Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
File:                     3130332e36382e322e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          3cWQas52pwAw1uujPKPnRiHi6MLrIyFC4wXOlAdEZj8=
Subject key identifier:   66:B4:8E:38:9C:03:C5:70:C4:6B:99:C5:19:90:2F:A0:65:51:EA:31
Certificate issuer:       /CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
Certificate serial:       5603F6BAE8F49908B409379882AC1E910A19114B
Authority key identifier: FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa
Signing time:             Sun 03 May 2026 02:41:47 +0000
ROA not before:           Sun 03 May 2026 02:36:47 +0000
ROA not after:            Sun 02 May 2027 02:41:47 +0000
asID:                     150265
IP address blocks:        103.68.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl
                          rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:03:f6:ba:e8:f4:99:08:b4:09:37:98:82:ac:1e:91:0a:19:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
        Validity
            Not Before: May  3 02:36:47 2026 GMT
            Not After : May  2 02:41:47 2027 GMT
        Subject: CN=66B48E389C03C570C46B99C519902FA06551EA31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:35:c0:e7:9b:9b:f6:fc:88:5d:3e:6f:aa:e8:
                    b0:aa:5c:1e:43:45:da:d2:5b:6b:fa:11:ce:58:3b:
                    16:a5:19:e5:a1:a0:16:00:fd:d0:64:7c:a3:61:12:
                    7f:35:a8:c4:6b:92:6b:d4:6e:9e:d7:64:7f:06:98:
                    bb:54:de:dd:8d:1c:a8:e5:a7:c4:6c:62:d9:20:ac:
                    80:2b:5e:92:84:70:a4:8b:cc:d5:ac:85:ea:aa:84:
                    d0:d7:51:aa:27:25:44:15:23:6e:7d:01:ac:c8:05:
                    9e:20:7a:d4:60:25:b1:70:bd:42:14:c3:7b:eb:d6:
                    3a:f1:51:52:0f:5b:e1:b0:c7:ff:93:8a:d9:52:0b:
                    f9:5f:b1:06:96:d4:06:71:b9:6b:e1:dd:ca:75:b6:
                    b7:45:e3:aa:35:89:da:d4:b4:74:3a:2e:1b:9b:c0:
                    d6:53:a4:2e:e2:f9:26:f8:61:b6:48:4f:43:30:b1:
                    32:5a:68:e7:2e:81:b0:76:9b:47:b9:57:e5:3c:88:
                    69:c4:ad:43:f6:19:ca:13:7e:d5:ed:bb:72:f7:53:
                    b9:60:b7:42:34:3f:7d:7d:55:3d:cd:88:39:41:f6:
                    19:fe:74:be:e2:fe:ea:4b:82:a6:46:56:91:c0:d8:
                    88:da:16:20:db:de:e8:2a:be:6e:36:2d:82:bc:68:
                    0a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B4:8E:38:9C:03:C5:70:C4:6B:99:C5:19:90:2F:A0:65:51:EA:31
            X509v3 Authority Key Identifier:
                keyid:FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a7:05:3f:a5:37:97:54:81:0d:65:40:ad:30:ee:83:5f:c8:
         93:3c:aa:94:09:30:c0:d3:6b:cc:50:cd:d5:ef:85:47:e2:f1:
         a0:0b:0e:f0:d4:9a:0b:20:53:4c:3d:87:23:a5:a4:af:57:96:
         40:59:a9:df:e1:ec:78:ee:4e:12:c7:40:cb:39:ac:a9:dc:60:
         98:97:4b:cd:e8:59:df:bc:d3:ee:fb:03:7b:1b:a8:bc:96:22:
         d4:45:0f:a2:8f:3f:71:64:36:14:8a:9c:ab:8a:26:b1:05:61:
         d2:a0:f9:c3:0d:75:0b:1f:42:43:53:44:1a:a2:45:9f:86:53:
         e5:d0:13:f4:9d:2c:c6:a4:ec:03:d7:e8:27:99:d9:02:d0:9a:
         a8:58:ca:df:d4:28:28:84:8e:2b:72:35:14:39:31:43:c1:1a:
         dd:2c:20:5d:12:b9:75:9a:18:5c:f5:07:28:5e:f2:f5:e2:f5:
         27:ef:97:e2:c1:bc:df:3c:af:e5:f0:78:88:b7:a0:5b:db:a2:
         a1:0e:74:4b:d2:78:c1:7d:0b:47:03:08:5d:24:d3:22:2a:bf:
         72:47:e9:51:d5:af:62:ab:f4:d3:0d:57:b4:af:1a:8e:c4:ff:
         17:dc:1e:de:c5:bc:3d:ef:a3:3a:9d:b5:c7:25:e3:8a:9c:b3:
         56:7d:5e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:44 2026 by rpki-client