Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
File:                     3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa (raw, json)
Hash identifier:          e4+bi848oD/+O01Mx0cjiGiYFl4mEZMFhTrqMTZt/js=
Subject key identifier:   EC:4D:69:35:7F:58:4A:13:B3:C8:A8:BA:AC:B4:03:0D:19:72:B9:FD
Certificate issuer:       /CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
Certificate serial:       7906A9F84A16D4C34D159AC4FDEF5C3263EE6C9B
Authority key identifier: DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa
Signing time:             Sun 03 May 2026 02:40:59 +0000
ROA not before:           Sun 03 May 2026 02:35:59 +0000
ROA not after:            Sun 02 May 2027 02:40:59 +0000
asID:                     138855
IP address blocks:        103.170.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl
                          rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:06:a9:f8:4a:16:d4:c3:4d:15:9a:c4:fd:ef:5c:32:63:ee:6c:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFEBE2630CC0A44530A54421244D4B8CED2C8AC4
        Validity
            Not Before: May  3 02:35:59 2026 GMT
            Not After : May  2 02:40:59 2027 GMT
        Subject: CN=EC4D69357F584A13B3C8A8BAACB4030D1972B9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c0:6d:8a:93:7e:ea:b1:a5:7c:60:f4:d6:d2:
                    03:93:b5:db:0e:65:5f:c8:44:92:8d:17:f7:a1:35:
                    53:8e:7a:8a:ff:e9:84:79:8e:29:83:33:4a:50:e8:
                    b3:50:26:0c:98:3f:3c:48:09:ca:d3:0d:d3:ad:a6:
                    55:70:2d:2e:2b:47:21:e7:56:12:96:47:f1:5c:53:
                    aa:a1:ea:eb:48:bc:93:bc:24:60:f0:ad:d6:2f:90:
                    f9:40:44:0b:4d:bd:75:21:99:08:50:07:ba:80:a0:
                    c4:65:91:aa:b8:c2:b9:6a:37:8e:cf:8c:a3:0f:89:
                    f0:36:93:c1:f0:a5:0a:9c:3f:3b:58:a2:55:a8:84:
                    9a:76:5d:05:95:0b:d8:70:58:18:bb:83:8c:08:9a:
                    7e:a3:b1:84:06:00:f5:35:b7:f3:41:8a:89:5a:ae:
                    88:00:07:17:fc:68:dd:7b:04:40:c3:4d:89:09:e3:
                    3b:ea:4b:cb:5e:47:de:18:9f:25:22:fc:2e:60:da:
                    7a:81:c6:a7:78:16:dd:91:b0:fe:e7:c3:95:6d:81:
                    80:af:dd:3c:6a:6f:bc:1b:cf:14:a8:08:94:cf:fc:
                    06:90:45:e6:28:eb:d1:60:58:b4:5d:c9:7b:05:4c:
                    82:92:f3:ae:94:56:eb:03:e7:09:07:87:87:19:2f:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4D:69:35:7F:58:4A:13:B3:C8:A8:BA:AC:B4:03:0D:19:72:B9:FD
            X509v3 Authority Key Identifier:
                keyid:DF:EB:E2:63:0C:C0:A4:45:30:A5:44:21:24:4D:4B:8C:ED:2C:8A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DFEBE2630CC0A44530A54421244D4B8CED2C8AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/3130332e3137302e3233362e302f32332d3234203d3e20313338383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:96:e2:e2:5e:fe:18:3e:8a:bf:60:25:51:60:8c:ec:bd:
         3e:32:78:16:71:f8:c0:4f:6a:df:7f:b3:15:ec:1e:55:1f:f3:
         01:8a:4f:18:37:49:bf:df:33:0c:18:87:0b:8b:ac:81:fd:8c:
         f1:1c:1f:4e:aa:5d:6f:c8:93:fe:73:85:bd:73:63:34:0e:39:
         08:ff:53:96:9c:58:f6:d3:ea:5d:5d:cb:13:7b:b6:58:ba:85:
         8e:09:e2:46:c2:c9:da:ea:9e:a6:f3:b1:1a:8a:5b:5d:0f:e5:
         ae:76:98:d2:32:cc:fb:97:3e:e8:e6:66:97:5d:43:7d:7a:f0:
         03:f5:9a:ad:43:20:6f:16:aa:68:4b:b4:cd:a8:8b:dd:d0:8d:
         14:3b:74:45:cc:b1:28:45:84:e9:0d:56:5e:f4:05:b1:93:e2:
         eb:47:35:41:1f:3d:37:4a:8c:dd:ae:e6:e0:23:ea:c7:81:01:
         4f:a3:da:f1:6e:cf:b6:54:50:05:2e:28:95:67:50:cb:77:3e:
         15:79:8d:29:dc:1c:23:eb:e9:0f:45:c2:a9:61:70:61:03:1d:
         31:f4:96:77:0d:ae:cc:85:00:7d:b1:d6:35:e0:48:dd:60:70:
         37:be:ed:e1:92:18:8a:fa:a5:82:b0:76:ae:0e:6d:43:8d:45:
         65:56:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:47 2026 by rpki-client