Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          3XmUzAiqVZaFyzkEVDaETxoV3L7puo8oceCYnEmmitg=
Subject key identifier:   87:DF:B2:63:23:33:70:A6:8A:37:DC:CF:9B:CE:28:B9:D2:BB:BF:4E
Certificate issuer:       /CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
Certificate serial:       294CA5736986DCDCEE9138F8614C41DD3A0AF2DC
Authority key identifier: ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 03 May 2026 02:43:27 +0000
ROA not before:           Sun 03 May 2026 02:38:27 +0000
ROA not after:            Sun 02 May 2027 02:43:27 +0000
asID:                     48465
IP address blocks:        103.110.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl
                          rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 13:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4c:a5:73:69:86:dc:dc:ee:91:38:f8:61:4c:41:dd:3a:0a:f2:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED174C0150D63525F5DB20F0992EDEECD70380E5
        Validity
            Not Before: May  3 02:38:27 2026 GMT
            Not After : May  2 02:43:27 2027 GMT
        Subject: CN=87DFB263233370A68A37DCCF9BCE28B9D2BBBF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:fc:f5:3c:b6:cb:30:a3:48:f0:99:fe:fb:
                    c7:35:e4:7d:2c:49:c0:18:03:51:5e:96:2a:2e:dc:
                    e4:57:10:16:f4:7c:61:45:f9:9e:d1:46:00:1b:2d:
                    d7:05:21:86:09:c2:24:fc:a7:19:eb:b9:dd:03:af:
                    2a:07:7e:0b:b0:bf:c6:5f:e9:03:ee:38:9d:e8:b4:
                    12:1c:ec:da:e7:c0:ee:14:b1:12:0c:8b:33:16:37:
                    e1:90:20:6a:1b:24:92:e2:04:e9:41:49:93:d1:c9:
                    7d:65:d6:34:b5:ad:17:c9:7e:c0:18:5c:95:1f:43:
                    7c:9b:66:ae:56:75:19:e5:44:70:ed:ca:e8:7a:41:
                    30:91:46:5d:40:b5:ed:09:0f:02:6e:75:a2:c8:ef:
                    d3:c6:af:d6:a5:7d:5a:31:16:75:fc:73:1b:5f:46:
                    b6:e2:90:92:a6:4f:ca:3e:71:b7:2c:0e:98:9b:b5:
                    d6:84:ca:6b:b2:0c:bf:63:90:79:ed:74:be:9d:45:
                    f0:b7:b0:11:c8:9b:28:ff:c1:bb:36:50:8e:9e:66:
                    74:ef:e4:95:60:c7:71:ff:35:6d:7a:7d:9f:47:b8:
                    fa:ef:7d:68:ac:90:67:42:e0:ed:59:c8:51:da:b1:
                    b4:96:71:b5:d7:86:4f:c1:8d:7e:0a:d2:5b:7a:29:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:DF:B2:63:23:33:70:A6:8A:37:DC:CF:9B:CE:28:B9:D2:BB:BF:4E
            X509v3 Authority Key Identifier:
                keyid:ED:17:4C:01:50:D6:35:25:F5:DB:20:F0:99:2E:DE:EC:D7:03:80:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ED174C0150D63525F5DB20F0992EDEECD70380E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED174C0150D63525F5DB20F0992EDEECD70380E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:04:29:24:53:c4:fa:16:c9:61:6d:44:fe:e7:ad:d7:60:b6:
         5d:8a:65:37:b9:17:07:c0:7d:94:b8:0e:72:34:32:65:d6:1e:
         b4:fd:8b:cd:2f:dd:9a:32:15:97:5c:07:68:58:2e:b2:46:c5:
         c7:81:46:41:c1:80:28:8c:fc:21:19:fa:09:89:bc:3d:0d:28:
         c9:71:90:36:62:8b:af:51:55:a0:e3:6f:c8:6c:01:09:61:ef:
         4b:22:ff:d8:66:65:5b:da:c7:ea:03:73:34:8d:28:ba:96:cb:
         3c:bd:bb:96:2c:02:f1:99:65:ce:51:3d:9c:9a:20:54:82:19:
         07:64:1f:11:02:00:ad:9a:2e:15:3e:92:dd:70:5f:6f:c6:5b:
         60:85:0b:38:4b:c0:6b:1c:8e:cc:84:bd:b3:f4:7b:7f:3d:4e:
         97:cc:72:ce:23:eb:34:20:a0:e0:5f:82:e0:e0:37:35:b2:60:
         96:be:0d:b9:38:d6:ae:98:51:34:e1:f2:1c:22:26:55:f6:ce:
         52:18:f4:90:47:80:d7:02:5f:7a:a6:60:a4:75:3c:cd:e9:41:
         41:ca:03:8f:ba:32:ce:48:8e:9a:89:5a:46:cf:91:c4:fe:9b:
         4c:ca:c1:66:af:09:59:7d:6b:16:54:e2:14:17:c0:9f:9f:66:
         7b:ce:1d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 16:55:59 2026 by rpki-client