Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa
File:                     3130332e362e3230362e302f32342d3234203d3e203538353033.roa (raw, json)
Hash identifier:          Eyrv+pjzBZrD+KzX9culKkOw9Pi5527N+COQ3UuUxok=
Subject key identifier:   87:EC:C3:64:2B:B7:C9:D5:E9:4F:F5:06:8C:18:C3:B3:58:9B:99:7E
Certificate issuer:       /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
Certificate serial:       5C470EB794AEFFBA36303EC67850C5165161B20A
Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa
Signing time:             Sun 03 May 2026 02:34:52 +0000
ROA not before:           Sun 03 May 2026 02:29:52 +0000
ROA not after:            Sun 02 May 2027 02:34:52 +0000
asID:                     58503
IP address blocks:        103.6.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl
                          rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:47:0e:b7:94:ae:ff:ba:36:30:3e:c6:78:50:c5:16:51:61:b2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
        Validity
            Not Before: May  3 02:29:52 2026 GMT
            Not After : May  2 02:34:52 2027 GMT
        Subject: CN=87ECC3642BB7C9D5E94FF5068C18C3B3589B997E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:68:07:a6:3b:80:17:ae:da:27:9b:f2:7f:
                    b6:e5:5f:72:1b:0b:8b:e5:5e:db:8b:61:d8:4a:75:
                    e7:63:fa:a6:bd:02:c0:b6:65:01:9a:11:53:c7:48:
                    a9:93:46:95:3f:2a:06:a1:8f:7c:84:ab:07:1a:be:
                    ca:ec:2d:dc:cd:fc:b0:a6:b6:57:4e:af:11:fa:f0:
                    3f:ed:37:31:5b:06:38:46:8e:fb:f6:96:79:f8:64:
                    8f:50:ec:00:2a:a7:a0:e5:9e:c0:1d:b1:ab:05:54:
                    45:c7:d4:53:bc:56:98:f6:a6:9d:a9:be:88:8a:0f:
                    9f:b5:72:b6:ee:af:b4:ce:13:a0:b6:70:1b:3e:32:
                    cb:02:ca:46:1d:bd:e1:aa:69:e3:91:e5:14:9b:ce:
                    eb:4e:73:0d:26:bc:ef:94:3a:6b:19:36:98:12:98:
                    df:b9:5f:01:6f:be:8f:3c:cc:bd:95:f5:1a:5a:61:
                    bc:2b:6f:a7:85:00:6b:cf:13:2b:bb:f2:fc:46:9b:
                    58:74:5e:a8:9a:12:af:d0:3c:2c:7f:89:36:6e:c6:
                    53:eb:18:c5:db:49:05:46:6f:81:84:a0:f4:91:e4:
                    56:17:c8:a4:55:db:1a:2b:36:cb:f9:c3:34:da:a7:
                    41:44:a9:02:e3:ce:01:e1:ed:bc:e9:db:4b:a3:e8:
                    c4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EC:C3:64:2B:B7:C9:D5:E9:4F:F5:06:8C:18:C3:B3:58:9B:99:7E
            X509v3 Authority Key Identifier:
                keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230362e302f32342d3234203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:ac:69:7f:d6:74:4e:e6:47:ae:d3:e1:7c:ad:6d:ec:87:
         60:60:86:e4:0f:27:5f:bc:62:60:e6:5f:1b:a8:88:77:4c:75:
         52:2a:64:8d:36:59:b4:e0:00:b6:ec:dc:9c:15:4d:57:18:0f:
         07:5d:f7:17:56:51:ef:f6:52:2e:85:20:d4:24:3c:e3:18:16:
         82:23:bc:dd:68:72:6b:a7:ea:32:c8:82:88:85:f5:b1:02:c9:
         27:ea:15:81:03:70:df:dd:a6:3e:7e:52:18:a6:e2:1b:95:a3:
         c8:74:60:26:05:32:10:0c:0b:f7:3f:32:2b:2a:6b:23:ef:08:
         d8:6f:d2:04:53:8a:9f:42:3e:55:1a:a1:52:b6:9e:fe:f2:2a:
         7f:42:2f:ac:ff:58:6b:52:44:c9:c7:9d:21:e2:48:b4:35:7a:
         93:0e:de:90:88:59:98:04:b7:d9:68:c9:07:4c:34:b7:58:76:
         8b:77:be:a9:1b:50:aa:f3:3f:5a:cb:63:43:ad:ac:c7:bc:f6:
         5f:7d:cc:40:39:90:96:9e:45:aa:a3:a8:30:ed:68:da:6f:38:
         1d:dc:c6:7a:74:49:aa:dc:54:3a:d7:22:0d:e6:74:15:9f:7e:
         9a:32:be:ad:ef:95:ae:9a:73:0f:10:87:71:01:7f:d9:c4:0c:
         a2:d2:c4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:16 2026 by rpki-client