Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          zmRnpGvMIJDXa5x4jILWd60y8Q5Ncg1iyAcAcxswFl4=
Subject key identifier:   8B:AF:13:28:E6:9F:E0:E9:14:35:17:A0:73:36:C8:A7:C9:A2:9B:0F
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       1373CB991BA7F7AC7CACD4A540C9F46AF0311C64
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa
Signing time:             Sun 03 May 2026 02:43:27 +0000
ROA not before:           Sun 03 May 2026 02:38:27 +0000
ROA not after:            Sun 02 May 2027 02:43:27 +0000
asID:                     150936
IP address blocks:        103.110.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:73:cb:99:1b:a7:f7:ac:7c:ac:d4:a5:40:c9:f4:6a:f0:31:1c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: May  3 02:38:27 2026 GMT
            Not After : May  2 02:43:27 2027 GMT
        Subject: CN=8BAF1328E69FE0E9143517A07336C8A7C9A29B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:40:ce:f1:ff:94:4c:72:d3:65:7e:8d:45:
                    ab:01:15:55:87:68:9a:1a:50:27:75:8a:b4:e7:7c:
                    a4:5e:82:ea:cb:21:2f:bc:83:09:1f:c7:b0:aa:72:
                    3b:1b:99:87:15:91:e0:4f:6f:df:43:d5:71:eb:e4:
                    66:9e:11:f4:24:3a:99:fb:5c:53:cb:66:eb:e0:a1:
                    58:ef:b5:b6:a9:2b:46:1b:6e:03:9b:06:aa:81:33:
                    45:a4:45:ad:19:5d:bb:f5:67:30:87:45:64:0a:ea:
                    78:ec:7a:ac:94:e6:dc:87:26:1c:92:b0:97:3d:85:
                    23:fd:e7:d9:ee:09:22:e1:4e:d8:6e:30:e4:fc:7f:
                    3b:4b:72:c1:94:2a:c5:1c:7c:c1:80:7f:3c:aa:3c:
                    ca:97:65:bc:6b:a2:b2:ee:79:73:b1:6d:14:4e:b8:
                    4d:f7:43:dd:8a:d6:75:2f:f3:7f:53:9a:fa:07:f7:
                    28:9d:7b:f6:b6:fe:72:56:94:b6:e0:4d:e8:f3:64:
                    e8:93:fb:ee:f3:0b:5b:71:e1:b5:f6:c7:d8:65:69:
                    79:6e:19:06:99:67:87:c6:53:5d:58:62:cb:cb:11:
                    e1:b0:ff:7b:71:ec:5d:f7:24:18:c4:13:4f:f8:52:
                    47:7c:9f:07:25:aa:8a:bd:c6:69:89:0f:ad:e6:13:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AF:13:28:E6:9F:E0:E9:14:35:17:A0:73:36:C8:A7:C9:A2:9B:0F
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:a9:86:a2:1d:79:39:fb:c5:c7:8b:e5:d3:34:96:95:93:
         f3:47:e0:0b:d9:21:d2:84:6f:73:ae:4a:7d:18:b7:43:37:38:
         7e:0b:b9:6f:9e:cf:ca:fa:d1:d1:8f:9f:4c:b9:83:7b:e7:ca:
         14:ec:65:ff:97:82:4c:a7:a7:43:43:fd:41:db:96:9e:60:aa:
         f7:f1:c0:79:54:7a:f9:64:ed:6f:9a:44:db:28:99:5c:b9:4e:
         b1:cd:48:18:a1:2e:4d:07:45:5f:fa:b8:44:7d:51:bb:46:ef:
         22:83:fc:c6:7f:89:51:be:20:d4:d4:73:a0:1d:ae:15:d9:c5:
         df:85:a8:87:e8:da:9d:72:73:75:91:51:26:60:64:30:5d:c1:
         59:ad:06:34:27:48:85:ae:f1:d3:53:1f:3d:50:c8:64:57:03:
         ec:65:7d:68:52:5d:82:63:6d:a4:22:cc:c3:93:e8:53:50:0e:
         25:3a:79:3b:e6:87:cc:64:dd:bd:37:b5:56:53:81:19:15:f8:
         a9:aa:af:3a:2d:b7:c7:e3:97:6f:78:1d:d9:fd:21:6c:53:93:
         4b:41:cf:91:ed:f3:a7:46:8f:40:12:9c:1a:a1:94:08:e5:cc:
         44:53:29:a1:fb:40:4b:c3:c7:a6:e4:9d:4e:6f:81:10:6f:24:
         77:f6:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 18:56:33 2026 by rpki-client