Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa
File:                     3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa (raw, json)
Hash identifier:          nH3TPvAFkZKwqgvDTzS/MZKBt6AIRZ4rxC5p8WMi6xw=
Subject key identifier:   A4:49:4E:10:03:5E:2A:0F:4D:2B:66:F5:66:3C:2B:85:BC:6F:46:1E
Certificate issuer:       /CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
Certificate serial:       6B1E5D2F3FB4FEE87E6D1127F0845E1688FFCFBF
Authority key identifier: D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa
Signing time:             Sun 03 May 2026 02:51:02 +0000
ROA not before:           Sun 03 May 2026 02:46:02 +0000
ROA not after:            Sun 02 May 2027 02:51:02 +0000
asID:                     134620
IP address blocks:        103.203.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl
                          rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:5d:2f:3f:b4:fe:e8:7e:6d:11:27:f0:84:5e:16:88:ff:cf:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6D8C57F4E943F88132EE42C66118E6CC91FEDBF
        Validity
            Not Before: May  3 02:46:02 2026 GMT
            Not After : May  2 02:51:02 2027 GMT
        Subject: CN=A4494E10035E2A0F4D2B66F5663C2B85BC6F461E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ab:ff:67:03:31:ce:19:16:e2:89:b3:13:d7:
                    5e:4b:a8:23:cf:3e:ac:d3:ec:d7:a3:73:bf:59:c0:
                    8a:41:86:25:6b:62:ae:33:08:bd:94:76:19:9a:7f:
                    29:29:3f:ef:0b:3f:7c:fd:24:b8:71:92:7e:68:e9:
                    57:82:dd:b7:a3:f0:4f:f4:84:08:84:82:32:80:c7:
                    66:6e:4f:89:1b:00:69:8b:4e:20:93:d0:c6:91:14:
                    f7:56:cd:70:a1:66:38:78:b5:0f:98:83:41:25:10:
                    7c:49:02:91:90:91:7f:a6:e0:22:6a:37:2e:7d:55:
                    aa:a6:08:b4:8b:a0:19:34:a9:84:1e:f9:79:c9:72:
                    6d:13:bc:79:94:bf:44:a6:20:74:16:9f:58:3f:cf:
                    6f:0c:00:28:f9:60:b3:19:dc:76:2e:29:83:b8:03:
                    de:d3:72:33:23:13:1f:5d:48:6f:f1:d4:1e:a6:ed:
                    ab:2d:32:d0:f2:cd:11:2c:4e:bb:38:8e:7f:68:d6:
                    9c:7f:67:e7:12:f4:9b:bf:c8:b7:3a:e6:40:41:b2:
                    76:d0:01:81:c6:66:5f:bd:50:95:83:87:86:67:78:
                    00:d0:74:29:c1:ba:39:70:1f:f3:8e:b7:ea:74:74:
                    c0:a3:9f:66:fc:af:b4:48:89:ea:9b:a2:ce:83:c9:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:4E:10:03:5E:2A:0F:4D:2B:66:F5:66:3C:2B:85:BC:6F:46:1E
            X509v3 Authority Key Identifier:
                keyid:D6:D8:C5:7F:4E:94:3F:88:13:2E:E4:2C:66:11:8E:6C:C9:1F:ED:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D6D8C57F4E943F88132EE42C66118E6CC91FEDBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8daa4c0f-9992-42fc-a542-eff74091b334/0/3130332e3230332e37392e302f32342d3234203d3e20313334363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:53:b2:39:1f:63:fc:56:6f:45:4d:73:b9:cb:52:05:75:bf:
         9b:7d:be:13:c3:cd:45:2c:4c:e9:76:de:94:c2:ee:5c:50:81:
         bc:d4:10:96:2b:56:0a:7d:c4:75:70:26:12:f0:d9:91:b2:da:
         e7:2b:0d:51:45:6c:91:6e:eb:5d:64:34:4e:13:0c:fd:d6:98:
         57:60:8a:a6:18:ef:9b:6f:1e:56:19:33:22:69:82:3d:4a:ce:
         8d:fb:a6:66:80:e1:2d:a5:47:8a:ff:d9:3c:eb:db:07:1b:c1:
         b2:c3:cf:64:f1:36:80:3f:8f:b1:a3:cc:5c:57:c0:95:35:46:
         00:9c:61:aa:88:73:01:59:62:e9:42:74:68:63:4e:5f:1a:8a:
         ec:d9:3b:e6:ca:7f:01:3d:3d:4e:5f:4f:d1:30:f4:a4:30:a2:
         d9:d5:59:06:d9:e8:dd:89:a8:e1:26:00:a8:fe:ad:49:77:40:
         f7:84:90:ba:c1:7c:1f:f4:25:e6:5c:a7:38:93:8a:fa:18:94:
         61:26:f3:aa:a4:b4:84:cd:a0:83:ae:a3:88:1a:3b:f2:3f:1f:
         52:49:06:a8:2f:0c:9c:7b:2c:2a:67:b3:0a:b8:76:d9:b8:50:
         fc:ae:e3:83:bd:d1:56:e1:32:21:2e:3f:1b:04:99:51:82:43:
         80:3f:72:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:51 2026 by rpki-client