Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36302e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          SiBmCSNab1clT6/WlGKKBm87r7qICCyQWuy3c9GEFKc=
Subject key identifier:   E6:A5:F2:A3:ED:57:55:04:B2:02:7E:2C:98:D4:4B:29:C1:FD:05:D5
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       3D7016967E6B5313A09C1E79F1018289B2BF2288
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203338373538.roa
Signing time:             Sun 03 May 2026 02:17:02 +0000
ROA not before:           Sun 03 May 2026 02:12:02 +0000
ROA not after:            Sun 02 May 2027 02:17:02 +0000
asID:                     38758
IP address blocks:        103.10.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 08:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:16:96:7e:6b:53:13:a0:9c:1e:79:f1:01:82:89:b2:bf:22:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: May  3 02:12:02 2026 GMT
            Not After : May  2 02:17:02 2027 GMT
        Subject: CN=E6A5F2A3ED575504B2027E2C98D44B29C1FD05D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:50:75:06:e6:75:d7:d7:a1:ee:b9:d1:ac:
                    3f:9b:b3:bb:c0:52:2c:2a:37:e8:f9:bc:36:f2:7f:
                    0a:e8:ab:18:f2:a4:2e:c1:56:45:4c:67:3c:92:4c:
                    35:68:e9:22:01:6c:aa:5d:f0:00:78:d2:bc:4e:89:
                    43:b7:b5:c3:21:49:49:66:c2:9d:7b:a2:d6:14:15:
                    84:ec:e3:56:32:a1:29:5a:65:80:0f:35:00:85:ae:
                    0e:e1:61:2f:cb:63:06:3b:14:37:54:5c:13:e9:02:
                    d4:49:af:80:40:8f:1b:22:44:86:81:3b:2d:e6:e2:
                    d6:cd:1f:8c:de:11:06:99:a3:a7:e2:cb:a1:94:a4:
                    4d:24:6c:38:fc:b1:9f:d6:3e:af:63:28:f5:7d:34:
                    81:e1:d8:4d:35:61:4e:9a:98:e3:8a:e0:62:74:d4:
                    84:3d:2c:5b:f4:ea:69:dd:26:77:4c:e5:11:7c:9c:
                    d4:fe:00:57:2c:a0:f3:1a:9f:f6:7e:aa:d1:5e:6e:
                    95:22:77:83:87:1c:ca:73:9f:4b:5e:d7:7e:36:c5:
                    7e:cb:97:4a:f3:4f:d2:3e:21:5f:a7:40:99:70:d7:
                    71:1d:4f:e3:43:20:f5:dd:90:3e:53:9d:6b:59:33:
                    87:c5:23:59:a4:55:69:c1:b2:e2:0e:03:17:d3:a2:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A5:F2:A3:ED:57:55:04:B2:02:7E:2C:98:D4:4B:29:C1:FD:05:D5
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:7f:c2:cc:13:92:46:48:33:27:e7:81:51:76:af:1c:e1:2b:
         57:f2:4f:d2:ce:31:67:81:50:3c:fd:7d:ba:62:f6:f9:f8:d8:
         86:b3:f8:29:9e:69:b3:f9:c6:af:f1:a5:7d:9b:71:00:44:83:
         a4:ef:5f:a2:01:fe:9c:88:ce:59:96:fc:94:7d:13:2e:59:6b:
         16:4b:24:2a:32:3e:a0:fe:2c:fa:7b:ab:24:02:42:c6:a8:0b:
         8f:b3:37:da:24:99:80:7d:39:3a:94:d3:0b:0b:96:02:5b:f2:
         06:04:65:b5:69:88:23:bd:f4:fb:05:62:fb:3e:d0:77:bf:8b:
         91:ba:4c:e6:bc:62:3f:72:ea:74:db:47:b4:97:7f:0f:52:03:
         23:d5:76:d1:6b:e5:2f:0d:15:85:90:7e:3b:f1:6f:e7:d1:e4:
         a2:f7:cf:b8:aa:82:56:d2:1e:07:80:99:12:8d:85:35:04:b1:
         fe:96:92:f4:ec:1d:fa:54:ad:24:b1:5d:14:be:2d:44:2f:a7:
         4b:e4:ae:4e:c8:b3:57:e2:43:99:87:9a:53:97:ee:8a:26:38:
         12:d3:83:73:81:24:9e:97:5f:7c:fc:3c:95:b7:fe:89:fb:4d:
         a8:e7:25:3c:fb:8b:ad:c0:9e:43:68:61:9c:9e:9e:a5:1a:e9:
         49:d1:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:08 2026 by rpki-client