Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          CYcQtk6Q2BGiqIh55Kes8nmVzVHDPahaB/OUEW8nJ4s=
Subject key identifier:   C6:EC:FD:F7:80:EA:C9:31:02:95:EE:CF:B6:6F:D8:E9:36:02:02:D1
Certificate issuer:       /CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
Certificate serial:       3D546B0F3A4A1C6D8F616201FFFBF114E24C12A4
Authority key identifier: 79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
Signing time:             Sun 03 May 2026 02:32:14 +0000
ROA not before:           Sun 03 May 2026 02:27:14 +0000
ROA not after:            Sun 02 May 2027 02:32:14 +0000
asID:                     136064
IP address blocks:        103.83.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl
                          rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:54:6b:0f:3a:4a:1c:6d:8f:61:62:01:ff:fb:f1:14:e2:4c:12:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=793290E7EC155FF71C44DB6468CED7985CBF2DF5
        Validity
            Not Before: May  3 02:27:14 2026 GMT
            Not After : May  2 02:32:14 2027 GMT
        Subject: CN=C6ECFDF780EAC9310295EECFB66FD8E9360202D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:91:6e:40:b4:a8:98:54:23:02:6d:ad:14:
                    4a:e1:50:8a:7c:7e:24:91:67:a5:f8:bd:b3:ea:95:
                    ea:5a:66:0a:61:f3:be:f2:a5:98:5e:e8:cc:3b:fa:
                    85:2b:13:01:49:1d:bb:6d:8b:65:db:cd:61:e7:c4:
                    4b:2b:44:d4:cc:07:90:44:67:47:e6:d5:01:ac:22:
                    5d:f7:fa:17:55:7b:e1:3d:fb:96:d3:c2:cc:d3:11:
                    ac:3f:1b:7d:c4:33:4b:f6:a2:6e:9e:19:6d:89:8a:
                    28:26:8f:7f:d5:ec:a6:1f:37:b5:fe:b6:0c:f4:80:
                    f3:50:6b:52:4f:7c:e1:43:fc:0d:b8:4c:a6:03:04:
                    da:d2:ca:40:24:f2:00:a6:79:99:68:5b:17:5e:a2:
                    31:a7:af:a0:04:5a:6a:9a:5c:d7:51:e7:00:96:89:
                    ed:f8:31:f5:1b:92:79:49:19:1e:60:e3:cd:a6:eb:
                    a0:c2:f7:76:a6:6e:76:1e:c4:34:64:86:91:c7:d2:
                    8f:24:f1:ca:8f:10:b8:8b:65:86:9e:7c:ca:2f:be:
                    ee:fe:0c:04:fa:c9:2e:ce:1a:3d:78:9e:70:44:9e:
                    d1:69:62:c4:ce:10:6a:a2:89:02:d6:f9:a4:12:50:
                    77:dc:da:51:b6:89:c6:a4:cc:36:4f:5b:50:76:be:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EC:FD:F7:80:EA:C9:31:02:95:EE:CF:B6:6F:D8:E9:36:02:02:D1
            X509v3 Authority Key Identifier:
                keyid:79:32:90:E7:EC:15:5F:F7:1C:44:DB:64:68:CE:D7:98:5C:BF:2D:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/793290E7EC155FF71C44DB6468CED7985CBF2DF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/793290E7EC155FF71C44DB6468CED7985CBF2DF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:c0:87:34:0a:8c:90:aa:fe:d0:ae:2c:72:b0:42:42:91:
         e3:54:5f:42:4c:19:f2:65:71:69:4d:cd:ba:3d:b6:ae:ad:ca:
         83:11:99:95:c6:3e:79:51:17:e5:59:2f:9b:a0:f1:2c:75:97:
         43:27:57:d9:5a:ba:ca:4a:ee:7d:ea:0b:22:5a:0a:c7:64:9c:
         7a:e7:7e:1a:c4:0f:46:33:ed:b3:b5:a4:ea:da:93:39:05:22:
         3b:3c:87:88:c5:cb:54:49:96:6d:8c:c6:bb:17:70:75:24:d9:
         30:a0:75:2d:7d:da:fe:a7:ec:62:27:9e:e6:dc:08:fd:51:7a:
         7f:3c:fc:6f:e3:a7:5e:ef:8d:14:63:7d:15:e0:10:0b:2b:69:
         f4:72:ce:25:d9:f1:c3:eb:eb:1d:de:33:cd:4e:af:17:1f:9b:
         9f:92:53:c1:dd:3d:45:fb:e0:9f:d4:c6:64:cb:41:5d:cb:56:
         21:1e:bb:18:ff:0c:46:25:a4:5d:95:b1:6f:fa:f9:99:9d:b3:
         91:78:0b:eb:8b:86:d7:28:5e:0b:0c:ad:8d:99:28:06:0a:0c:
         51:7b:cc:7a:45:00:38:d7:0d:35:e2:13:84:00:97:f9:97:c4:
         b6:20:1b:b9:89:30:de:e2:c5:07:76:b9:3a:0e:0b:a7:7f:8f:
         2a:d8:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:24 2026 by rpki-client