Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa
File:                     3130332e362e3230372e302f32342d3234203d3e203538353033.roa (raw, json)
Hash identifier:          or1/Z7K0bU1AYV2WS/k202vPtDVPNtgWIGTW99rDY5M=
Subject key identifier:   E1:2F:44:2A:65:2D:C8:FA:2B:99:C2:87:7D:D7:53:F2:D0:49:08:F9
Certificate issuer:       /CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
Certificate serial:       695C5B46652C56AC92A01ECCD8FE4454FF2CF781
Authority key identifier: 55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa
Signing time:             Sun 03 May 2026 02:34:50 +0000
ROA not before:           Sun 03 May 2026 02:29:50 +0000
ROA not after:            Sun 02 May 2027 02:34:50 +0000
asID:                     58503
IP address blocks:        103.6.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl
                          rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5c:5b:46:65:2c:56:ac:92:a0:1e:cc:d8:fe:44:54:ff:2c:f7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677
        Validity
            Not Before: May  3 02:29:50 2026 GMT
            Not After : May  2 02:34:50 2027 GMT
        Subject: CN=E12F442A652DC8FA2B99C2877DD753F2D04908F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:f6:a8:65:d5:c4:6d:27:10:ae:88:bf:34:
                    89:c9:b0:56:d9:8f:7d:06:d4:63:82:94:8d:f1:c7:
                    62:b7:d2:ad:56:9d:52:77:ab:8b:33:c0:bd:5a:9a:
                    56:35:7b:3c:1c:90:87:c1:2b:bb:69:07:ab:99:1b:
                    2d:6b:32:9a:8d:d9:d0:e3:5b:13:fa:6a:c1:c2:dc:
                    5b:cf:fc:92:67:1c:9f:da:a9:b6:88:5b:b8:66:45:
                    fc:16:03:6f:b7:f8:94:16:d5:e9:29:bf:cd:71:77:
                    38:39:65:08:6f:50:c0:ec:8c:db:bd:0f:8a:0f:1a:
                    02:8d:8b:fb:58:54:0e:5e:6f:ff:6b:40:2c:51:46:
                    e0:e9:86:a1:38:0f:ab:d2:c1:6c:e4:a8:77:32:d9:
                    ba:4f:4c:e5:73:d8:c8:2a:6f:01:fa:8b:bf:67:0a:
                    f6:ca:53:c2:14:f3:0b:4c:3d:65:4a:65:4e:9c:d9:
                    fc:e9:ed:ef:b8:8f:3d:22:1a:e2:72:f4:5d:29:b4:
                    74:96:02:ec:3a:51:00:77:91:c4:cd:a0:86:4b:3a:
                    cf:6f:4e:24:c6:9c:63:2f:15:4a:20:9d:fa:2d:cc:
                    17:3f:ad:23:14:c5:25:1c:c0:f0:c5:7b:05:56:f9:
                    2e:e5:21:f9:fd:56:06:b6:1f:f7:32:42:59:3e:ef:
                    65:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2F:44:2A:65:2D:C8:FA:2B:99:C2:87:7D:D7:53:F2:D0:49:08:F9
            X509v3 Authority Key Identifier:
                keyid:55:D0:A4:BD:D3:0A:B0:F2:34:6A:72:3C:EF:B6:C7:6E:8A:D9:96:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/55D0A4BDD30AB0F2346A723CEFB6C76E8AD99677.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/3130332e362e3230372e302f32342d3234203d3e203538353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:04:7b:76:26:12:28:3f:07:7c:5d:f0:6e:17:13:7b:7d:ed:
         01:83:15:00:97:06:35:23:41:57:ef:c1:52:f7:9b:64:0c:1c:
         6f:ea:6f:58:3b:f3:d3:26:3b:b8:35:27:58:b2:a5:2a:f1:34:
         36:bb:01:f2:8c:d0:50:e6:9a:c4:33:13:72:fb:76:71:2c:3c:
         a1:38:f0:f9:39:60:86:8a:5f:b4:c2:d2:91:e5:a6:81:83:82:
         a6:de:65:46:74:82:8f:fa:62:57:cf:11:5d:95:23:a3:49:07:
         c1:bf:f3:99:d5:96:59:af:60:f6:4d:c0:ab:93:37:2c:1f:27:
         49:03:86:d1:e5:d1:68:b1:7e:b9:12:84:e8:07:c6:36:e9:d7:
         3f:b1:9f:00:79:c2:8a:26:1c:04:86:28:f1:09:ec:d2:82:bd:
         9b:b3:ad:35:67:f2:02:4f:c2:7a:66:48:de:a3:99:c2:1b:7e:
         36:0c:ff:d3:3c:72:ac:76:24:11:eb:07:0c:e2:5b:1a:f9:88:
         db:51:38:b7:34:b5:79:36:91:0a:5e:7d:08:2c:cd:39:e1:93:
         5c:f8:85:c4:98:4c:4b:0c:a6:fd:2c:db:5a:36:bf:f8:d1:57:
         d1:16:a0:df:e0:11:a5:c0:03:f6:ee:bc:3b:5f:a5:46:32:5b:
         f4:dd:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:56:31 2026 by rpki-client