Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32342d3234203d3e20313333383237.roa
File:                     3130332e39352e362e302f32342d3234203d3e20313333383237.roa (raw, json)
Hash identifier:          xu1cN52iKwYrST7ZHiU1OG9/BN4NR23in1R/aZa/9/Y=
Subject key identifier:   B6:C2:CC:0C:C4:3B:37:C6:A8:AD:37:CA:38:66:F8:1D:27:42:E7:C2
Certificate issuer:       /CN=AF6B7BCDACF90BA83205EA298327379BAB489418
Certificate serial:       58B60A0436EFA4E9AC04F02AE712CB235967A526
Authority key identifier: AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32342d3234203d3e20313333383237.roa
Signing time:             Sun 03 May 2026 02:35:31 +0000
ROA not before:           Sun 03 May 2026 02:30:31 +0000
ROA not after:            Sun 02 May 2027 02:35:31 +0000
asID:                     133827
IP address blocks:        103.95.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl
                          rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b6:0a:04:36:ef:a4:e9:ac:04:f0:2a:e7:12:cb:23:59:67:a5:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF6B7BCDACF90BA83205EA298327379BAB489418
        Validity
            Not Before: May  3 02:30:31 2026 GMT
            Not After : May  2 02:35:31 2027 GMT
        Subject: CN=B6C2CC0CC43B37C6A8AD37CA3866F81D2742E7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:86:84:d3:da:d5:bc:67:e6:f5:0c:b9:c1:dc:
                    6d:8b:6d:12:dd:eb:42:37:fe:65:62:4a:60:09:ec:
                    a6:35:c1:74:bf:2b:bc:06:1c:05:41:c8:a5:59:83:
                    3b:c8:24:15:94:a1:b1:c9:d4:70:43:9e:69:48:53:
                    e6:3d:ad:1c:18:9b:e2:2b:3f:e7:0f:86:1a:86:c2:
                    e6:fe:39:87:a0:16:19:8c:68:54:c1:eb:18:36:a0:
                    07:21:77:30:b1:f8:0d:86:06:0d:0e:fd:68:b7:cd:
                    10:7e:f5:9a:26:0d:c1:04:77:d5:6c:31:36:0f:11:
                    ce:e8:73:68:f0:30:6e:01:17:45:f1:23:4f:62:d5:
                    90:25:b1:c8:e1:90:31:34:7e:46:80:76:78:47:b8:
                    4d:eb:da:17:cf:24:2c:ba:7d:1e:63:28:38:ce:a6:
                    71:20:70:de:42:a7:d3:54:dc:d6:e2:f8:d7:39:db:
                    9a:6d:e3:c5:62:f1:5a:75:d0:86:ac:ed:c4:36:8b:
                    99:81:a0:5e:a5:79:5e:a6:6b:68:83:a3:6a:8b:84:
                    06:7c:c3:02:1e:11:4a:5d:a3:fa:b7:d0:2a:fe:27:
                    ce:14:92:53:24:27:97:c8:43:1c:1d:8e:16:f0:a1:
                    47:6d:33:a3:50:13:23:9a:f7:4c:ff:ba:02:3b:ca:
                    d8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C2:CC:0C:C4:3B:37:C6:A8:AD:37:CA:38:66:F8:1D:27:42:E7:C2
            X509v3 Authority Key Identifier:
                keyid:AF:6B:7B:CD:AC:F9:0B:A8:32:05:EA:29:83:27:37:9B:AB:48:94:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/AF6B7BCDACF90BA83205EA298327379BAB489418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF6B7BCDACF90BA83205EA298327379BAB489418.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5a990125-609a-48c8-ac86-1c3bc315bad6/0/3130332e39352e362e302f32342d3234203d3e20313333383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.95.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:b6:ca:a2:81:34:c2:6b:c4:82:4b:7e:da:17:18:31:b6:
         c4:db:da:89:29:f0:9d:d2:ee:72:41:71:de:b9:a5:22:5c:e6:
         9b:e7:4d:9d:db:e5:50:74:1a:98:3f:ff:55:c6:8b:90:ae:76:
         2c:5e:d7:a4:1f:29:3a:dd:6f:94:9d:d6:60:c1:96:25:ca:8b:
         a4:52:8c:0e:5b:cf:50:fe:c9:b0:1e:e9:ca:7d:91:9f:ec:87:
         81:85:68:d2:e8:33:a8:2b:ac:d2:67:a8:91:e4:a1:7a:32:75:
         73:c3:c6:6b:e9:89:5d:4d:e1:e3:4c:d1:cc:24:e8:3f:dd:3a:
         89:0d:d2:90:bd:3b:f7:65:06:7f:95:f1:b8:16:19:46:a7:72:
         43:9f:1e:09:cc:df:d9:fd:8d:9c:c7:d4:de:2d:61:f5:a3:7b:
         83:96:6e:a2:32:27:51:c9:ef:58:37:15:45:bd:1f:eb:65:d0:
         f3:6e:ab:9f:f8:54:55:6f:75:31:2f:0b:94:a2:77:38:76:a5:
         d7:a7:18:9b:d4:13:a2:ac:e3:d9:ad:cc:81:43:d0:10:a6:53:
         b2:94:46:22:8b:c0:ba:48:ba:c3:c0:96:d6:20:6b:ce:7c:3e:
         21:8a:40:b7:55:9b:56:66:58:76:6c:70:c4:ee:da:55:8d:3e:
         fe:40:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:22 2026 by rpki-client