Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
File:                     3130332e3231302e33352e302f32342d3234203d3e203539313531.roa (raw, json)
Hash identifier:          tYiK/crTfBIFT43mP50CWE5Oz0vdhgTgDowq7UN7boc=
Subject key identifier:   0C:68:EA:3D:53:E0:32:B2:EF:CA:20:E6:28:BF:4F:4A:DF:DC:2B:4B
Certificate issuer:       /CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
Certificate serial:       095ACDE047F156B4BCD48EC6B7195EFD53F9A7A4
Authority key identifier: 1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa
Signing time:             Sun 03 May 2026 02:30:55 +0000
ROA not before:           Sun 03 May 2026 02:25:55 +0000
ROA not after:            Sun 02 May 2027 02:30:55 +0000
asID:                     59151
IP address blocks:        103.210.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl
                          rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:cd:e0:47:f1:56:b4:bc:d4:8e:c6:b7:19:5e:fd:53:f9:a7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C241AD1CC301E815CA4D6FA5F1BCC6606915910
        Validity
            Not Before: May  3 02:25:55 2026 GMT
            Not After : May  2 02:30:55 2027 GMT
        Subject: CN=0C68EA3D53E032B2EFCA20E628BF4F4ADFDC2B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ec:88:fc:ba:f6:f5:5b:15:86:51:63:f3:4a:
                    92:27:88:53:b4:ba:ff:a0:ba:4d:e2:15:f6:75:2b:
                    cf:9c:61:07:b0:02:e8:06:e0:f3:9e:7e:56:a7:bd:
                    5d:e6:ac:33:3c:68:b5:58:d7:49:4e:e3:f2:58:05:
                    0a:e5:82:68:8b:42:50:43:c1:fa:f3:0b:c7:4d:02:
                    09:65:cd:36:71:f9:0c:f4:c2:0e:fc:e0:9b:5d:a3:
                    85:6b:4e:b4:fc:f8:3c:db:70:7d:fc:93:b9:35:7e:
                    6a:ee:83:77:2b:52:0f:b8:bd:4e:d4:1e:a3:c2:a0:
                    48:1a:0a:1f:5f:5a:7d:ef:66:1c:4c:90:c8:e3:a3:
                    9b:08:e0:58:22:8c:ae:da:e6:56:ba:a6:b3:14:c7:
                    5c:61:d5:fe:52:19:90:10:fe:95:d1:58:31:33:d9:
                    2b:1a:b1:74:5a:5b:f2:84:ba:0c:59:39:76:6e:97:
                    8f:4a:ce:09:fa:ae:5b:13:c5:8e:93:f5:c3:1d:25:
                    65:20:8c:b3:f5:0d:6d:df:2c:00:e3:26:89:86:e4:
                    d9:1a:3f:81:3c:bd:b5:c0:0d:4f:c6:25:34:73:6f:
                    91:5f:fc:c9:4b:6d:39:c4:da:2b:23:cf:a5:4e:43:
                    19:d4:ce:87:9b:2e:14:b2:a3:80:2d:02:66:32:33:
                    51:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:68:EA:3D:53:E0:32:B2:EF:CA:20:E6:28:BF:4F:4A:DF:DC:2B:4B
            X509v3 Authority Key Identifier:
                keyid:1C:24:1A:D1:CC:30:1E:81:5C:A4:D6:FA:5F:1B:CC:66:06:91:59:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1C241AD1CC301E815CA4D6FA5F1BCC6606915910.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/48766d66-2923-4ce0-aa85-9c4988cc8ba1/0/3130332e3231302e33352e302f32342d3234203d3e203539313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:60:dc:74:cd:5f:a3:50:90:ed:a3:b7:7e:a2:24:15:5a:
         df:56:cf:eb:cc:6c:01:ce:f7:ca:09:20:d1:39:8d:17:6a:b5:
         b4:df:0b:e5:be:7d:d6:29:87:73:26:89:a4:2d:95:de:e6:3b:
         4e:5e:75:a6:60:4e:cc:1d:3c:22:43:d4:a3:a1:b2:df:1f:a8:
         c9:d4:06:dc:86:a6:58:4e:5a:16:b5:69:7d:ea:ec:d6:06:c2:
         a1:b7:77:8e:3f:64:ed:f0:b4:45:5d:82:c5:d2:1b:e4:3d:1f:
         68:d5:b0:90:e3:da:18:77:a7:08:41:ed:48:bc:08:53:87:44:
         49:e0:33:c0:05:f1:7e:66:c6:f1:d7:7a:9f:db:d6:fb:fd:02:
         31:d1:58:87:da:d9:74:11:f0:5f:81:91:45:aa:32:45:23:f2:
         dd:74:61:9f:ba:8b:95:6f:e5:e0:3b:ee:e4:45:65:cf:bb:c8:
         41:a7:23:2f:dc:b1:45:42:2d:f9:c3:3f:ea:94:85:6e:93:29:
         f8:9f:3d:b6:2a:b8:dd:06:97:a4:fb:c5:91:18:55:10:df:74:
         c8:9b:df:38:da:74:a7:ae:76:af:f4:f9:d9:be:f9:d4:29:c2:
         83:60:50:9f:6a:f1:84:a9:4f:c5:5b:fc:3e:51:b3:62:70:ad:
         9f:b0:3e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:24 2026 by rpki-client