Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa
File:                     3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa (raw, json)
Hash identifier:          DmsqerRTCfleWC17bgPmpGYVL2XXTPf5hE4dywrXO3g=
Subject key identifier:   81:38:B0:C6:AD:BC:C4:5F:01:67:31:37:84:9D:37:D7:C6:1B:4E:F4
Certificate issuer:       /CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
Certificate serial:       6848CCBA8D0A7A710B4439F2E76FB076B920548A
Authority key identifier: DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa
Signing time:             Sun 03 May 2026 02:52:15 +0000
ROA not before:           Sun 03 May 2026 02:47:15 +0000
ROA not after:            Sun 02 May 2027 02:52:15 +0000
asID:                     150504
IP address blocks:        103.60.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl
                          rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:48:cc:ba:8d:0a:7a:71:0b:44:39:f2:e7:6f:b0:76:b9:20:54:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B
        Validity
            Not Before: May  3 02:47:15 2026 GMT
            Not After : May  2 02:52:15 2027 GMT
        Subject: CN=8138B0C6ADBCC45F01673137849D37D7C61B4EF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:0e:1d:ed:a5:a2:4e:bb:bb:75:90:6a:d4:
                    8d:a6:fb:f4:53:0e:76:f0:ab:7e:b6:f2:b4:2d:1a:
                    cc:d1:90:91:29:85:d1:d9:2a:01:c2:73:ff:19:7f:
                    e1:28:c9:65:2b:df:89:c7:1a:87:bf:44:28:91:03:
                    ef:18:42:d1:9a:b6:90:47:ca:7e:a5:21:09:72:1b:
                    4d:9e:cf:94:f2:32:a3:2e:91:99:bf:e5:0b:68:17:
                    2e:2a:3d:f0:f9:64:4f:96:ef:b7:13:cd:eb:eb:1b:
                    e1:31:e5:73:94:01:b1:d4:87:34:9e:f2:04:af:f0:
                    25:53:42:cf:db:5a:72:4f:db:8d:dd:69:ca:24:b2:
                    48:09:d4:75:ad:f7:30:da:b1:7c:50:a3:07:17:1a:
                    47:dc:fb:b6:69:6a:ea:ba:1b:f6:ba:65:61:e7:23:
                    e6:2f:77:c7:51:e9:a0:da:80:12:99:2e:39:a3:9a:
                    8a:84:42:14:df:fd:b3:18:34:86:e3:56:48:ef:80:
                    a5:eb:d9:f2:bd:72:98:11:99:d4:f2:7c:6f:94:fb:
                    85:fb:e1:db:ad:85:40:b0:67:3d:72:37:06:75:89:
                    4e:e2:0b:78:a5:ba:a4:33:10:e4:74:c5:d5:26:fe:
                    83:4a:88:cc:59:c6:6e:fe:06:5a:71:01:22:2a:bf:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:B0:C6:AD:BC:C4:5F:01:67:31:37:84:9D:37:D7:C6:1B:4E:F4
            X509v3 Authority Key Identifier:
                keyid:DD:D5:48:DA:4E:2E:D6:88:01:8C:17:8F:F6:B1:DB:6A:B4:0A:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DDD548DA4E2ED688018C178FF6B1DB6AB40AAD6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233332e302f32342d3234203d3e20313530353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:28:66:a5:e8:83:49:e5:1e:28:a9:d8:16:dc:b3:5d:15:fb:
         85:51:41:44:b3:47:af:8b:ad:5f:b8:96:3e:ce:27:fb:79:0c:
         eb:65:9f:39:0c:2a:6d:cc:5e:62:9c:e6:a4:f8:95:15:84:f9:
         8a:17:3b:7e:27:a4:7e:54:63:e3:d1:06:af:29:8f:a8:4c:83:
         dd:9f:32:d9:80:c6:25:f1:12:cf:6b:c7:89:c1:4b:8c:dd:f4:
         b2:3c:e6:2f:5c:70:6d:f6:e5:75:66:56:6c:1e:f6:71:9a:4c:
         18:6a:94:5d:89:d3:51:81:97:48:2d:2e:bd:43:ac:b4:de:69:
         05:cd:f2:f8:d6:db:62:7a:09:70:aa:f6:fd:3f:e7:40:72:80:
         cb:a9:e7:fc:28:ca:d7:c5:5f:07:68:98:81:17:d7:90:72:9f:
         24:36:07:e8:61:8c:a0:6d:37:dd:99:e5:db:50:29:95:b2:ef:
         90:97:0f:73:d4:75:7e:11:45:8e:61:2e:96:48:aa:1c:c3:35:
         56:6c:9e:85:02:2a:ee:59:64:aa:ff:ee:4c:d8:ff:28:fd:cf:
         5e:01:33:8b:d1:1b:5d:e8:23:5b:ef:bd:1d:91:f6:14:4b:71:
         68:39:cb:41:25:a9:d4:61:8b:a7:e5:7f:3d:c9:22:4d:54:76:
         ad:f3:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:13 2026 by rpki-client