Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa
File:                     3130332e35342e302e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          j9SbKnw1WxVlPJ1dulKyLWaPKzwCQU/YUp9+97iiA64=
Subject key identifier:   6F:11:EC:B9:9B:83:8F:AE:C1:5B:BC:25:B7:FB:C4:B4:02:05:A2:79
Certificate issuer:       /CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
Certificate serial:       54BE8D2779697E2F7E3FCDAFADB1FA748EBDED0D
Authority key identifier: 06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa
Signing time:             Sun 03 May 2026 02:37:28 +0000
ROA not before:           Sun 03 May 2026 02:32:28 +0000
ROA not after:            Sun 02 May 2027 02:37:28 +0000
asID:                     55697
IP address blocks:        103.54.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl
                          rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:be:8d:27:79:69:7e:2f:7e:3f:cd:af:ad:b1:fa:74:8e:bd:ed:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06AAF713D939AC6C090B6343B6905318B83A1DE3
        Validity
            Not Before: May  3 02:32:28 2026 GMT
            Not After : May  2 02:37:28 2027 GMT
        Subject: CN=6F11ECB99B838FAEC15BBC25B7FBC4B40205A279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:51:5b:23:47:04:ab:3b:42:45:75:94:60:86:
                    9c:9c:f8:5d:db:76:b8:13:37:07:3d:6b:63:94:28:
                    f5:2d:20:60:3e:48:6a:35:67:1c:8b:8d:5a:3a:d9:
                    53:9f:77:06:54:b2:6d:5c:62:04:d2:c4:95:cf:31:
                    15:57:32:34:3e:b9:7c:4d:93:bd:4f:79:13:8f:a8:
                    f9:de:f5:2c:82:8d:ce:2a:b3:da:a2:53:7d:13:37:
                    30:62:00:2f:5a:e0:3a:86:de:7c:1c:b2:8e:28:0c:
                    19:f8:9a:6e:4e:c9:1f:5d:f7:7e:9d:7d:23:29:91:
                    57:c9:30:b1:ae:38:b2:71:a4:5b:20:c4:1c:23:9d:
                    1f:ff:ee:b7:e8:a8:fe:0b:dc:5e:22:1d:bc:03:69:
                    fb:b8:28:30:57:33:5e:63:53:13:23:2d:1c:d8:a7:
                    15:cb:2b:79:ce:a5:a3:34:ec:a5:83:6c:2a:4c:17:
                    f4:70:0a:f6:1c:7d:29:c2:85:56:c0:33:fd:b3:1b:
                    e7:71:ac:dc:53:98:7d:a2:8a:79:c9:a7:7f:d1:c9:
                    6b:42:69:1c:16:a8:94:58:87:d6:44:b4:a6:db:87:
                    3d:b2:e8:9b:4a:a9:1f:38:a1:a2:0e:4c:35:66:83:
                    b8:5d:35:2d:ea:49:5d:c7:65:f9:d6:c5:76:64:dc:
                    f1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:11:EC:B9:9B:83:8F:AE:C1:5B:BC:25:B7:FB:C4:B4:02:05:A2:79
            X509v3 Authority Key Identifier:
                keyid:06:AA:F7:13:D9:39:AC:6C:09:0B:63:43:B6:90:53:18:B8:3A:1D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/06AAF713D939AC6C090B6343B6905318B83A1DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06AAF713D939AC6C090B6343B6905318B83A1DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3130332e35342e302e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9f:60:e9:51:57:57:51:ba:54:db:64:0f:b1:de:51:2e:06:
         03:7e:fa:29:cb:50:a6:80:66:c2:64:26:7b:f3:ef:c4:f0:8a:
         fe:93:c3:b2:b4:77:55:00:86:63:f0:22:de:bf:0a:bd:fc:a8:
         c2:26:82:4a:d8:42:0f:cd:21:57:09:0f:69:39:6d:5d:34:d4:
         0b:3e:13:d9:78:11:08:fd:d0:fb:2d:55:53:7a:c3:13:72:8d:
         6e:e4:82:54:87:5e:67:ad:2b:cc:9e:aa:7b:8e:bb:79:fb:6e:
         4a:ed:8e:fe:11:bf:5f:bb:ca:0b:a2:11:8f:2a:20:fd:99:e1:
         0b:b6:97:8d:1d:48:1e:2f:c2:ab:46:16:62:a7:70:ff:c7:95:
         0b:d0:c7:33:98:47:16:9b:8e:89:e2:e1:a3:26:18:55:25:96:
         d9:fb:0f:d6:04:c1:81:a5:25:29:20:c0:1b:42:6a:16:46:14:
         7c:13:df:1d:90:d0:d3:c2:2a:1a:ef:1d:3b:a1:76:bd:a1:96:
         20:b1:05:dd:c0:dc:e2:50:fd:f4:12:95:40:34:f5:6c:c6:d5:
         b8:c9:27:bf:11:2c:50:2f:b0:ca:c6:60:8b:ed:58:d4:33:b2:
         35:37:70:75:e2:a1:91:a7:66:30:d7:7f:12:1d:21:5c:76:19:
         d1:43:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:39 2026 by rpki-client