Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa
File:                     3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa (raw, json)
Hash identifier:          Cl+3Yo+bu8lAW/IU+MoES7T3F7PhgakZcVRu4FSP59E=
Subject key identifier:   2C:2C:19:D7:01:7B:01:58:54:21:F7:70:82:04:34:D1:82:B8:13:0B
Certificate issuer:       /CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
Certificate serial:       40EAA860502FEC7E8E02F958AC4B1233B11DE695
Authority key identifier: B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa
Signing time:             Sun 03 May 2026 02:29:41 +0000
ROA not before:           Sun 03 May 2026 02:24:41 +0000
ROA not after:            Sun 02 May 2027 02:29:41 +0000
asID:                     137289
IP address blocks:        103.51.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl
                          rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ea:a8:60:50:2f:ec:7e:8e:02:f9:58:ac:4b:12:33:b1:1d:e6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6DA684E4480935A95E6F3373CCDACAA99B8883C
        Validity
            Not Before: May  3 02:24:41 2026 GMT
            Not After : May  2 02:29:41 2027 GMT
        Subject: CN=2C2C19D7017B01585421F770820434D182B8130B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:ac:e4:46:4a:23:30:e4:a3:e8:7d:7f:b6:
                    9b:11:d8:cc:03:69:21:13:dc:c8:77:87:b1:73:08:
                    17:c8:76:e2:f6:74:23:58:c2:97:6a:39:13:45:0c:
                    9d:c8:34:cd:85:de:2a:6e:71:34:fd:13:64:c6:c2:
                    a8:a7:e0:81:0b:79:95:5a:27:45:81:5e:da:5f:4e:
                    b4:2d:92:48:d3:ac:bf:7d:1b:d3:d7:87:65:12:1e:
                    15:89:88:31:54:54:84:56:5f:d4:3c:a6:a3:34:b6:
                    0f:e6:81:02:2c:be:8b:29:13:10:2c:3d:f3:89:19:
                    9f:c3:6c:ee:7f:31:71:2d:b3:ab:dc:96:a0:5e:2d:
                    7e:c3:b1:fb:72:2b:17:90:58:49:1c:99:2d:2c:59:
                    05:12:53:df:4c:03:fd:6c:d2:dc:f1:6e:32:7e:95:
                    88:4e:bb:89:a7:af:57:c6:e8:18:3f:82:ed:de:46:
                    91:87:d0:d0:33:fb:29:56:94:fa:6d:aa:a5:bc:6e:
                    e0:91:8b:b6:e2:98:2b:20:a7:56:3a:d0:69:7a:38:
                    51:35:a6:2d:9b:c8:7b:23:a2:07:89:b6:61:80:e7:
                    2b:2c:ba:4d:c9:3d:2a:1f:a8:fe:14:fc:de:81:3c:
                    58:a2:4e:b2:23:b8:75:09:4a:92:e4:29:46:94:7d:
                    e7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2C:19:D7:01:7B:01:58:54:21:F7:70:82:04:34:D1:82:B8:13:0B
            X509v3 Authority Key Identifier:
                keyid:B6:DA:68:4E:44:80:93:5A:95:E6:F3:37:3C:CD:AC:AA:99:B8:88:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/B6DA684E4480935A95E6F3373CCDACAA99B8883C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B6DA684E4480935A95E6F3373CCDACAA99B8883C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/3130332e35312e3130362e302f32342d3234203d3e20313337323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:9c:00:c0:88:38:1f:c9:c3:52:00:1b:72:9e:5b:4c:01:b0:
         81:76:2a:c0:6b:cf:50:bc:dc:17:64:3e:52:56:f4:f1:8c:62:
         c1:1c:c8:85:53:5d:e9:e8:91:5e:03:9b:9e:ca:04:9c:77:fd:
         81:ff:f0:bb:2d:31:a0:c2:15:fe:71:e4:c5:95:fb:d7:02:6d:
         c4:1b:c7:0a:d2:de:5b:3a:4c:d0:26:ee:d3:3e:de:e1:66:fb:
         e7:7d:78:67:1b:ec:23:95:ba:2e:58:09:88:f5:2f:3a:78:83:
         ba:ed:c0:0e:02:d0:c8:ac:6f:b9:6f:a1:dd:40:fc:f0:78:c3:
         31:0c:19:40:52:c6:4f:c0:19:22:34:bd:4e:53:c2:42:fe:41:
         da:85:d8:35:67:d6:3c:03:d0:e9:56:5c:a5:35:a5:b8:91:0d:
         08:51:2a:87:b3:b4:9f:6b:bc:87:f8:67:04:9c:ea:9c:20:85:
         ca:f6:32:b0:bc:8a:aa:15:4c:af:2d:52:7b:bd:b8:d6:94:55:
         83:99:75:84:26:2c:d1:c6:26:29:18:16:25:f8:e6:e3:4b:fc:
         f6:a2:d6:da:8f:cb:3f:63:95:d9:63:84:c8:b0:2c:10:71:ca:
         8e:43:5e:a8:9a:fc:47:f1:51:5c:7a:44:0c:64:95:9a:97:70:
         70:ea:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:49 2026 by rpki-client