Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32322d3232203d3e203538353033.roa
File:                     3130332e362e3230342e302f32322d3232203d3e203538353033.roa (raw, json)
Hash identifier:          +4f95yT7HYIcHP5KdqwSiBUeBGne1YJwPDKkI/nqfYk=
Subject key identifier:   75:A7:BF:14:45:AF:AC:E5:64:BD:C6:BF:D5:38:08:95:E7:AA:9D:E5
Certificate issuer:       /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
Certificate serial:       4A70ED803763CA72C96C8A3ED3CBF6E9F5D2F506
Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32322d3232203d3e203538353033.roa
Signing time:             Sun 03 May 2026 02:34:52 +0000
ROA not before:           Sun 03 May 2026 02:29:52 +0000
ROA not after:            Sun 02 May 2027 02:34:52 +0000
asID:                     58503
IP address blocks:        103.6.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl
                          rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:70:ed:80:37:63:ca:72:c9:6c:8a:3e:d3:cb:f6:e9:f5:d2:f5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
        Validity
            Not Before: May  3 02:29:52 2026 GMT
            Not After : May  2 02:34:52 2027 GMT
        Subject: CN=75A7BF1445AFACE564BDC6BFD5380895E7AA9DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:31:3b:72:09:6c:1f:34:f1:02:43:6e:7d:
                    d4:2a:81:45:71:04:c6:ef:60:33:54:3d:4c:bf:39:
                    f3:a7:04:09:7b:7e:da:09:f6:7b:ac:8a:6c:8d:46:
                    c7:77:d2:ed:50:db:2b:f4:bf:3f:e8:e3:8b:88:83:
                    f2:60:65:36:61:c4:56:00:3f:1e:38:58:fa:bf:85:
                    15:36:14:cb:a2:39:91:37:38:64:a3:d2:aa:2e:95:
                    c9:a9:96:c8:f1:4c:af:3d:ff:07:d5:a8:d5:fb:48:
                    c0:c2:33:66:79:a4:e8:18:84:10:f6:fc:07:ae:c9:
                    32:a7:87:d2:55:9f:2f:f4:6a:35:cf:f0:1d:2d:c0:
                    d8:d1:bd:66:ca:8c:db:aa:80:cb:49:6e:13:ea:69:
                    aa:29:11:8a:90:3e:03:61:06:4a:69:b9:51:db:7e:
                    e4:df:4b:8e:8d:bf:b3:30:85:b0:2b:fe:85:23:96:
                    c9:57:54:8b:e2:15:ed:27:0e:66:77:fb:c1:34:fa:
                    d2:88:c5:37:01:cd:0f:07:24:49:b9:e4:c5:9e:ea:
                    4a:96:fc:2f:6c:80:90:3e:c4:c4:07:e0:ca:ac:e3:
                    22:d1:02:b7:1f:40:f3:ae:d3:3e:69:33:e4:b7:56:
                    f6:6a:ef:7a:9d:74:2e:57:87:e1:aa:2a:8e:ae:ed:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A7:BF:14:45:AF:AC:E5:64:BD:C6:BF:D5:38:08:95:E7:AA:9D:E5
            X509v3 Authority Key Identifier:
                keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32322d3232203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:8b:f7:e2:87:81:c1:ff:35:d7:6b:e2:a8:30:bf:65:1b:db:
         bf:57:93:5e:f8:d1:19:71:ee:c5:cd:31:ba:bb:85:ac:d6:13:
         0f:1c:9f:4b:9c:bc:2e:34:a3:70:98:ba:07:3e:76:6f:41:28:
         6e:d3:a9:82:d0:a3:0a:41:85:e6:6e:04:94:a6:90:72:53:b2:
         88:2f:b0:39:37:8f:42:90:ff:c1:be:af:af:2a:30:a1:51:b1:
         e8:15:95:a2:30:c3:21:00:92:22:a5:ba:e5:ef:57:cd:2b:96:
         d9:eb:fb:e9:ba:41:a6:2f:50:8f:d1:2b:01:a0:6b:87:94:99:
         9d:ff:1d:d8:fd:dc:f3:b3:c6:0e:7d:e5:1b:17:3d:36:74:88:
         18:68:ae:b8:fc:89:d3:73:07:c3:78:6f:38:91:62:23:91:0e:
         86:98:f7:d7:a0:22:5c:49:67:29:e8:fb:c5:c9:08:15:ec:a1:
         57:20:61:c3:03:0e:38:14:32:b5:c1:11:e8:8b:86:7e:34:e0:
         11:d1:0f:50:3d:ba:7f:f9:44:f1:0d:66:7f:53:d5:91:25:17:
         50:59:68:6d:70:c5:aa:54:51:e7:b9:c4:85:77:df:24:e0:1e:
         49:dd:84:c7:bc:c7:8f:20:05:16:e1:60:40:56:78:ce:98:b2:
         72:4e:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:27:45 2026 by rpki-client