Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa
File:                     3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (raw, json)
Hash identifier:          Je+1Z3JPlfN1SueLjZhyMHWstp3IWlu0F41bg1IrLNI=
Subject key identifier:   0C:62:16:FD:AA:2F:88:95:AA:F8:28:D6:0D:CC:35:F2:B7:EA:AF:77
Certificate issuer:       /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
Certificate serial:       05F90194B1DEF508146E837A195827C8C3D07EF9
Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa
Signing time:             Sun 03 May 2026 02:52:14 +0000
ROA not before:           Sun 03 May 2026 02:47:14 +0000
ROA not after:            Sun 02 May 2027 02:52:14 +0000
asID:                     150504
IP address blocks:        103.60.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl
                          rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f9:01:94:b1:de:f5:08:14:6e:83:7a:19:58:27:c8:c3:d0:7e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
        Validity
            Not Before: May  3 02:47:14 2026 GMT
            Not After : May  2 02:52:14 2027 GMT
        Subject: CN=0C6216FDAA2F8895AAF828D60DCC35F2B7EAAF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c4:46:6c:83:5f:b1:4a:8f:fe:4f:13:9a:f4:
                    1b:29:a5:87:ae:e9:4d:bb:8d:ec:56:2e:26:8a:12:
                    78:19:8b:d8:41:10:11:8e:7f:71:74:fe:c9:e2:08:
                    a5:ee:99:8b:29:e8:27:28:7f:e5:af:c0:b0:32:9d:
                    94:b0:01:db:69:4b:9f:c4:9f:da:2d:4a:89:65:88:
                    7b:46:ae:e0:6b:12:5b:ed:3e:ba:22:ee:a2:ae:d2:
                    37:78:b3:8d:0a:ca:70:5c:55:63:42:6c:11:2f:e5:
                    be:04:3c:bb:78:fc:7c:9e:d4:95:d8:7b:00:d3:54:
                    be:ea:7b:bf:f0:f6:61:a8:b6:34:a7:d3:9a:28:b8:
                    64:94:a2:d1:99:9f:af:92:21:01:b9:8b:75:47:3e:
                    54:7e:68:ff:96:98:ba:98:24:fc:dc:bd:47:0f:a9:
                    f2:e0:17:98:87:23:d0:f3:3e:0e:8b:94:68:d8:ed:
                    8a:83:53:c7:f9:8d:37:18:9d:1f:15:12:cb:7b:a4:
                    67:c6:5f:89:cd:62:00:66:db:e6:74:a1:bc:39:21:
                    94:ae:60:77:2f:91:77:d2:37:8e:8a:3f:94:e7:c6:
                    d7:ca:45:92:5b:61:18:7f:31:46:c4:7c:19:a7:42:
                    ed:0c:d9:61:b8:01:a7:b3:34:ec:1b:fe:02:d6:38:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:16:FD:AA:2F:88:95:AA:F8:28:D6:0D:CC:35:F2:B7:EA:AF:77
            X509v3 Authority Key Identifier:
                keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:b8:10:60:9e:67:f6:b7:0a:e5:5a:07:f6:f8:6a:59:73:
         b0:55:39:7a:38:bf:87:91:7f:21:2e:a3:78:30:7d:e3:fd:f3:
         02:f6:63:2e:91:ec:5e:94:13:ac:51:0d:e9:67:23:72:a4:97:
         98:e3:4d:1e:cb:30:c0:27:88:ab:71:e8:4c:67:ec:c0:e8:aa:
         9f:49:57:3a:d2:ab:27:3f:75:e0:26:d0:9c:32:2d:56:b9:0e:
         7f:a5:19:c2:6e:23:fc:14:e4:a5:36:69:21:5e:44:ab:9a:99:
         5b:60:ce:5d:e7:68:89:18:32:6c:81:3d:8f:85:f5:45:50:dd:
         7a:36:72:f9:07:a9:ce:84:de:2e:cf:48:c2:e0:a3:22:8d:6d:
         4d:44:ab:6b:31:4b:7d:d2:35:37:e4:5b:ee:cd:50:25:c6:5f:
         92:54:18:f3:ca:bb:39:6b:33:cb:15:d9:61:b2:ff:bb:72:10:
         11:2c:41:75:e1:b1:cb:8f:9e:a4:0f:e7:bd:09:59:d1:19:0b:
         f3:c6:4a:c0:bb:69:e9:0e:44:d8:28:94:e1:81:c0:cf:ca:82:
         2f:f2:34:24:d4:fa:cd:b1:fb:85:d2:2d:e3:86:a2:88:5a:8e:
         74:c5:41:45:5d:37:61:e0:be:4b:21:e2:d4:a8:70:ac:2c:be:
         22:5f:ee:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:56 2026 by rpki-client