Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
File:                     3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (raw, json)
Hash identifier:          jPAnnqmUSZKCOHdAErpqklofojiM1qCv7SQs+xi8fCw=
Subject key identifier:   6D:2B:F8:2B:F8:28:05:BE:90:4E:24:BE:E0:87:FA:B9:7F:BD:F3:A3
Certificate issuer:       /CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9
Certificate serial:       36129CE307E2C28E24CB7DAE3DB296D072E26281
Authority key identifier: D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa
Signing time:             Sun 03 May 2026 02:31:05 +0000
ROA not before:           Sun 03 May 2026 02:26:05 +0000
ROA not after:            Sun 02 May 2027 02:31:05 +0000
asID:                     64297
IP address blocks:        103.77.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl
                          rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:12:9c:e3:07:e2:c2:8e:24:cb:7d:ae:3d:b2:96:d0:72:e2:62:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83D6E3A344960D91E10884AA1CEE3A3461E1BF9
        Validity
            Not Before: May  3 02:26:05 2026 GMT
            Not After : May  2 02:31:05 2027 GMT
        Subject: CN=6D2BF82BF82805BE904E24BEE087FAB97FBDF3A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f5:19:d9:0d:e5:6e:f5:e4:1e:06:b6:f1:ac:
                    d0:9a:22:f8:75:41:76:31:92:6d:93:b6:51:75:dc:
                    34:15:ba:ac:4b:36:f1:9c:85:6c:88:53:df:41:7f:
                    7e:20:55:96:46:45:c4:00:70:aa:74:76:06:f8:fc:
                    87:81:6b:d7:30:37:04:db:8a:db:5b:b6:c1:86:da:
                    0a:48:85:d1:4b:f3:1e:77:d8:dd:53:e7:01:53:7c:
                    d5:85:a7:a5:16:58:ef:39:bc:44:d2:9b:b8:3d:c3:
                    bc:67:50:69:cb:a0:0f:e0:73:11:da:a9:f8:03:eb:
                    9e:65:f7:ad:2d:2b:69:fa:41:55:a5:4c:7b:39:e6:
                    a3:a1:a2:c6:a4:d7:0e:dc:7a:fe:48:f7:4c:ec:5e:
                    52:b3:aa:e8:ab:77:e7:be:29:b4:70:6b:cb:e3:97:
                    f2:2c:3f:6b:74:ee:03:fc:cc:dc:53:46:74:32:be:
                    59:7e:7b:f0:f4:59:20:64:4e:b9:00:e4:59:ed:1f:
                    56:d1:df:6a:5c:1c:c0:d3:e7:91:50:d6:ad:df:82:
                    85:31:74:50:5c:ab:c3:60:c8:56:05:6a:01:ca:b0:
                    0c:6b:94:56:fc:db:1a:47:2a:5f:a4:44:fa:69:0c:
                    54:94:2e:4e:51:a4:01:b5:50:d9:e4:81:42:f8:75:
                    f8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:F8:2B:F8:28:05:BE:90:4E:24:BE:E0:87:FA:B9:7F:BD:F3:A3
            X509v3 Authority Key Identifier:
                keyid:D8:3D:6E:3A:34:49:60:D9:1E:10:88:4A:A1:CE:E3:A3:46:1E:1B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D83D6E3A344960D91E10884AA1CEE3A3461E1BF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/3130332e37372e3230362e302f32342d3234203d3e203634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:51:62:3b:75:9c:5b:71:60:60:6a:d1:73:62:c6:96:62:66:
         b7:e8:bb:15:cc:73:d4:27:f8:8c:62:de:6d:53:e3:10:cd:90:
         11:8d:67:14:2f:43:f9:ec:5a:fc:c8:9f:d9:f9:dc:b3:7c:77:
         e5:7d:df:f0:b0:cf:ef:73:26:fd:cd:07:46:7d:8d:a3:45:16:
         93:72:78:3a:77:50:dc:4f:09:eb:a4:8e:8f:21:2d:80:03:34:
         a0:8e:6e:6a:3e:93:97:6a:53:19:59:0b:1e:14:8b:6f:6e:eb:
         20:a7:31:20:de:0b:48:21:b4:18:9a:37:14:82:ad:34:a3:d2:
         6c:1d:bd:84:ab:d2:e8:30:d6:33:0b:b9:b6:8b:2b:f8:f8:64:
         79:21:f9:53:ea:22:00:21:3d:31:6e:f0:55:97:25:a7:76:51:
         dd:75:72:3d:22:2c:fc:07:ab:d2:2e:49:5c:1c:cd:eb:6a:54:
         88:ca:7f:f2:bc:04:ce:81:11:b3:3f:85:17:58:40:ad:df:0b:
         ad:d1:da:e0:7c:08:90:62:92:70:44:9c:0d:73:dd:61:47:39:
         e0:f4:1f:18:2b:b7:61:d2:79:67:48:e5:e9:6d:6e:ed:a3:cc:
         e3:a5:e3:5c:a3:77:e4:d8:7b:01:ba:cb:e4:88:c7:a1:a5:74:
         95:b0:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:16 2026 by rpki-client