:01:f3:13:c2:81:5f:a1:0d:db:f2:fb:35:d9:6d:
                    fd:66:75:4d:bf:04:7d:24:a5:a6:19:ff:5a:91:2e:
                    80:fb:38:7e:89:fe:c8:6d:53:be:75:4f:17:dd:09:
                    9b:e7:fe:e8:be:a8:09:8b:67:d6:9e:11:6a:0a:b8:
                    bf:1c:07:ad:6c:86:a0:8e:8d:9f:d9:96:a2:d9:e0:
                    15:81:4e:f4:9b:be:08:31:71:72:94:00:24:7c:42:
                    9f:6b:ff:e2:8b:63:b4:bc:e7:a4:31:09:c2:c6:95:
                    0b:ed:43:fa:c6:e9:70:fe:d5:50:6c:90:72:8b:77:
                    db:cd:6b:f7:d2:3d:54:08:49:18:81:c1:a0:43:52:
                    b2:79:03:24:83:9f:44:c6:b2:03:12:b3:96:2d:52:
                    ba:fe:2b:22:c1:9d:6c:f7:45:d9:08:f7:6e:38:d3:
                    e9:bc:38:aa:ff:85:4d:d2:2a:cb:66:ea:92:33:96:
                    ff:e9:9e:48:46:df:eb:02:6d:bf:78:b0:62:5f:4a:
                    e6:26:c8:6f:35:d0:7a:81:1f:8d:d1:da:86:08:01:
                    fa:3d:32:a1:8f:04:7e:10:aa:fa:72:1e:4e:ac:e0:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:87:41:4A:37:FD:D2:E3:37:02:B2:B2:15:5A:65:43:2C:FE:79:8C
            X509v3 Authority Key Identifier:
                keyid:04:21:C7:6E:96:39:72:65:BF:B6:17:4D:98:D3:54:1B:99:E0:72:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/0421C76E96397265BFB6174D98D3541B99E072CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0421C76E96397265BFB6174D98D3541B99E072CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31ab8a58-f13f-4f71-9dde-aed57ea6dca7/0/3130332e3137392e37322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:2c:b2:9f:9b:02:b4:4b:4f:11:92:fa:27:9a:58:84:1a:54:
         62:57:c9:9a:b6:96:1d:da:86:8f:f8:7a:d3:b0:45:eb:06:f8:
         a4:f4:9b:0c:00:1e:f3:4b:7c:e0:90:d8:43:b2:f3:dc:0c:d5:
         5c:0c:c3:d7:44:95:f3:3b:b5:c7:06:48:dd:b1:b2:b0:4f:9a:
         7b:f4:fc:a6:6d:98:19:bb:90:ce:d7:75:a9:6b:66:02:b7:4c:
         67:af:41:17:14:c8:3a:31:43:a2:11:e8:2b:ad:60:e4:57:00:
         45:e4:ca:7f:64:ba:aa:5b:34:ec:67:aa:1a:d8:c3:d3:ac:39:
         15:0a:b5:0f:69:7a:3a:02:5e:48:f3:a6:ff:00:57:fd:96:d3:
         68:2e:f7:6c:20:8d:11:ed:d3:8a:63:fe:4e:68:41:c6:46:85:
         e9:c3:e0:a3:d5:7a:66:9b:83:ad:e0:05:84:1f:97:a9:6b:84:
         9a:5c:d1:f3:69:f3:82:e1:16:20:df:9b:ef:d8:9f:63:3d:28:
         91:1c:05:62:c3:66:53:2f:04:a8:a6:b2:eb:6b:11:e3:0b:fa:
         65:10:4f:82:b9:ee:67:f4:81:c7:cc:f0:2d:c6:de:d0:b6:b7:
         9b:3b:6a:d1:d8:d6:0e:9e:d0:1f:d1:89:1a:88:70:2e:3d:67:
         22:8a:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:31 2026 by rpki-client