Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa
File:                     3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (raw, json)
Hash identifier:          qPSkhr1Hfd95Nteo2ukz+NrVtlkjXkiSW+VId9eRa8U=
Subject key identifier:   C2:87:CB:98:59:CD:0F:DB:6F:53:87:6E:DD:FD:4D:44:96:2D:28:2E
Certificate issuer:       /CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
Certificate serial:       4161D115596014A26630BE0D3E39D30E21DC37D1
Authority key identifier: A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa
Signing time:             Sun 03 May 2026 02:37:33 +0000
ROA not before:           Sun 03 May 2026 02:32:33 +0000
ROA not after:            Sun 02 May 2027 02:37:33 +0000
asID:                     56245
IP address blocks:        103.61.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl
                          rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:35:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:61:d1:15:59:60:14:a2:66:30:be:0d:3e:39:d3:0e:21:dc:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6AFD65AC66D4EB7027AED5F898E8ECD8079F462
        Validity
            Not Before: May  3 02:32:33 2026 GMT
            Not After : May  2 02:37:33 2027 GMT
        Subject: CN=C287CB9859CD0FDB6F53876EDDFD4D44962D282E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:49:fa:70:27:d9:09:2c:1c:26:0e:78:4c:
                    0c:10:24:4f:b4:86:47:dd:8e:f2:99:f9:76:92:93:
                    f2:e4:c0:96:f9:49:40:2d:6b:1a:96:c1:fb:fa:11:
                    e3:41:79:73:41:57:2a:49:e3:0d:4a:5e:ac:bd:01:
                    22:ad:2c:c4:84:81:4a:84:b1:d0:d6:7a:3b:9f:b9:
                    67:b9:45:7c:ea:d4:d8:f9:59:3a:2f:a9:90:32:a9:
                    9f:8e:80:5c:cc:ef:23:69:cf:71:6e:d2:8f:7d:d6:
                    39:c1:55:15:c9:51:68:da:30:b7:5d:9a:4d:29:0b:
                    6a:7a:b2:13:a0:13:4c:f7:6c:31:e7:07:7a:28:dd:
                    e2:54:5c:58:ec:df:b0:cf:88:29:7e:ff:11:5d:c4:
                    eb:61:1e:e2:7b:4f:14:db:c1:bb:14:62:a4:ef:05:
                    df:d3:b9:50:e1:aa:c2:df:ac:67:32:72:9a:ab:e4:
                    ef:9c:58:e0:39:d4:26:62:17:20:9b:29:5b:6b:f7:
                    da:d6:79:63:46:f4:c6:84:1b:16:c7:5a:7d:4e:08:
                    2a:92:e6:7f:6b:6b:25:7f:64:8f:bf:ff:62:2b:fc:
                    e3:3f:20:0e:ef:a4:ce:bd:49:cb:c0:42:d1:59:e9:
                    b7:a9:e1:37:fd:68:ea:60:55:02:cf:c0:94:c9:28:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:CB:98:59:CD:0F:DB:6F:53:87:6E:DD:FD:4D:44:96:2D:28:2E
            X509v3 Authority Key Identifier:
                keyid:A6:AF:D6:5A:C6:6D:4E:B7:02:7A:ED:5F:89:8E:8E:CD:80:79:F4:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A6AFD65AC66D4EB7027AED5F898E8ECD8079F462.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/60886805-3b85-4c5b-9b6a-d62ad56a66ac/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:36:a3:b6:33:88:73:82:b6:ae:eb:6d:32:f7:f8:fb:52:eb:
         96:53:c1:1e:fb:38:57:d7:24:2d:62:a2:c5:9c:48:8b:87:87:
         13:91:6f:34:ba:90:dc:cc:f6:ce:61:b3:1a:de:6e:e1:a0:fe:
         af:d6:4b:cb:30:48:5b:34:bf:49:38:9a:09:c9:de:98:54:68:
         11:9d:39:8b:61:cd:45:c3:97:20:97:93:8f:59:cb:1e:61:38:
         c3:ce:0a:1f:c1:e9:12:98:a4:6b:65:28:59:17:64:78:95:3e:
         d3:31:34:0b:fe:83:99:61:15:d8:82:6c:34:35:a0:0c:26:dc:
         68:65:e6:b7:25:0a:7c:de:6c:83:74:6c:84:95:23:be:1c:ea:
         b7:a1:ac:5d:49:c1:94:fa:14:50:80:b1:14:f2:f9:78:29:66:
         43:38:d5:3f:4e:05:07:5b:f9:86:a1:62:40:aa:fc:c0:63:31:
         73:00:cf:7b:cb:83:c3:43:e0:ca:2e:33:94:cb:dc:ce:be:3e:
         66:5f:2a:cd:60:d9:2b:fb:5d:c8:c1:bb:7e:a7:54:ca:d8:58:
         09:ae:f4:86:3d:b2:04:6f:6f:cd:f5:82:0f:67:c5:68:10:04:
         62:ef:04:aa:1a:d3:d7:34:c1:cf:ec:ad:be:0e:13:68:b9:9f:
         d8:13:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:38 2026 by rpki-client