Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
File:                     3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (raw, json)
Hash identifier:          l8WWbVdsfCxIG53KEYuD2G886pY6gWcw9Sl2OeYKNN0=
Subject key identifier:   43:C8:4F:54:F0:CE:FF:72:3F:B3:46:EC:DE:1E:77:30:29:58:5A:18
Certificate issuer:       /CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
Certificate serial:       0FA904213E9569B8FAB3360204BD8D4AD88D484E
Authority key identifier: C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa
Signing time:             Sun 03 May 2026 02:10:14 +0000
ROA not before:           Sun 03 May 2026 02:05:14 +0000
ROA not after:            Sun 02 May 2027 02:10:14 +0000
asID:                     150530
IP address blocks:        103.68.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl
                          rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a9:04:21:3e:95:69:b8:fa:b3:36:02:04:bd:8d:4a:d8:8d:48:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C81C7BADCE1CC5075C398F6A91BF29C79B9D2419
        Validity
            Not Before: May  3 02:05:14 2026 GMT
            Not After : May  2 02:10:14 2027 GMT
        Subject: CN=43C84F54F0CEFF723FB346ECDE1E773029585A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c4:8e:51:da:71:b2:74:8c:39:3e:b2:cb:36:
                    ea:13:75:b9:bc:19:59:ea:99:55:b9:3d:47:48:7f:
                    a6:b9:56:88:a6:fd:79:e0:61:1d:5c:30:fe:b7:e1:
                    c8:c4:e7:a9:d0:39:cc:25:b0:20:ac:7d:31:99:bc:
                    d5:85:a6:f1:e0:ed:8d:4d:ee:98:b0:e1:d5:aa:13:
                    8b:cc:30:a2:9e:0b:06:2a:7a:6b:1f:a6:5f:5d:7e:
                    ed:dd:02:90:97:fd:5e:32:33:53:2f:16:50:af:52:
                    5d:70:94:47:e5:1e:ec:f1:7c:4d:df:90:11:67:1b:
                    a0:53:68:8e:90:4b:89:d3:14:6e:91:9c:63:21:aa:
                    c0:0b:55:ac:ca:df:39:cf:71:0d:4a:5f:a3:03:8a:
                    9a:b1:5c:fe:97:4a:53:8b:aa:8b:9e:07:04:12:d6:
                    25:01:75:9a:89:4d:6a:28:c3:45:0e:88:7f:43:84:
                    ec:ed:ad:b4:a3:75:b4:3e:37:de:4d:61:86:16:92:
                    02:7f:37:56:03:39:9f:3a:a3:33:fe:a1:07:02:ab:
                    de:64:d3:ff:8e:bf:ab:85:1f:ec:5c:56:ff:96:4a:
                    d7:47:6a:09:b8:3f:ce:74:fd:11:06:4d:7d:20:93:
                    0c:b4:d4:98:fd:78:47:19:c2:f7:b6:97:ae:7a:a1:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C8:4F:54:F0:CE:FF:72:3F:B3:46:EC:DE:1E:77:30:29:58:5A:18
            X509v3 Authority Key Identifier:
                keyid:C8:1C:7B:AD:CE:1C:C5:07:5C:39:8F:6A:91:BF:29:C7:9B:9D:24:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C81C7BADCE1CC5075C398F6A91BF29C79B9D2419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:a9:c9:c0:74:d7:2a:07:f0:76:5d:a2:f1:74:95:24:ce:52:
         85:eb:a4:9d:f8:ea:86:b1:70:15:1e:44:48:2a:fb:57:00:1a:
         dd:9e:a0:c3:58:97:57:46:03:c7:8e:9c:10:2a:30:23:ce:be:
         78:94:b9:d4:16:b0:b6:11:d4:8d:3f:17:82:d1:97:6b:1f:3d:
         f2:3b:84:97:ea:b1:f5:96:ba:5f:86:b9:40:b6:24:b5:9b:4f:
         49:58:84:be:c5:5a:13:64:1d:59:c7:2d:dc:ef:29:47:fb:82:
         15:9f:68:4c:11:6d:26:88:46:2b:8a:06:1b:75:e3:55:a5:1d:
         48:bc:c1:8f:3b:1c:d8:24:b1:92:b1:c4:21:72:00:3f:64:a3:
         a4:6f:52:b0:3b:a8:20:e6:17:34:ab:d9:e7:dd:4d:4d:ae:3e:
         89:df:d7:78:07:c7:d4:44:26:22:c6:57:5b:61:65:38:3c:2a:
         cb:41:eb:e0:b8:42:84:fa:cc:ad:c8:22:67:0f:a9:bd:9f:87:
         3b:f4:d9:4a:ca:a2:2b:bb:1a:7e:eb:20:4c:da:d1:88:16:27:
         56:3c:ed:56:95:2c:b9:6c:c1:6e:9e:f8:f9:f7:28:fb:16:0f:
         4b:23:a2:69:23:6c:61:31:1f:84:ce:51:e4:0e:3d:1d:b9:c7:
         8c:fd:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:00 2026 by rpki-client