Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa
File:                     3130332e36382e332e302f32342d3234203d3e20313335343539.roa (raw, json)
Hash identifier:          0CZkz6a+5+osvi5PALP9I1DsZqwtG6rkGAZa2o+VsKA=
Subject key identifier:   5D:7A:09:5D:DF:F6:73:DB:A3:18:F3:60:31:01:9A:67:BC:9D:6C:44
Certificate issuer:       /CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
Certificate serial:       0B89E8EAAD1B86CDA3DBF334F6C70AB8A47D2D50
Authority key identifier: FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa
Signing time:             Sun 03 May 2026 02:41:48 +0000
ROA not before:           Sun 03 May 2026 02:36:48 +0000
ROA not after:            Sun 02 May 2027 02:41:48 +0000
asID:                     135459
IP address blocks:        103.68.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl
                          rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:89:e8:ea:ad:1b:86:cd:a3:db:f3:34:f6:c7:0a:b8:a4:7d:2d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE6CF07DCDA4007E69D319C5B6A7157546851773
        Validity
            Not Before: May  3 02:36:48 2026 GMT
            Not After : May  2 02:41:48 2027 GMT
        Subject: CN=5D7A095DDFF673DBA318F36031019A67BC9D6C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:3e:4a:5c:43:12:7e:13:77:9c:44:dc:c3:
                    09:06:2f:f1:67:56:b9:77:98:3b:21:60:cb:be:e2:
                    39:94:b1:f3:cd:3c:07:0d:64:64:60:58:99:69:28:
                    f2:a2:41:cc:00:cf:1c:6c:c7:5d:0e:a7:d4:97:fc:
                    27:88:e4:24:67:19:27:47:a2:3a:05:59:91:cc:84:
                    b4:73:76:54:ae:21:54:95:4d:9a:ab:2e:12:e9:a1:
                    41:21:1f:e4:ca:6d:03:3d:c5:5c:c9:02:a2:57:05:
                    ba:63:12:34:23:da:5a:3e:1d:01:02:19:e6:2c:59:
                    80:3e:b0:a7:d8:1e:c3:bc:a3:f5:84:f7:e5:c2:ef:
                    f5:d9:0e:a9:63:25:07:58:95:b2:4f:08:f4:35:a8:
                    21:62:19:e0:5b:45:9d:95:fc:ad:23:1b:97:99:4a:
                    c4:b5:53:28:ee:4d:18:eb:48:e6:1c:6c:2c:e6:30:
                    42:89:08:d8:51:68:3d:c7:e0:4f:36:2f:70:a7:7f:
                    ee:21:fe:03:19:03:12:a9:47:b6:43:c2:4f:8d:b4:
                    f4:bd:1f:ab:cd:4f:fd:29:1f:d4:72:b4:eb:71:0b:
                    14:4a:01:08:40:98:39:3c:8b:3f:91:b8:0e:a1:e0:
                    1a:37:77:84:a4:96:17:55:8c:b1:a3:01:75:85:23:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7A:09:5D:DF:F6:73:DB:A3:18:F3:60:31:01:9A:67:BC:9D:6C:44
            X509v3 Authority Key Identifier:
                keyid:FE:6C:F0:7D:CD:A4:00:7E:69:D3:19:C5:B6:A7:15:75:46:85:17:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/FE6CF07DCDA4007E69D319C5B6A7157546851773.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FE6CF07DCDA4007E69D319C5B6A7157546851773.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:17:55:08:00:3f:e9:fb:9e:98:4e:15:4b:ec:cb:e3:c5:f4:
         89:65:b1:19:ac:dd:43:f3:a4:c4:3c:e6:07:33:bd:c4:43:12:
         20:77:66:8e:fd:f1:67:2e:6c:5a:21:53:04:10:8a:da:3c:dd:
         41:e1:ca:a7:76:e3:66:6c:62:0d:32:5f:4c:bf:61:cd:79:a9:
         c7:12:5e:fe:92:a3:0d:d7:0d:8c:c2:c4:47:ce:5e:76:6f:02:
         db:2b:19:8a:15:c3:4f:e9:c8:cc:76:36:61:29:d8:af:15:d2:
         5a:1e:86:cf:b5:3c:a7:52:f0:d2:36:0c:15:e8:f2:c0:8c:be:
         5a:9b:e7:fc:93:77:bb:83:77:c9:71:4f:12:b2:b7:61:65:c6:
         ff:5a:d1:21:a2:c5:e0:9b:a8:46:54:a0:9f:54:77:3f:59:cb:
         0a:5a:08:79:94:64:c4:7e:a0:67:35:43:be:f4:5f:3d:59:b5:
         e4:b8:c2:fa:7b:20:d4:5f:20:e9:7a:a9:ec:34:1b:aa:5c:c7:
         b4:86:40:cc:fc:3e:e1:a5:7e:3a:39:7d:69:9b:97:24:f9:09:
         a4:c1:35:94:f1:a2:03:a7:62:89:f0:16:ef:97:3e:b5:24:e4:
         78:d4:5c:45:b2:9e:0c:13:ff:1c:99:0b:ce:39:2a:02:49:75:
         a2:21:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:25 2026 by rpki-client