Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32342d3234203d3e203538353033.roa
File:                     3130332e362e3230342e302f32342d3234203d3e203538353033.roa (raw, json)
Hash identifier:          VYY0EPTRFVeNS0xmpURLR8nmiyrU+iv53Ydi6p2WVWU=
Subject key identifier:   DB:D8:0D:8E:B2:48:07:00:48:BC:57:9C:1D:D5:F5:A1:A1:C1:E9:74
Certificate issuer:       /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
Certificate serial:       0B84106F74A42F9867DE75F02AEB5D99907693C8
Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32342d3234203d3e203538353033.roa
Signing time:             Sun 03 May 2026 02:34:51 +0000
ROA not before:           Sun 03 May 2026 02:29:51 +0000
ROA not after:            Sun 02 May 2027 02:34:51 +0000
asID:                     58503
IP address blocks:        103.6.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl
                          rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:84:10:6f:74:a4:2f:98:67:de:75:f0:2a:eb:5d:99:90:76:93:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
        Validity
            Not Before: May  3 02:29:51 2026 GMT
            Not After : May  2 02:34:51 2027 GMT
        Subject: CN=DBD80D8EB248070048BC579C1DD5F5A1A1C1E974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:66:b0:f7:07:27:52:e2:83:e3:0e:7b:e2:5b:
                    e6:ac:f0:58:89:85:25:45:99:22:e8:c7:54:df:2a:
                    43:78:1a:4d:0d:b5:42:2e:9d:4e:1d:11:3e:c1:dd:
                    8a:fa:03:a4:fc:e8:4c:4a:4a:3a:c8:35:5a:22:2f:
                    65:0c:80:b1:e7:0a:08:bc:48:8d:b9:6f:62:bb:c0:
                    1c:d7:7f:ff:39:29:6d:81:96:51:be:c3:ec:24:ac:
                    4a:46:97:f6:50:63:46:25:2b:5e:a0:76:eb:49:e6:
                    68:d3:34:2b:07:15:ec:a0:e2:e3:c4:8a:9c:d8:d6:
                    c4:b4:52:a2:b1:d9:fb:2d:90:b6:0b:f6:3d:95:cb:
                    ee:90:ad:75:da:a8:3b:de:19:2a:f0:0b:9c:c3:bc:
                    fa:e3:31:8d:13:41:9c:57:4a:80:81:d0:0e:f6:8b:
                    87:5f:25:3d:a4:5c:0c:1f:cc:04:9e:99:07:98:95:
                    bb:ec:fc:c9:02:6d:4e:cd:71:cc:d4:3a:8b:83:33:
                    2e:bf:d5:44:de:37:ac:7c:af:2c:48:71:d2:5f:8b:
                    b7:f4:c1:2a:f6:f5:eb:4b:6f:38:eb:1a:6a:23:de:
                    14:42:0f:57:ce:3b:b8:c1:8d:1a:45:6e:1a:2a:48:
                    4c:d2:ae:1a:2e:5c:03:48:64:bd:f7:51:8f:10:9e:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:0D:8E:B2:48:07:00:48:BC:57:9C:1D:D5:F5:A1:A1:C1:E9:74
            X509v3 Authority Key Identifier:
                keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230342e302f32342d3234203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:55:5f:62:7b:9f:5a:9b:ad:c7:dc:f5:48:9c:b4:53:50:a8:
         38:5c:7e:69:ba:91:b0:03:bd:3b:6d:f0:ed:e4:1d:94:18:ac:
         e1:41:78:18:27:8e:28:27:52:bc:98:be:f1:f6:e5:b6:30:51:
         b8:c7:bc:f9:ac:44:39:22:d5:6d:ab:b1:79:59:36:11:88:7d:
         b6:07:6c:1f:de:d6:bf:f8:f6:bd:4c:a2:f2:cb:bb:52:ba:a8:
         7b:6e:9a:d3:8e:ec:a8:a2:62:e0:54:8e:9e:d8:c6:9d:ea:e8:
         89:77:52:9e:cd:4f:64:a6:13:ff:7d:24:f8:60:99:7a:c6:5d:
         af:9e:97:da:68:c3:91:47:fa:0d:3a:8a:1c:2b:1a:83:d5:80:
         74:cb:34:c0:17:6e:7b:52:56:22:b8:fb:5e:c4:e8:95:a3:33:
         03:02:59:30:c7:6d:79:c9:64:70:98:76:2b:9f:51:2c:a5:08:
         04:e1:b9:76:87:5d:5b:0c:02:80:05:8f:3e:03:d3:d6:ad:ce:
         42:a4:b0:1d:72:eb:0f:a6:15:39:64:bf:f7:c8:75:97:ac:8e:
         f7:9b:a1:87:55:66:9f:fd:40:d4:c1:11:02:87:e9:19:e5:75:
         ef:5d:7b:ae:74:89:8d:29:ec:61:26:de:5a:1f:e8:17:d9:14:
         b9:19:c1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:23 2026 by rpki-client