Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
File:                     3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa (raw, json)
Hash identifier:          JCQvcMoFj6uGUNUjgqCHZPoWp7SdWl4w0J5aS1v8QPA=
Subject key identifier:   E1:5A:FD:91:CD:A2:F1:77:26:E2:33:63:CB:36:CA:FF:D3:9E:4B:DA
Certificate issuer:       /CN=7FAE1489FF53B0236543706FB85A70734890458C
Certificate serial:       3C65F52C2DA70E9AFC390B7698CCA3BA5400AE63
Authority key identifier: 7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa
Signing time:             Sun 03 May 2026 02:41:11 +0000
ROA not before:           Sun 03 May 2026 02:36:11 +0000
ROA not after:            Sun 02 May 2027 02:41:11 +0000
asID:                     150934
IP address blocks:        103.109.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:65:f5:2c:2d:a7:0e:9a:fc:39:0b:76:98:cc:a3:ba:54:00:ae:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FAE1489FF53B0236543706FB85A70734890458C
        Validity
            Not Before: May  3 02:36:11 2026 GMT
            Not After : May  2 02:41:11 2027 GMT
        Subject: CN=E15AFD91CDA2F17726E23363CB36CAFFD39E4BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:4b:36:d9:45:fd:f1:17:2c:43:5b:d7:eb:
                    05:f3:22:a2:ae:47:7d:05:c9:63:78:1e:61:db:05:
                    18:8f:db:e2:95:14:68:5a:3f:61:20:ea:36:a2:88:
                    04:84:f4:23:86:2c:fe:4d:f0:d5:84:c1:aa:1b:75:
                    64:15:60:06:a5:4d:83:92:ea:24:4e:32:cd:06:11:
                    d5:04:95:22:60:fb:d6:d8:3b:2f:e3:75:44:2c:90:
                    2e:81:60:3c:6f:6a:33:9b:8d:ea:b2:15:f9:c7:0f:
                    89:60:72:cf:41:2f:96:2a:49:87:fa:ee:bb:1b:76:
                    45:88:b4:c7:a6:57:6c:3f:53:45:60:38:f8:09:2c:
                    8d:bf:32:f5:24:d4:da:29:34:da:64:58:d7:c7:b3:
                    8e:98:8b:01:c0:16:a3:42:d7:4e:63:92:36:2f:d0:
                    27:c9:91:60:6b:5c:2c:45:68:45:9f:ff:58:ce:7e:
                    ae:76:f0:27:ee:34:c1:35:ca:b6:be:12:41:e9:75:
                    30:a4:8b:51:59:30:b5:fe:f3:aa:9a:e3:92:f5:67:
                    76:08:9d:e4:d0:1c:28:45:d8:33:b9:13:60:6d:c9:
                    c5:6c:90:67:5d:fa:71:dd:00:e5:be:1c:30:06:ef:
                    b3:a4:3c:f2:7f:15:5a:4d:78:8f:bd:97:f9:25:9f:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:5A:FD:91:CD:A2:F1:77:26:E2:33:63:CB:36:CA:FF:D3:9E:4B:DA
            X509v3 Authority Key Identifier:
                keyid:7F:AE:14:89:FF:53:B0:23:65:43:70:6F:B8:5A:70:73:48:90:45:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/7FAE1489FF53B0236543706FB85A70734890458C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7FAE1489FF53B0236543706FB85A70734890458C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/3130332e3130392e3230352e302f32342d3234203d3e20313530393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:c9:24:b8:51:48:af:97:4d:50:d3:ec:c2:09:f1:bc:ae:
         72:a1:00:a5:b9:24:e9:7b:1c:90:45:e2:65:f8:d9:2d:d4:2b:
         b5:64:dc:a8:bc:20:3d:a4:36:82:2f:cd:99:04:88:7e:10:45:
         60:41:90:fb:01:a0:2a:ad:a4:86:92:b0:29:0e:e5:18:ea:03:
         6a:75:08:57:88:06:64:4a:85:6d:76:17:77:2f:e6:d1:4e:14:
         3f:24:76:ed:b8:74:03:0e:f6:86:42:13:f3:ae:ab:18:bf:85:
         3a:2f:0b:54:36:34:32:dd:f0:bd:0c:29:e4:c2:f7:4e:2c:41:
         f0:cf:f1:6d:27:90:e9:b2:89:f6:7f:a9:f3:4f:4e:9d:c1:e6:
         0c:16:ea:30:9d:1b:53:b4:54:c8:88:74:a6:54:b1:d1:50:09:
         5f:6b:c6:43:6a:0e:95:69:50:73:90:f4:d6:21:7b:46:35:5d:
         ef:16:7e:43:eb:f0:a7:09:35:2d:04:30:08:88:df:3b:f5:77:
         ad:88:d2:73:09:11:7a:ed:70:88:1c:8a:32:72:13:23:37:fe:
         ee:d4:56:b3:13:3c:96:b1:77:d4:67:f9:7f:84:ff:c6:ca:5a:
         78:f2:85:d5:af:91:88:49:e3:2c:05:e9:fe:00:0f:6b:9a:a8:
         19:ac:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:28 2026 by rpki-client