Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
File:                     3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (raw, json)
Hash identifier:          WSM8tOPKpAjMs/vvwDG7h6jX2tOLVHX/GCNtzKgkFc4=
Subject key identifier:   46:EC:3A:B6:36:53:7E:3D:4E:6E:1C:B6:9F:FD:2B:8E:C5:B9:9F:85
Certificate issuer:       /CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
Certificate serial:       6D28F0A27DF8B714E8481ABEC3FFCA6A81B7301B
Authority key identifier: 05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa
Signing time:             Sun 03 May 2026 02:21:22 +0000
ROA not before:           Sun 03 May 2026 02:16:22 +0000
ROA not after:            Sun 02 May 2027 02:21:22 +0000
asID:                     55664
IP address blocks:        103.236.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl
                          rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:28:f0:a2:7d:f8:b7:14:e8:48:1a:be:c3:ff:ca:6a:81:b7:30:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055B63D1B5F66B71EA3283775B07777CB0E06BCB
        Validity
            Not Before: May  3 02:16:22 2026 GMT
            Not After : May  2 02:21:22 2027 GMT
        Subject: CN=46EC3AB636537E3D4E6E1CB69FFD2B8EC5B99F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:3e:14:aa:85:13:7e:2a:c5:4d:a1:d5:32:
                    bb:c1:74:e4:29:37:57:7b:9f:c3:d9:3e:8f:09:8f:
                    00:f4:74:f0:85:82:6d:d2:d0:24:28:7a:e1:ac:ed:
                    b1:a0:38:8c:ad:f5:1c:c6:ee:37:67:68:99:fe:6a:
                    4a:8e:9d:6f:fb:1f:23:68:f7:53:ec:f3:f4:02:2e:
                    ba:b1:4f:03:50:31:b5:bb:9f:3d:56:5a:3c:d8:e2:
                    85:36:e4:e1:17:89:dc:1a:3c:ed:31:96:7b:25:3c:
                    93:c5:dd:56:05:58:e8:b3:4b:ca:ce:5e:68:9a:0c:
                    4c:b7:b6:56:85:82:9f:ec:c0:89:ad:af:38:d0:94:
                    fa:fc:2d:cf:f8:00:ca:c6:e3:b4:9b:67:e9:45:76:
                    73:c0:ca:ba:9c:88:0d:d0:38:5f:15:c3:53:1b:53:
                    64:bc:e8:f5:3f:b4:47:3a:4a:bd:f4:58:2f:99:17:
                    73:8d:89:15:84:6d:92:45:61:44:ec:5b:60:6e:0a:
                    9a:d4:46:04:9f:6b:18:33:e6:59:b6:af:32:ae:c5:
                    52:19:4f:20:2f:80:ff:9e:11:de:48:21:c7:99:d1:
                    08:04:2f:db:65:2a:9b:5f:47:78:df:3a:cb:36:cb:
                    fc:d7:d9:b6:bc:50:c3:66:09:92:cf:44:13:77:ab:
                    13:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:3A:B6:36:53:7E:3D:4E:6E:1C:B6:9F:FD:2B:8E:C5:B9:9F:85
            X509v3 Authority Key Identifier:
                keyid:05:5B:63:D1:B5:F6:6B:71:EA:32:83:77:5B:07:77:7C:B0:E0:6B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/055B63D1B5F66B71EA3283775B07777CB0E06BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/055B63D1B5F66B71EA3283775B07777CB0E06BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:d1:74:2d:75:84:5e:ee:34:dd:27:56:87:e2:9f:95:14:
         44:c8:db:77:83:b0:38:e6:29:1b:76:0f:bc:cc:d0:e8:9e:4e:
         82:82:fd:16:79:19:e1:9e:9f:9c:79:c0:0b:e8:f4:d7:34:cf:
         85:a9:de:db:fd:94:f9:a8:70:f4:36:70:dc:d0:6d:ea:6f:63:
         1d:60:1f:e2:62:ad:87:60:bd:0c:62:22:00:dd:a2:5f:0c:9b:
         e0:38:e5:58:45:dc:df:c6:df:dd:18:01:7a:0b:03:68:dd:a2:
         bc:b1:f2:31:62:67:a3:15:04:43:db:c3:ed:90:7f:39:05:42:
         6e:48:f2:87:aa:d5:54:dd:94:7f:83:18:26:f1:ef:41:eb:42:
         61:a9:b6:87:5f:22:c4:9e:a3:da:3a:52:77:0d:f6:87:7a:0f:
         af:03:46:28:67:18:36:35:46:ec:ed:a5:02:b5:fa:48:19:c8:
         c3:31:0b:25:b6:b0:39:43:df:9d:2e:3c:8c:2d:1a:82:b3:66:
         05:50:f5:34:bc:62:67:1e:18:93:9d:d9:04:53:32:e6:5a:ac:
         57:a5:99:4e:91:76:2b:20:5e:a1:71:77:62:7d:90:8a:56:17:
         cf:9d:90:3d:61:8d:f2:6c:0d:7c:13:e2:a7:42:2d:e0:5d:f2:
         54:52:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:13 2026 by rpki-client