Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
File:                     3130332e36382e302e302f32332d3233203d3e20313335343539.roa (raw, json)
Hash identifier:          VI7yekXKKEYfmHRZY/aCKB4dy5e6lccxCxDcnwF1ciE=
Subject key identifier:   6D:99:7B:FA:F7:0C:00:0E:79:76:43:45:75:9E:06:B2:1A:5C:E2:7A
Certificate issuer:       /CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
Certificate serial:       13DD0E32C645FAAF10F1753C857305CB3A0B5462
Authority key identifier: FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa
Signing time:             Sun 03 May 2026 02:41:47 +0000
ROA not before:           Sun 03 May 2026 02:36:47 +0000
ROA not after:            Sun 02 May 2027 02:41:47 +0000
asID:                     135459
IP address blocks:        103.68.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl
                          rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:dd:0e:32:c6:45:fa:af:10:f1:75:3c:85:73:05:cb:3a:0b:54:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
        Validity
            Not Before: May  3 02:36:47 2026 GMT
            Not After : May  2 02:41:47 2027 GMT
        Subject: CN=6D997BFAF70C000E79764345759E06B21A5CE27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:04:8e:2d:b6:a9:cc:52:42:e9:0d:6d:9e:
                    b0:8a:73:ba:cc:3e:f2:08:e5:f4:71:cb:15:6e:3d:
                    67:25:0b:41:e4:ae:42:9d:eb:3b:5c:e5:f8:43:d9:
                    69:bb:09:2a:fe:29:97:14:71:2e:2c:52:3e:68:5b:
                    b0:d1:0c:d5:51:33:df:c7:8c:df:e5:0c:29:cd:8a:
                    31:9a:56:14:b9:c9:d2:ed:13:b4:4f:9e:6a:54:9e:
                    69:d1:b6:f4:d4:38:d2:fd:20:a6:39:42:ed:59:0f:
                    1d:bd:d5:d4:36:1c:8b:7f:93:23:d6:8c:67:55:00:
                    9a:b9:ce:69:79:d4:6e:ee:26:1c:fc:77:95:b3:05:
                    52:d0:51:b4:21:48:ee:ec:ff:96:91:a8:90:d4:27:
                    0f:d7:23:52:be:54:df:b0:ea:5b:2e:2c:61:58:c6:
                    ed:a8:f4:69:44:be:38:9b:d0:ff:26:f0:b2:8c:6d:
                    a1:b6:4e:51:0f:b6:69:f6:de:29:ba:d2:7a:9e:a7:
                    6b:30:70:69:2c:32:42:23:95:98:f6:62:35:c6:ba:
                    73:b7:e4:e4:05:e3:aa:79:30:34:5f:e2:91:1c:14:
                    86:e9:b6:b7:bc:e0:d6:a7:a0:bc:41:9f:6c:77:ea:
                    df:5f:aa:95:5c:e5:d6:05:db:de:fa:ab:1c:82:89:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:7B:FA:F7:0C:00:0E:79:76:43:45:75:9E:06:B2:1A:5C:E2:7A
            X509v3 Authority Key Identifier:
                keyid:FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32332d3233203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:79:f2:29:d3:d3:17:a3:8a:49:a4:51:d7:f4:0f:32:14:
         77:ab:69:8f:e1:4b:0d:5f:f7:f9:df:ab:60:40:c5:0d:42:5f:
         2f:d2:5d:24:ca:45:cf:ad:30:95:88:cf:86:19:ea:a7:bd:f2:
         6a:10:5a:34:fa:d6:a1:5c:b5:42:70:c2:3c:d7:b8:e4:3b:e2:
         c6:27:e6:92:46:6b:5c:be:dc:2e:d3:67:ef:5a:a3:6c:34:6c:
         55:b3:29:34:1e:90:d8:78:08:a7:21:41:4b:4b:35:22:51:71:
         f2:62:3e:36:0d:0d:dc:17:a5:20:b1:8f:1e:bd:ff:94:fb:42:
         fe:69:34:ee:12:77:86:56:a9:b8:8a:33:32:33:c5:1c:08:f4:
         98:9f:e3:55:33:a8:8b:54:bb:63:4c:79:f8:0e:f4:34:9d:f8:
         8a:72:e4:35:dc:af:fc:90:25:11:5b:40:ba:76:4d:54:2d:3f:
         53:a4:82:83:7c:85:8d:b0:1a:93:47:04:d4:4c:96:44:1a:56:
         ea:09:0d:ab:c4:61:e4:c5:15:1d:86:d1:a1:8b:19:0b:a3:98:
         ee:c1:d2:c3:cf:4c:e2:94:39:67:a7:9c:af:a1:f4:53:68:6c:
         3e:8e:e6:9f:e7:45:82:4b:66:42:38:7e:f9:90:a0:3a:e9:e3:
         b5:5d:76:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:41:24 2026 by rpki-client