Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
File:                     3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          ngWzWlF3BDUAfLENIH4eXpEMJ09d6MMBm0aRXwTS2DE=
Subject key identifier:   5C:9A:84:09:82:2E:E9:AD:74:9E:C4:9C:33:7D:50:55:1A:B4:FE:A5
Certificate issuer:       /CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
Certificate serial:       07906C9EF55E8209C30FEEB211576A375705C8AA
Authority key identifier: 04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa
Signing time:             Sun 03 May 2026 02:47:05 +0000
ROA not before:           Sun 03 May 2026 02:42:05 +0000
ROA not after:            Sun 02 May 2027 02:47:05 +0000
asID:                     141630
IP address blocks:        103.60.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl
                          rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:90:6c:9e:f5:5e:82:09:c3:0f:ee:b2:11:57:6a:37:57:05:c8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04DBB58511EB566D9BE198B7ECE171D2AE3F0D36
        Validity
            Not Before: May  3 02:42:05 2026 GMT
            Not After : May  2 02:47:05 2027 GMT
        Subject: CN=5C9A8409822EE9AD749EC49C337D50551AB4FEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:cf:e7:9f:36:86:35:ea:18:67:79:fd:78:
                    b3:ff:f2:f4:cb:b5:87:e2:8b:71:23:ce:f7:de:ff:
                    68:ae:3a:7b:49:21:a4:af:9c:5d:c9:51:11:bb:49:
                    30:4e:4a:04:49:07:0e:ff:bf:c6:c3:2b:0e:5a:88:
                    0c:23:d4:c5:bf:c5:30:f5:2b:c9:e6:94:b9:6e:97:
                    8f:28:f1:c4:dc:c0:cb:ee:bb:61:52:29:71:0f:f7:
                    9f:b2:c2:70:cd:f4:94:43:fc:a1:00:5a:27:3b:65:
                    7b:f7:56:8b:99:7b:21:52:e1:d6:3d:80:db:22:3c:
                    ee:56:9f:ef:39:ae:5c:29:43:f7:93:48:d7:61:df:
                    79:7d:3b:9d:ba:af:83:4f:8c:80:70:5f:e6:51:32:
                    9e:1d:1d:e3:96:e8:ba:be:99:ac:3e:22:c7:1d:01:
                    e9:94:cc:7b:65:40:8f:1e:54:14:7f:7c:b8:0b:05:
                    8c:3c:19:27:fa:e3:21:23:c6:5c:70:53:38:0e:8d:
                    e5:7e:2c:d9:54:4b:6a:74:78:b9:8e:2e:f5:bd:ef:
                    3d:59:08:3e:6e:4a:c3:6a:f5:be:3f:0b:e1:37:9a:
                    44:b8:78:74:25:7c:b8:85:39:6d:aa:13:c3:49:4b:
                    2f:e7:60:e3:10:2f:c4:0f:ae:53:81:3c:9c:5f:da:
                    cb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9A:84:09:82:2E:E9:AD:74:9E:C4:9C:33:7D:50:55:1A:B4:FE:A5
            X509v3 Authority Key Identifier:
                keyid:04:DB:B5:85:11:EB:56:6D:9B:E1:98:B7:EC:E1:71:D2:AE:3F:0D:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/04DBB58511EB566D9BE198B7ECE171D2AE3F0D36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138332e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:30:14:9c:ac:11:c6:da:3e:e3:06:7c:3a:60:87:c1:41:21:
         9f:d3:e8:13:de:77:92:b4:2d:aa:5b:52:59:ad:bd:76:e3:24:
         7d:aa:c6:22:23:cb:c2:ce:3c:e3:51:28:a7:4e:82:35:f0:19:
         3b:83:35:20:d2:be:9c:c6:72:fa:7a:08:b0:3a:52:d9:61:36:
         27:79:b9:57:4d:46:d8:5b:97:be:c9:75:24:2a:f9:28:89:48:
         98:55:dd:ac:89:f2:7e:b9:b0:fe:48:66:fb:ef:a3:0d:74:01:
         b7:3c:b5:78:b3:28:53:17:df:ab:87:10:04:fa:ec:f5:78:57:
         8a:4e:be:14:45:da:ec:ce:f6:e6:5b:94:92:a9:f2:ed:96:c7:
         d7:57:00:41:35:b4:95:e5:00:06:35:32:d8:c4:6a:19:05:08:
         ed:2e:ba:c7:a4:bb:99:6d:08:95:5b:84:ce:dd:74:08:fe:a9:
         2d:4d:bb:32:c8:c3:a5:10:38:50:14:d4:74:4d:49:16:aa:86:
         82:d5:a2:c2:28:94:95:8f:e2:aa:da:79:d8:ae:6a:e2:08:51:
         82:53:08:21:85:d0:bb:3b:f1:16:ed:ff:50:22:26:1a:6e:b2:
         29:57:f6:a0:4a:f0:25:0e:9d:57:fb:e3:fd:47:a3:b4:40:7b:
         7a:7e:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:24:00 2026 by rpki-client