Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa
File:                     3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (raw, json)
Hash identifier:          hpiL6+O2y1i6nQTaaXJTYqIKZW0DPxyBBggb24eEX0o=
Subject key identifier:   1C:54:6C:12:E4:BE:F4:0A:F4:F1:7C:F2:17:BA:E9:2F:0B:AA:DD:D6
Certificate issuer:       /CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
Certificate serial:       7BC6CDBDA0089A7739807331DA847006844A5ACF
Authority key identifier: 70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa
Signing time:             Sun 03 May 2026 02:11:32 +0000
ROA not before:           Sun 03 May 2026 02:06:32 +0000
ROA not after:            Sun 02 May 2027 02:11:32 +0000
asID:                     151503
IP address blocks:        103.215.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl
                          rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c6:cd:bd:a0:08:9a:77:39:80:73:31:da:84:70:06:84:4a:5a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B54E34DCF0701290B792E6EA0AE9008B2364A8
        Validity
            Not Before: May  3 02:06:32 2026 GMT
            Not After : May  2 02:11:32 2027 GMT
        Subject: CN=1C546C12E4BEF40AF4F17CF217BAE92F0BAADDD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:e1:84:a6:73:91:19:d4:54:cc:6d:b7:d0:
                    bf:d6:fe:cd:53:a9:f7:26:30:ec:56:cd:81:73:c5:
                    16:3b:19:93:b3:2b:95:79:3c:b1:3d:19:35:f0:38:
                    dc:11:30:ac:ca:e6:b1:e0:f3:1e:9c:4d:97:bc:98:
                    a0:dd:c2:98:25:b1:a6:ec:74:b5:34:1b:49:6f:24:
                    51:2c:ec:9a:7e:65:91:77:21:a0:52:5f:cd:93:23:
                    b7:c4:d7:59:96:e7:d2:79:76:39:48:f5:a5:46:05:
                    64:f4:91:11:69:da:fd:0a:0e:9c:a1:32:0f:e4:85:
                    16:b8:78:eb:f6:d0:b9:7d:37:bf:ed:be:d6:69:a6:
                    ab:d9:9b:04:10:36:65:16:4c:ed:04:0d:33:af:af:
                    aa:7c:0b:93:e7:73:02:d8:8e:63:9f:fc:dc:9a:ba:
                    3a:21:2d:da:b5:13:b4:17:28:c7:0f:6d:99:8f:70:
                    8b:cd:13:c6:54:2a:d3:9d:f4:85:99:22:53:a4:52:
                    70:45:dd:4e:5f:5f:52:01:6d:41:c5:81:9b:59:b7:
                    49:b2:d5:6f:48:d4:0c:d8:8e:bd:fd:e9:2d:01:97:
                    fd:af:78:ee:c5:51:71:4a:a2:8e:6e:7f:b8:b3:73:
                    ea:b4:d1:c4:b6:c7:b7:7f:a3:5a:c6:69:47:e0:32:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:6C:12:E4:BE:F4:0A:F4:F1:7C:F2:17:BA:E9:2F:0B:AA:DD:D6
            X509v3 Authority Key Identifier:
                keyid:70:B5:4E:34:DC:F0:70:12:90:B7:92:E6:EA:0A:E9:00:8B:23:64:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/70B54E34DCF0701290B792E6EA0AE9008B2364A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70B54E34DCF0701290B792E6EA0AE9008B2364A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:4f:8e:45:ea:f7:5e:29:fa:44:05:d6:17:9c:f0:55:bb:
         e6:69:df:bd:a2:6c:92:ae:00:16:f3:9a:0b:6d:4f:31:a7:a7:
         16:7f:0d:fe:f5:b5:eb:37:dd:27:00:f7:dd:67:e1:c9:98:5a:
         0a:d3:40:a1:66:fb:16:89:6f:d5:1a:7a:9c:2f:0b:2c:e9:16:
         bd:03:c5:57:0b:44:bb:63:31:59:42:f2:11:ef:66:e8:f4:97:
         49:2a:28:b4:6a:99:86:4f:ad:23:2d:ee:d4:5d:c8:5f:81:5a:
         db:cb:0c:29:e6:6e:e3:d9:9b:8b:d7:69:f6:31:19:da:9c:80:
         86:a9:88:8d:48:77:3a:0b:1a:b9:ff:82:d3:c1:2b:9f:31:96:
         c6:e1:28:d7:0c:51:2d:c6:28:45:99:85:74:c4:5e:de:f4:27:
         a2:bd:6f:f5:ed:22:37:b3:26:47:03:5d:7a:e9:d2:6e:c2:71:
         b7:2e:12:43:05:57:75:4e:75:10:da:15:f7:25:6e:94:3f:a4:
         b2:01:e0:95:d0:1d:9b:2d:2f:48:0c:3f:b0:37:a9:1f:bb:3f:
         2c:f9:7a:f3:0e:f4:4c:15:d6:08:70:4d:d4:6b:c8:61:27:f4:
         51:a7:75:bd:0b:01:ba:63:6b:6f:fd:3f:f6:dd:d8:c8:91:56:
         f2:e1:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:32 2026 by rpki-client