Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa
File:                     3130332e39312e32342e302f32322d3234203d3e20313432333739.roa (raw, json)
Hash identifier:          AnDqHlidff5Ox0jt0yjx0uwvccFAfB7mH1oiPDPa4CY=
Subject key identifier:   14:6A:B7:73:82:B3:85:2A:ED:7A:89:DB:6B:57:C2:F1:AA:C8:63:B3
Certificate issuer:       /CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
Certificate serial:       6F80CF556402B09611874E9FFC9D5511523B804B
Authority key identifier: ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa
Signing time:             Sun 03 May 2026 02:11:59 +0000
ROA not before:           Sun 03 May 2026 02:06:59 +0000
ROA not after:            Sun 02 May 2027 02:11:59 +0000
asID:                     142379
IP address blocks:        103.91.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl
                          rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:80:cf:55:64:02:b0:96:11:87:4e:9f:fc:9d:55:11:52:3b:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED63844C4B15010EA3F230F69A770C2B1C84C105
        Validity
            Not Before: May  3 02:06:59 2026 GMT
            Not After : May  2 02:11:59 2027 GMT
        Subject: CN=146AB77382B3852AED7A89DB6B57C2F1AAC863B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:c3:0e:1d:b3:e5:03:4b:cf:f4:12:06:6a:
                    4e:b0:cf:c1:d0:25:e3:bc:c5:13:44:0c:2e:b9:5f:
                    21:17:4e:5d:f3:16:41:50:0b:bd:3a:69:9d:b5:ae:
                    f5:58:02:f1:b3:99:42:0e:e1:63:8b:ef:85:0d:6e:
                    cb:e1:28:59:af:55:7e:3d:ba:14:32:d7:3c:99:fb:
                    3b:f6:86:18:f9:e2:ec:76:fc:a6:99:59:58:f0:58:
                    53:ed:6f:f7:8d:13:fb:3d:24:0a:b9:30:f5:e5:f6:
                    7e:d1:b2:7b:d7:49:20:c3:f9:cf:d5:28:26:92:15:
                    b0:79:1f:cc:d7:bf:35:ae:d5:fc:76:3e:0b:5f:0c:
                    2f:73:09:05:dd:08:97:ba:34:0f:75:6c:96:06:30:
                    7d:b2:4c:c8:37:f3:4a:86:e1:1f:61:6b:7a:19:83:
                    aa:eb:83:92:5b:aa:bb:e6:6f:f3:5a:45:cd:c9:81:
                    b2:be:14:9a:4b:02:7c:18:af:69:60:0b:7c:0c:02:
                    26:ca:ff:17:a9:39:d0:38:fb:ed:e5:0b:d6:13:ee:
                    21:e0:5f:7f:16:59:1b:9f:f9:41:81:a5:1a:ef:9a:
                    5b:1e:9f:f4:2a:ca:a2:f9:a1:b5:e2:e1:42:e3:95:
                    d9:48:ed:a1:85:01:41:bd:ea:98:2a:ed:e5:ae:2b:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6A:B7:73:82:B3:85:2A:ED:7A:89:DB:6B:57:C2:F1:AA:C8:63:B3
            X509v3 Authority Key Identifier:
                keyid:ED:63:84:4C:4B:15:01:0E:A3:F2:30:F6:9A:77:0C:2B:1C:84:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/ED63844C4B15010EA3F230F69A770C2B1C84C105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED63844C4B15010EA3F230F69A770C2B1C84C105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/06a7665a-b50b-4a45-a8f9-0d69bd7d743d/0/3130332e39312e32342e302f32322d3234203d3e20313432333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:12:15:64:9d:3d:65:3f:af:d4:9d:45:fd:56:3d:67:c2:d3:
         3b:02:85:a9:c3:60:3d:20:9a:44:4c:15:64:ea:fe:6f:2a:dd:
         c2:b0:e2:be:34:c1:f3:6e:9e:1e:1f:d0:ff:56:2d:27:3a:ea:
         89:b8:96:75:8e:e3:94:3a:c7:29:f9:0d:04:44:e3:cf:53:30:
         83:71:8f:55:da:4b:b9:07:d1:c7:e5:09:84:72:a8:94:f9:0f:
         93:11:10:75:ad:8b:fc:dd:83:f2:f6:c2:48:8d:8d:0a:e3:fd:
         f9:c0:a6:5e:5a:c2:3a:52:c7:2e:0e:26:31:ae:f4:62:77:11:
         c8:d4:d4:75:4f:fe:07:80:50:ca:6d:e1:3c:44:91:af:9c:37:
         81:6e:ed:95:d3:6a:cf:53:2a:72:1f:f9:16:78:da:d9:5d:0a:
         4d:97:d7:6b:0c:b2:2a:ca:f1:a0:c0:49:3c:ad:a1:94:ee:bd:
         b2:0d:bb:41:ec:fc:42:fd:ee:53:88:b2:6a:83:55:f2:3e:e7:
         c5:a9:5c:c0:2f:3c:5c:9c:ec:f0:2f:50:6c:aa:32:3f:20:55:
         ac:96:9b:d5:36:52:a9:1b:cb:0d:b7:03:93:a5:90:af:57:02:
         03:3d:42:3d:1a:78:36:a6:31:52:7c:8d:1d:95:a6:06:14:2c:
         20:0c:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:01 2026 by rpki-client