Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          MaBel9u9pYezsd1ShGGBnY40dDIrzHcanWzm4FOSRAg=
Subject key identifier:   D8:C4:A7:0B:D0:E1:6B:1B:C9:C4:C9:7C:2D:D1:7D:0B:98:1B:99:B6
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       4B547CF55B0F0229D1292787198914AB56ED03E5
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
Signing time:             Sun 03 May 2026 02:43:27 +0000
ROA not before:           Sun 03 May 2026 02:38:27 +0000
ROA not after:            Sun 02 May 2027 02:43:27 +0000
asID:                     150936
IP address blocks:        103.110.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:54:7c:f5:5b:0f:02:29:d1:29:27:87:19:89:14:ab:56:ed:03:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: May  3 02:38:27 2026 GMT
            Not After : May  2 02:43:27 2027 GMT
        Subject: CN=D8C4A70BD0E16B1BC9C4C97C2DD17D0B981B99B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:67:33:fb:29:69:14:e0:c4:cf:69:57:9d:
                    ce:80:6c:75:5b:c2:38:35:9c:9a:73:d8:74:a8:4e:
                    37:72:12:a2:08:6b:58:50:0a:31:69:55:e2:a1:b9:
                    22:d1:f9:dd:e4:a9:a4:c3:fa:e0:1c:02:3a:75:01:
                    64:68:47:9c:bb:1a:28:69:bc:95:e9:25:aa:7c:ec:
                    c5:38:d9:f0:0e:ae:a0:40:d0:e7:0b:f6:39:81:7b:
                    11:2b:e9:7a:2a:7b:b5:53:50:b2:ea:56:e1:22:6d:
                    76:dc:2d:97:7f:be:c4:6d:61:a5:1f:b7:0e:72:7f:
                    b1:1a:9e:34:60:fb:e7:30:8a:79:40:6a:c5:36:a6:
                    2f:9b:71:e6:14:46:2e:6d:1e:fd:1e:91:79:0b:f2:
                    9a:d3:73:35:22:b4:a4:72:cb:04:ff:63:95:b1:b0:
                    2d:c8:02:90:96:98:56:31:67:94:1e:82:80:1e:91:
                    e6:d7:f7:30:43:8b:1b:61:cf:6d:0b:7c:6b:02:63:
                    ed:68:ee:eb:b3:7b:dd:82:58:b7:f4:b0:0f:01:97:
                    0b:bb:d4:12:8c:7c:cf:38:cd:cb:ac:58:da:1b:77:
                    4c:8d:2f:ec:53:8f:0d:d5:8f:3a:32:00:ea:58:92:
                    e5:6c:8f:40:4b:d2:20:eb:cd:f6:16:40:ed:9f:39:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C4:A7:0B:D0:E1:6B:1B:C9:C4:C9:7C:2D:D1:7D:0B:98:1B:99:B6
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:82:ca:3a:8b:ce:62:fa:38:f1:67:52:cf:19:bd:78:4b:
         53:23:98:77:c3:fb:96:dd:63:12:57:06:03:ba:6a:69:14:b3:
         ba:a4:91:f6:4e:b4:e6:2d:d5:8b:0a:4b:78:63:79:ec:29:46:
         d1:6e:2b:9c:4f:24:a4:1e:73:9b:bc:8d:0e:e1:c9:1a:f4:bb:
         93:f8:8d:b7:1b:05:5c:89:eb:64:01:1b:56:ed:87:41:13:1a:
         89:6b:55:1a:91:ad:c1:48:de:b8:86:b0:67:7c:61:e3:e9:3d:
         10:22:af:7d:ce:b6:2c:6b:ea:7f:49:e5:c4:dd:ce:b2:0e:a7:
         71:a5:82:ff:77:42:d7:fb:b8:07:76:42:61:78:cc:a9:a1:62:
         00:25:42:16:41:ee:f2:b2:48:4b:ee:c5:a0:f1:70:56:c7:fe:
         c2:a1:a1:4d:5e:ed:b0:56:9b:61:34:4d:d6:0f:31:48:0d:19:
         62:21:56:02:b3:34:65:57:90:4f:c1:db:68:33:ef:79:37:9c:
         2f:f3:65:6e:60:b3:b3:b4:0d:94:9d:20:76:7a:e1:5f:b8:65:
         f4:ef:9a:c7:38:83:0e:59:fc:76:95:e4:2f:7b:cd:2a:9b:01:
         22:23:4d:67:0e:de:fe:59:65:87:aa:b1:b7:7a:70:52:1c:ae:
         dc:11:83:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:56:33 2026 by rpki-client