Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa
File:                     3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa (raw, json)
Hash identifier:          Zn62f1fBkgDvG3W52DfKvheKU31p9VTPEEMoYm0lHJA=
Subject key identifier:   D3:0B:26:24:4C:12:70:1D:A3:4F:15:9A:C6:43:AF:90:11:A7:7A:E5
Certificate issuer:       /CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
Certificate serial:       5BE1C3237275B9532D4CF166B7536BFB9E3BDDA7
Authority key identifier: 1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa
Signing time:             Sun 03 May 2026 02:23:32 +0000
ROA not before:           Sun 03 May 2026 02:18:32 +0000
ROA not after:            Sun 02 May 2027 02:23:32 +0000
asID:                     136888
IP address blocks:        103.106.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl
                          rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e1:c3:23:72:75:b9:53:2d:4c:f1:66:b7:53:6b:fb:9e:3b:dd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EDD1B42D44367E3FCDD1648F66A1076C95105A6
        Validity
            Not Before: May  3 02:18:32 2026 GMT
            Not After : May  2 02:23:32 2027 GMT
        Subject: CN=D30B26244C12701DA34F159AC643AF9011A77AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:12:2b:5a:dd:97:12:01:25:08:5f:9d:d2:
                    7b:ba:f7:43:82:fe:2a:30:83:d9:ac:e5:69:dc:7f:
                    b0:f9:ad:59:5a:7b:00:02:63:60:be:72:ed:a3:b4:
                    a4:b0:7e:e6:8a:f9:61:92:7f:7d:cd:c4:2c:47:a4:
                    af:d4:fd:d3:83:3b:39:4e:12:28:0d:16:d0:de:d8:
                    93:05:84:6d:34:b5:45:1d:ed:8c:04:d5:a8:30:46:
                    85:50:c7:0a:9e:3d:0d:e9:44:70:7d:b6:cd:74:d0:
                    4e:b9:e5:e2:ae:70:44:7e:fd:3c:05:1e:25:df:5f:
                    74:b4:1d:07:47:8a:49:f5:56:25:32:5e:6f:2a:03:
                    6b:79:83:96:05:26:06:06:8c:b3:b3:e1:d1:08:ca:
                    81:37:06:ca:56:c0:48:fc:2b:be:e0:e8:41:5c:b9:
                    3a:91:64:59:40:ef:5b:16:6e:a7:22:22:6f:2b:68:
                    c7:10:2d:e7:5c:9c:a9:87:0d:0d:c1:6d:62:21:bf:
                    1b:4f:17:23:33:93:7b:87:38:37:05:f2:09:cb:8d:
                    82:8b:76:ac:20:a6:35:4d:a1:c5:e1:48:04:15:4f:
                    28:57:b7:64:ae:af:68:cf:47:54:e8:af:5e:65:cd:
                    c5:e1:df:3d:20:82:50:7f:2b:8b:dc:2c:b6:80:98:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0B:26:24:4C:12:70:1D:A3:4F:15:9A:C6:43:AF:90:11:A7:7A:E5
            X509v3 Authority Key Identifier:
                keyid:1E:DD:1B:42:D4:43:67:E3:FC:DD:16:48:F6:6A:10:76:C9:51:05:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EDD1B42D44367E3FCDD1648F66A1076C95105A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2fbd7cf6-f55a-4b78-a588-d9261f15f763/0/3130332e3130362e3137342e302f32342d3234203d3e20313336383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:81:2c:04:19:f9:eb:71:ff:5e:bb:14:4f:1b:6f:06:86:
         61:cd:a4:e8:f2:4d:a1:de:62:9b:cc:da:ce:bf:eb:7e:2f:79:
         94:9c:ae:0c:d8:40:79:a4:f2:10:35:9d:fb:0c:af:f0:52:2d:
         0a:d9:ef:5e:38:99:b8:27:f4:92:5f:71:05:67:80:d4:a7:1b:
         8a:c8:2d:75:47:be:f7:ca:9b:71:37:28:bf:25:ea:08:d9:0c:
         33:23:d0:84:82:a5:4f:a8:96:62:3c:58:fb:7a:5e:75:a6:10:
         8d:a3:2f:92:d0:9e:30:f8:ed:92:7c:05:c9:50:7a:c0:61:52:
         b6:60:f0:b9:29:28:2b:85:bc:07:69:8c:e7:e3:10:7a:e3:6e:
         c0:81:49:61:b4:a2:96:af:b3:69:69:5b:cb:7a:f1:f2:d4:1c:
         94:f3:b7:31:28:ba:40:ae:98:c3:87:9d:1c:33:7b:a1:1c:74:
         64:31:56:09:6c:cc:70:40:d8:9b:81:b2:d7:63:e1:43:fd:9f:
         ba:8e:ae:37:a5:2b:8d:1b:ec:cf:bb:f3:d6:97:68:4b:3a:77:
         20:73:7b:bd:d4:7b:9f:9a:e7:cb:02:df:65:77:e0:46:54:cd:
         d1:fb:de:f4:90:02:85:43:a1:66:34:2b:99:f0:30:ee:90:0c:
         2c:df:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:48 2026 by rpki-client