Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa
File:                     3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier:          CtGqY694vs+5rhe29OiFriR1fCqTy1GqyZ3iimqLrsk=
Subject key identifier:   6C:15:CE:42:9F:55:5A:6B:24:C7:B4:53:AE:04:1D:98:1E:5F:EF:C9
Certificate issuer:       /CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
Certificate serial:       32DBC341889A67B9166CF61E2748A7529C782F93
Authority key identifier: 8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa
Signing time:             Sun 03 May 2026 02:20:15 +0000
ROA not before:           Sun 03 May 2026 02:15:15 +0000
ROA not after:            Sun 02 May 2027 02:20:15 +0000
asID:                     131785
IP address blocks:        103.116.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl
                          rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:c3:41:88:9a:67:b9:16:6c:f6:1e:27:48:a7:52:9c:78:2f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7
        Validity
            Not Before: May  3 02:15:15 2026 GMT
            Not After : May  2 02:20:15 2027 GMT
        Subject: CN=6C15CE429F555A6B24C7B453AE041D981E5FEFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:93:ee:c0:02:a1:2b:53:a3:3f:72:d4:4a:77:
                    70:06:b0:38:43:5a:62:23:6a:f1:95:cf:a7:21:3e:
                    a5:cf:8f:c6:d8:c9:ba:49:be:27:d9:4e:71:6c:ea:
                    6b:68:2d:e9:6b:a1:17:14:ad:d8:a9:61:f9:85:60:
                    41:6e:38:8e:89:17:3b:92:53:1b:f7:5c:b3:7d:3f:
                    c8:4f:79:0c:a1:ac:52:88:9b:a6:38:2d:ef:00:50:
                    bd:f0:23:45:1c:36:10:3e:27:fb:c4:2e:15:f2:ac:
                    17:78:71:3b:7e:05:ee:a0:a2:03:b6:c8:df:01:6c:
                    8d:fb:70:f0:09:f5:86:e7:eb:7e:04:a1:b6:43:47:
                    b6:8a:13:58:0f:9a:1e:8d:0f:de:99:91:6c:01:48:
                    30:cb:11:97:23:a3:f4:00:24:6a:e2:2d:a6:b8:ef:
                    91:82:e3:a9:fa:6f:bb:9a:e7:fb:66:94:cc:ff:99:
                    20:ce:ee:1e:9a:eb:d4:73:0b:92:a9:e1:7f:8d:25:
                    0e:2d:87:c0:17:58:bc:24:32:d1:56:bf:93:b6:61:
                    5a:5e:c3:79:b1:88:ee:f3:2a:2a:4a:1b:9a:a0:bf:
                    9c:f3:e7:de:17:f0:da:b0:c8:b7:01:83:c9:db:a2:
                    66:1c:e6:47:2c:69:a0:20:13:a3:ca:81:96:f7:d5:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:15:CE:42:9F:55:5A:6B:24:C7:B4:53:AE:04:1D:98:1E:5F:EF:C9
            X509v3 Authority Key Identifier:
                keyid:8C:A8:A6:68:A2:40:DF:7B:15:FB:C3:E4:51:6A:84:08:BB:DC:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8CA8A668A240DF7B15FBC3E4516A8408BBDC47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3131362e3130382e302f32342d3234203d3e20313331373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:54:0d:cc:6e:ac:10:fb:20:16:d5:f2:34:00:f6:a5:88:
         6a:86:c4:6a:53:a3:8a:01:4b:03:63:ef:a8:5c:8a:fb:40:cd:
         0c:f4:30:d9:fd:4a:9d:c7:45:e6:3c:aa:ee:0c:3b:88:e9:c3:
         e7:86:95:be:f3:a4:ea:5d:8a:cb:6c:6a:cf:09:7e:22:2c:57:
         a1:25:19:f3:ec:fb:9b:90:9d:de:db:5a:23:3e:50:a1:e4:36:
         af:64:c2:49:f4:94:bc:5c:6d:e1:98:6c:75:4e:49:5a:41:fb:
         11:e7:09:ad:65:0a:cc:9b:c9:0b:cd:f0:92:90:de:69:0e:11:
         d2:f9:dd:2b:50:d5:7a:63:14:c7:af:cc:dd:d0:20:3c:02:d7:
         39:aa:ab:67:89:6d:4d:13:ab:e5:10:b6:fe:f9:cc:58:e9:50:
         83:94:cb:95:68:a9:18:88:13:8b:06:ab:04:5b:8f:21:39:b5:
         ff:ca:17:0c:c4:c0:3f:20:74:5e:aa:24:47:0d:df:89:6c:a5:
         5f:e6:85:ec:d8:c5:f5:d2:a1:bb:d7:f2:8f:74:9d:a7:78:28:
         26:d8:f9:a6:e7:76:2c:18:95:25:ec:39:b9:7a:4b:dd:31:64:
         f1:cd:03:d0:3b:43:11:15:a3:c3:5d:90:45:ce:bb:79:6e:52:
         5f:12:49:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:38 2026 by rpki-client