Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          MF1opaQfJw+Iei/Le09BzIXkrXsDLiX2XTUMp350q1Q=
Subject key identifier:   01:AB:82:61:E0:63:61:84:E8:9E:7C:A3:3F:FB:CA:DA:40:F6:0B:37
Certificate issuer:       /CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
Certificate serial:       0113B74444CBAFC3AEA97EDAFE99422169FE2808
Authority key identifier: 51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:06:29 +0000
ROA not before:           Sun 03 May 2026 03:01:29 +0000
ROA not after:            Sun 02 May 2027 03:06:29 +0000
asID:                     9341
IP address blocks:        103.117.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl
                          rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:b7:44:44:cb:af:c3:ae:a9:7e:da:fe:99:42:21:69:fe:28:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5109EC0B3BA28731E9E261F3B59F3600B563E644
        Validity
            Not Before: May  3 03:01:29 2026 GMT
            Not After : May  2 03:06:29 2027 GMT
        Subject: CN=01AB8261E0636184E89E7CA33FFBCADA40F60B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:36:3e:fc:32:f3:71:f5:a2:83:28:ae:6d:
                    5e:3e:8e:b0:ae:fa:71:e6:96:fa:5b:c9:0d:e4:5d:
                    6a:6b:52:15:fc:04:f1:f7:23:66:2e:d7:d6:9f:77:
                    ae:5b:74:a2:42:24:6c:be:55:fa:f4:3e:89:43:26:
                    17:fe:ad:ab:2a:ed:d3:72:1d:1f:42:4a:d2:2e:c8:
                    cf:a7:0f:88:f4:ca:81:ea:f0:96:df:29:5b:d3:0a:
                    ba:67:f5:8a:8c:af:2b:fc:a5:25:38:0c:3d:fe:3d:
                    34:05:66:83:e1:9b:4b:cc:0c:dd:2e:4b:38:c2:86:
                    66:cc:47:02:fd:03:27:65:3e:60:6e:8e:87:e5:37:
                    50:2e:32:4d:57:3a:f0:4f:bb:e3:f8:70:0c:9d:8b:
                    8e:32:b0:06:68:72:17:31:11:17:59:e1:a0:00:4c:
                    58:c3:0f:af:7d:da:c2:2c:ba:db:ec:69:ee:81:d1:
                    df:ee:5c:b6:d6:24:0d:a7:b3:8a:16:f1:d6:62:d9:
                    0c:c7:a7:96:bd:4a:4d:40:38:51:66:e8:7b:3d:ec:
                    40:4f:ab:aa:1c:fa:dc:6d:95:28:a4:34:10:30:2d:
                    de:88:db:16:42:84:ec:34:23:18:43:d6:17:70:c7:
                    e5:e4:a8:75:a4:cd:87:52:91:4a:cc:e1:f6:a0:09:
                    a5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AB:82:61:E0:63:61:84:E8:9E:7C:A3:3F:FB:CA:DA:40:F6:0B:37
            X509v3 Authority Key Identifier:
                keyid:51:09:EC:0B:3B:A2:87:31:E9:E2:61:F3:B5:9F:36:00:B5:63:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/5109EC0B3BA28731E9E261F3B59F3600B563E644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5109EC0B3BA28731E9E261F3B59F3600B563E644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f0:91:31:d4:dc:c8:de:c9:81:81:06:02:5b:11:8d:82:4b:
         7e:4e:e1:be:9e:c2:10:e1:a6:72:62:c0:19:5f:e6:a9:23:f6:
         eb:42:0a:87:e1:e7:95:9e:44:9a:16:22:51:81:3f:3b:f0:73:
         aa:18:07:ab:13:c0:1c:bd:27:26:fe:3f:d4:f3:f9:c6:fe:63:
         9a:10:af:a9:a9:c0:c6:fa:b8:50:11:70:b0:47:f2:3a:d3:c1:
         32:03:fb:ec:fa:6b:4f:63:f1:4c:a9:af:ec:3c:e5:45:79:82:
         cd:23:f8:0c:86:ef:3f:46:88:c8:34:50:ae:5d:36:4c:36:23:
         06:52:8e:39:3e:47:1c:4f:7f:b0:0f:92:fc:58:be:f5:3c:bd:
         63:cd:37:8f:34:c7:2a:f1:e0:57:ba:04:00:89:1b:92:fb:4f:
         2e:93:c3:24:c1:e3:0d:89:c9:ec:90:f5:80:62:ab:69:31:a0:
         7f:90:3a:28:a3:9f:2c:c5:ac:51:2c:b1:c1:3d:db:d8:de:ec:
         b1:1b:f3:22:10:96:f9:26:59:bf:97:cc:74:1e:d8:b1:b1:45:
         4a:b8:a9:7c:3b:73:e9:1f:41:d3:bd:19:4d:01:10:8f:c3:89:
         0a:75:86:fe:a2:87:b4:bd:1a:ca:78:0b:e3:90:0b:3c:47:d4:
         6c:d4:33:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:07 2026 by rpki-client