Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          e8KVnvyYSXyFNwKbKojy/FuBAC2iwrcpmK/bEobVoLw=
Subject key identifier:   6A:54:EF:06:DE:3D:21:A1:1A:F5:1D:5F:E8:A5:DC:6A:A7:20:85:DF
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       3FD5CE8B5405FCB178D56CEF3CA9FC46E196E85B
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:09 +0000
ROA not before:           Sun 03 May 2026 02:36:09 +0000
ROA not after:            Sun 02 May 2027 02:41:09 +0000
asID:                     38515
IP address blocks:        103.107.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d5:ce:8b:54:05:fc:b1:78:d5:6c:ef:3c:a9:fc:46:e1:96:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:09 2026 GMT
            Not After : May  2 02:41:09 2027 GMT
        Subject: CN=6A54EF06DE3D21A11AF51D5FE8A5DC6AA72085DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:7f:45:d3:34:ec:ef:78:c7:fd:a4:3a:95:
                    a3:c1:09:39:31:f0:1b:77:1b:e3:5c:dc:3d:3c:8b:
                    a0:16:32:79:18:2a:18:6b:14:6a:b5:b7:04:19:19:
                    ec:db:05:3a:95:16:4f:7f:0a:04:55:a8:68:5a:96:
                    4a:ea:01:6a:01:6d:87:48:b7:9e:d5:80:0a:20:19:
                    0c:57:58:b5:20:3f:f9:7d:92:12:82:7c:a7:91:d2:
                    66:27:f6:21:a2:fd:b9:b1:b4:26:11:a8:f1:00:81:
                    6b:26:55:6a:e6:a7:5a:51:62:8e:ad:59:20:6b:d2:
                    db:ae:e3:21:dc:d9:2b:d4:9e:5b:92:fe:59:07:96:
                    d2:f2:4a:e4:cf:09:99:24:22:2a:0a:d9:37:38:06:
                    1d:3b:70:ac:7a:c8:31:f0:38:b8:67:0c:01:23:94:
                    c2:75:1b:61:4d:77:ac:a6:fb:3e:7c:61:c9:74:5e:
                    6a:ac:e2:6f:2b:87:4a:19:d8:ee:1c:49:34:93:87:
                    58:52:4d:b3:65:b3:fa:32:24:43:1e:89:c6:bc:53:
                    ce:6e:c5:14:05:bd:29:c6:7a:1c:02:25:c2:2a:ed:
                    4e:09:cc:6d:bd:72:be:3e:7a:e1:3e:07:d3:f9:7a:
                    02:72:9f:7c:38:b1:66:b1:2a:de:23:99:64:ae:6f:
                    9f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:54:EF:06:DE:3D:21:A1:1A:F5:1D:5F:E8:A5:DC:6A:A7:20:85:DF
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:50:06:34:2c:47:ce:86:e7:62:9b:6b:a1:86:02:c1:39:c4:
         15:57:8f:ce:50:3a:5c:1d:af:9c:c1:ca:70:9b:91:0f:f8:b9:
         45:69:b9:d7:87:a6:71:a6:1f:0b:58:5e:41:c3:18:a0:30:2e:
         c3:76:85:fb:c0:63:45:c1:b0:4e:76:f0:ec:b9:44:1e:4f:a9:
         98:88:08:5f:a9:b3:43:e1:19:06:34:db:c0:09:65:ce:5f:df:
         52:89:a9:e6:d3:2f:ba:9a:b8:b4:c7:2e:bc:4b:1e:13:56:95:
         66:ef:a6:c1:7c:c1:15:20:f6:24:34:5d:ec:40:66:a7:54:a9:
         9c:0f:c1:e9:ed:db:91:77:69:23:fd:a4:63:55:35:6d:99:a4:
         35:89:61:48:6b:51:0f:2e:26:0a:f7:d0:77:b8:b1:29:0f:47:
         56:3f:2b:70:7c:c0:ef:97:0c:09:4b:2c:7a:86:46:dc:fd:c4:
         94:f0:e4:af:e0:fb:8a:3d:f0:71:56:97:57:e4:65:3a:d2:17:
         33:31:32:e7:a2:45:43:79:74:d9:ca:21:96:e6:33:73:76:00:
         d4:7c:ef:7d:b6:2f:bd:bb:bd:6d:35:dd:2c:67:f3:88:59:af:
         b6:7d:88:45:54:44:1a:cf:20:8c:7a:c1:9c:36:53:25:b3:b2:
         b1:e4:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:07 2026 by rpki-client