Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa
File:                     3130332e31312e3130362e302f32342d3234203d3e203536323630.roa (raw, json)
Hash identifier:          mOIy6jqUeVMspfreDn1PT5EUDCXF4LQ8aTefz/4cLLc=
Subject key identifier:   FF:48:DF:FC:2E:9C:CC:3C:D2:E8:CF:96:F4:C1:5B:13:C4:80:E3:14
Certificate issuer:       /CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
Certificate serial:       0467401D890A7655901B0FC25D2C09F80FE69EF4
Authority key identifier: 46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa
Signing time:             Sun 03 May 2026 02:48:12 +0000
ROA not before:           Sun 03 May 2026 02:43:12 +0000
ROA not after:            Sun 02 May 2027 02:48:12 +0000
asID:                     56260
IP address blocks:        103.11.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl
                          rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:67:40:1d:89:0a:76:55:90:1b:0f:c2:5d:2c:09:f8:0f:e6:9e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E314812FB30DE0136CC87F00EF98BA4A8F7F4F
        Validity
            Not Before: May  3 02:43:12 2026 GMT
            Not After : May  2 02:48:12 2027 GMT
        Subject: CN=FF48DFFC2E9CCC3CD2E8CF96F4C15B13C480E314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:8e:88:89:00:33:1b:95:62:35:87:bc:2c:
                    30:4c:29:aa:93:bc:5b:33:f9:a8:2b:e0:bf:f5:dd:
                    a7:37:20:48:17:71:5a:53:4e:3e:80:ea:3b:80:c9:
                    b6:63:94:d7:51:30:6d:ba:2d:31:ae:9f:1e:be:71:
                    6d:94:c7:48:24:e3:de:ca:1a:25:fe:f5:ea:a2:70:
                    fc:cc:7e:41:39:17:73:40:4c:d8:66:cd:76:b5:63:
                    26:4a:27:60:9a:6d:24:70:24:56:ed:d0:9e:24:3a:
                    9f:7e:63:4f:a2:fc:51:eb:26:85:9b:e6:7f:a7:d8:
                    a8:97:40:7c:63:bf:17:75:71:eb:49:8f:44:ea:05:
                    e2:2f:a0:dc:be:80:6b:a9:d2:a7:20:25:ad:5b:b4:
                    97:5f:ef:e6:3e:9a:22:b9:1e:61:08:75:89:d5:f9:
                    6e:74:77:8b:a2:50:09:b8:c8:6c:36:a9:89:6f:ae:
                    d7:cb:84:af:2a:63:49:31:ad:01:f4:74:28:48:48:
                    d7:8c:6d:b2:6d:cb:a3:59:9c:f9:a1:db:7a:ab:0c:
                    1e:ab:62:32:e7:4a:0e:1a:46:6c:a9:c7:ad:dc:00:
                    77:bb:26:3c:f5:70:f8:95:d8:52:1c:28:e8:36:5b:
                    35:a1:90:93:ca:87:a6:40:1a:5d:28:2e:fb:81:c0:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:48:DF:FC:2E:9C:CC:3C:D2:E8:CF:96:F4:C1:5B:13:C4:80:E3:14
            X509v3 Authority Key Identifier:
                keyid:46:E3:14:81:2F:B3:0D:E0:13:6C:C8:7F:00:EF:98:BA:4A:8F:7F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/46E314812FB30DE0136CC87F00EF98BA4A8F7F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e31312e3130362e302f32342d3234203d3e203536323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:a7:aa:c1:59:01:b1:10:d6:d6:f4:84:67:db:32:49:71:4e:
         9a:6e:fa:0d:5a:51:ed:a6:82:27:68:31:78:ee:b4:32:f1:3b:
         90:84:57:95:24:06:6e:17:83:35:95:c2:ac:4e:42:8a:a8:83:
         fe:9c:9c:45:2b:5e:1f:64:da:59:92:1b:ce:79:a3:37:78:5c:
         69:97:da:53:13:41:e5:9b:62:fd:ad:59:a6:ee:76:45:a9:69:
         c1:86:2e:c5:fc:8a:89:21:ac:0c:fd:ef:5a:87:52:df:ba:68:
         c2:ed:c3:01:00:23:36:23:bd:e6:b4:49:81:f6:87:80:b1:86:
         73:6a:73:28:68:ed:b3:78:79:37:f3:0e:22:72:92:e7:30:18:
         ac:14:a4:3c:b8:92:8c:0a:90:f5:d3:3c:7e:b7:70:92:b5:33:
         6d:96:56:35:da:c1:e6:90:54:f5:ed:3c:8d:22:14:6e:e6:d4:
         ec:15:e0:55:93:7e:c8:81:8f:6b:9c:11:18:88:cf:e9:9e:36:
         56:85:fb:bd:c5:83:30:28:b6:19:e7:41:80:56:75:b3:6a:8e:
         97:6d:ba:c2:f0:70:fc:10:74:d7:0d:ae:b9:bd:01:6e:99:af:
         a6:61:f9:fe:e9:d4:7b:7d:3c:f9:3f:94:cd:dc:59:1c:6f:f8:
         c7:ba:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:17 2026 by rpki-client