Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
File:                     3130332e362e33342e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=
Subject key identifier:   F9:95:A9:E0:D1:BB:1E:C5:06:86:1D:AF:7F:6A:B6:B8:FC:E5:3A:BE
Certificate issuer:       /CN=412965964A4E12BD59BDF602A054F3394E99DC57
Certificate serial:       3C643A77EEF0DB5AC92B951CD16015A7B424D53A
Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
Signing time:             Sun 03 May 2026 02:19:22 +0000
ROA not before:           Sun 03 May 2026 02:14:22 +0000
ROA not after:            Sun 02 May 2027 02:19:22 +0000
asID:                     132634
IP address blocks:        103.6.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl
                          rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:64:3a:77:ee:f0:db:5a:c9:2b:95:1c:d1:60:15:a7:b4:24:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57
        Validity
            Not Before: May  3 02:14:22 2026 GMT
            Not After : May  2 02:19:22 2027 GMT
        Subject: CN=F995A9E0D1BB1EC506861DAF7F6AB6B8FCE53ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:97:99:4f:c6:c6:f1:5c:09:09:0c:c9:51:73:
                    ec:57:1e:56:73:42:cd:03:30:2c:a0:09:ff:3a:8b:
                    33:e7:29:99:16:74:cd:7a:54:70:07:8e:d3:0b:8c:
                    16:46:42:57:fb:32:0c:fc:b4:50:14:db:35:52:0f:
                    2f:15:b2:8f:77:e2:b3:17:2e:3f:67:4a:68:41:74:
                    6a:c2:e9:ce:d1:49:58:4d:6e:34:eb:58:5c:4b:ab:
                    e8:c0:d2:5b:e9:11:0a:29:16:27:5b:63:7c:f4:8f:
                    d8:f8:43:4f:83:15:63:2d:14:ca:89:56:4c:34:8b:
                    c0:d2:94:a0:97:ef:5f:2f:18:ce:75:49:27:11:65:
                    20:2e:7b:ef:5b:63:3e:de:8c:ba:f3:fa:32:cf:ad:
                    20:57:c0:8f:76:8f:dc:91:1c:45:c5:93:39:66:1f:
                    ac:28:71:32:33:09:ae:63:3d:56:e1:35:9a:44:ce:
                    7a:d9:b1:6c:81:a8:5f:ba:6b:73:0a:61:d8:7b:35:
                    31:72:71:de:a9:87:ec:10:55:0d:21:a5:ad:d3:25:
                    75:be:7a:47:a7:0a:db:4c:09:a3:e5:4e:8e:68:4c:
                    7d:29:53:5c:34:2c:37:4f:f4:53:7c:d7:47:ad:35:
                    fe:f1:88:fa:98:6a:fe:0a:75:06:b9:0b:62:94:d0:
                    b6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:95:A9:E0:D1:BB:1E:C5:06:86:1D:AF:7F:6A:B6:B8:FC:E5:3A:BE
            X509v3 Authority Key Identifier:
                keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a1:ee:a1:97:7c:8c:eb:3c:60:d0:c9:ea:fb:ee:1b:39:4f:
         09:b3:f4:77:ed:54:20:0f:3d:41:68:99:e1:3f:c0:c3:2f:bc:
         b1:fc:e1:bd:4d:c2:31:2d:ce:3b:74:ff:e9:02:e9:4b:a6:86:
         aa:5d:10:24:d9:ba:38:91:e3:af:d1:fd:a8:fc:be:c4:f6:48:
         b1:d7:e3:d6:c1:3e:a3:cd:d3:8b:5f:12:18:01:75:6f:dd:9f:
         66:65:59:e5:e5:9e:bf:65:56:81:b1:70:e7:56:93:89:0b:fa:
         ae:c3:6e:89:4f:7f:64:58:5c:e8:95:a8:e1:f8:1e:c2:4d:fc:
         10:6d:ef:db:26:ee:1c:0d:79:b4:31:2d:7c:51:8e:8a:83:cb:
         ca:34:8e:ed:c5:61:65:04:cb:0a:7f:d2:31:08:e1:4b:f4:c1:
         1e:5a:c1:d7:6d:75:e2:37:e3:1c:76:26:df:1f:49:47:d0:24:
         a9:f8:70:f4:c6:08:0b:68:73:8d:eb:b3:88:9e:29:16:5c:0c:
         04:11:4e:82:02:e3:81:a3:d4:72:4b:7b:28:12:3a:e3:6e:45:
         f2:f3:58:44:e7:d5:3f:60:64:b7:c7:dd:3d:89:76:cb:50:d8:
         b1:d7:62:2d:e7:6f:f5:2d:dd:b9:be:ad:d9:95:b0:3e:5b:fa:
         03:b7:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:59 2026 by rpki-client