Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3233203d3e20313531353732.roa
File:                     3130332e36302e38382e302f32332d3233203d3e20313531353732.roa (raw, json)
Hash identifier:          uH7wCiM64P68t/GjuIUuXpirB813LNqvCv6j5LUhOUQ=
Subject key identifier:   14:14:3A:37:93:60:61:70:71:D3:15:88:D0:AB:9E:B2:E8:1C:5E:E8
Certificate issuer:       /CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
Certificate serial:       41C3670FD0E1985E7952DB6B50D7A608481401DD
Authority key identifier: 0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3233203d3e20313531353732.roa
Signing time:             Sun 03 May 2026 02:34:24 +0000
ROA not before:           Sun 03 May 2026 02:29:24 +0000
ROA not after:            Sun 02 May 2027 02:34:24 +0000
asID:                     151572
IP address blocks:        103.60.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl
                          rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:c3:67:0f:d0:e1:98:5e:79:52:db:6b:50:d7:a6:08:48:14:01:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6
        Validity
            Not Before: May  3 02:29:24 2026 GMT
            Not After : May  2 02:34:24 2027 GMT
        Subject: CN=14143A379360617071D31588D0AB9EB2E81C5EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:6b:87:c4:7c:cf:2e:65:af:8f:0e:15:6d:
                    2e:0e:b6:5e:90:57:c0:bd:49:9c:30:21:5a:ff:fd:
                    4c:bb:2b:4d:d7:fa:75:b2:1d:d2:2d:7c:9f:03:d2:
                    59:02:cd:ed:23:ed:1c:e9:18:b3:37:56:1e:67:be:
                    ab:5e:20:d0:4c:25:b8:31:a2:51:23:63:cd:68:62:
                    e3:f8:bc:52:86:1a:9e:bf:ae:fc:eb:8f:df:88:9d:
                    18:78:a0:ed:72:46:59:4c:35:6e:79:d3:9f:eb:45:
                    7b:0e:fe:e2:26:01:73:5a:1e:1d:a3:1a:e3:4b:34:
                    6c:18:2b:ff:2b:92:4f:fb:5d:e9:39:aa:79:e7:02:
                    bb:4b:d2:a0:92:93:41:55:2d:f1:e1:11:31:8d:97:
                    94:eb:30:7e:fc:b0:a3:21:82:dd:28:7a:a5:00:de:
                    d2:0c:69:f3:95:31:59:ad:2b:22:cc:19:69:78:f5:
                    38:e7:56:71:da:48:9f:88:e6:b8:37:9a:65:6c:5d:
                    5b:c4:49:f6:80:56:4a:ef:53:8a:b5:66:d7:82:4a:
                    d7:7f:78:2a:3e:ee:21:42:af:d4:df:76:41:df:1d:
                    aa:40:1e:1f:9c:7b:ef:64:a6:ed:f5:a8:14:5b:5f:
                    d6:18:91:95:44:fa:59:83:48:2d:e9:79:da:89:64:
                    5c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:3A:37:93:60:61:70:71:D3:15:88:D0:AB:9E:B2:E8:1C:5E:E8
            X509v3 Authority Key Identifier:
                keyid:0B:6D:FC:81:F6:A5:A4:C5:1C:93:36:05:0C:F9:C6:7E:BE:28:F2:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B6DFC81F6A5A4C51C9336050CF9C67EBE28F2F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/3130332e36302e38382e302f32332d3233203d3e20313531353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:36:42:94:7d:a6:bd:8c:15:83:49:24:64:da:e3:7a:ec:
         ac:f8:ed:78:79:fa:05:c2:f5:0e:fd:d1:61:39:84:64:bc:9b:
         7d:2d:90:55:e3:71:c9:24:18:a9:8c:5c:c3:39:c4:bf:05:5b:
         73:69:60:1e:9c:04:8b:b3:f6:8b:64:00:69:6b:5b:13:c6:07:
         44:9c:fe:af:7b:85:e3:ff:11:c7:d4:15:fa:d6:87:4f:e9:c7:
         06:0f:0d:a4:bb:d9:62:86:31:31:46:2f:2d:42:ce:7c:bd:30:
         97:34:cf:ca:9d:c0:0c:04:87:88:91:cd:bf:ce:8d:41:a9:e0:
         b1:5c:08:38:3c:f9:a4:eb:46:a3:b7:92:52:8e:5a:ec:ed:b5:
         80:c7:b8:b5:fb:00:f6:3d:07:db:bf:d1:c1:de:f3:21:9b:12:
         f7:75:ae:d0:09:98:fc:35:a6:88:9b:89:1b:ac:a2:4e:ee:ed:
         5e:36:90:4a:2d:04:70:49:d1:2c:61:ee:d0:13:37:9d:02:97:
         48:41:d5:09:9d:b5:72:4b:24:7f:4f:90:61:87:95:1a:90:c6:
         a0:6b:ba:ae:ee:16:64:09:a1:fe:12:61:cb:27:4c:4b:69:b1:
         19:d6:d9:cd:9f:7d:a2:92:d7:d4:86:3f:6b:82:7c:74:fa:53:
         42:0f:b6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:32 2026 by rpki-client