Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa
File:                     3130332e36312e31362e302f32332d3233203d3e20313530353039.roa (raw, json)
Hash identifier:          k1LlJpocF1vgHgQA+AGjHOkUiitq89QTOMWdIoC3Ufw=
Subject key identifier:   59:D2:EA:C0:97:EB:A3:50:FD:6C:4A:B7:30:E8:5E:4E:14:BC:9D:FF
Certificate issuer:       /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial:       3F55473840E756564F491B8601085EA369B57C99
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa
Signing time:             Sun 03 May 2026 02:53:04 +0000
ROA not before:           Sun 03 May 2026 02:48:04 +0000
ROA not after:            Sun 02 May 2027 02:53:04 +0000
asID:                     150509
IP address blocks:        103.61.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
                          rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:55:47:38:40:e7:56:56:4f:49:1b:86:01:08:5e:a3:69:b5:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
        Validity
            Not Before: May  3 02:48:04 2026 GMT
            Not After : May  2 02:53:04 2027 GMT
        Subject: CN=59D2EAC097EBA350FD6C4AB730E85E4E14BC9DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f5:c1:3e:91:85:1c:95:29:ae:7a:11:6d:a6:
                    b4:fd:0b:82:dd:e7:bc:cc:86:04:cb:5c:f6:b3:2f:
                    93:6f:43:83:e7:39:01:e4:ba:67:4b:d2:b8:76:10:
                    5d:50:d4:5f:a2:e2:25:9f:10:75:9a:77:2e:d1:69:
                    c0:d9:b4:21:ef:7f:5a:8f:d8:1b:6b:b8:e5:76:68:
                    6f:04:c0:0d:b9:29:35:87:d9:74:c5:5e:0d:78:3a:
                    c7:2e:55:2c:f4:0c:4b:64:d6:87:aa:1d:f7:3e:03:
                    1e:49:48:ed:2f:60:22:f4:9a:a8:09:5a:0e:ca:d9:
                    71:6b:d5:20:0d:a3:bf:89:11:fd:14:a3:97:af:6a:
                    84:0a:df:07:ee:9b:c8:2a:f9:ad:ab:79:23:83:71:
                    b4:c3:42:be:42:e3:0e:46:da:9d:38:d3:6f:82:53:
                    cf:e1:68:40:47:01:ca:13:0b:2a:3d:74:33:3f:73:
                    94:42:78:6b:b7:34:bb:cb:ff:31:4c:fb:e3:5e:d4:
                    8e:69:38:5f:8e:fa:f0:0c:0c:cf:03:3f:8a:0f:9d:
                    5f:e0:7f:c0:ae:ef:a8:b9:4a:3b:73:62:83:fd:b7:
                    d8:52:48:5f:15:0c:30:28:e7:9e:b5:4b:6c:97:36:
                    08:4f:28:8d:87:78:2d:e5:6a:3c:c8:71:ff:46:07:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D2:EA:C0:97:EB:A3:50:FD:6C:4A:B7:30:E8:5E:4E:14:BC:9D:FF
            X509v3 Authority Key Identifier:
                keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31362e302f32332d3233203d3e20313530353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:fd:2e:6e:f2:d0:df:22:7d:d7:2b:54:03:0f:e8:8f:d8:51:
         c4:4a:03:5c:f1:70:5e:d4:4c:49:f1:84:98:0b:3d:2b:7f:21:
         6d:03:89:7e:10:d4:32:ee:19:80:fc:57:de:31:4c:54:f2:d6:
         cd:3d:db:af:e9:64:b6:97:de:b7:98:9d:e4:fe:2e:a9:0c:b6:
         f9:90:6d:14:d6:a4:4a:af:ea:ef:04:72:dc:a8:b8:05:fe:a6:
         29:9b:b4:a2:6f:6a:01:c5:2f:00:92:c1:a7:50:20:cb:ea:1d:
         85:4c:c5:00:30:9f:3a:7f:77:a1:7b:6e:aa:e9:c2:48:76:d2:
         6a:85:7e:56:a3:ad:ad:2c:c3:6a:6c:14:2e:fc:e7:88:e2:1b:
         41:41:97:60:9e:ea:e3:90:32:e3:26:3d:6e:cf:b8:1d:8a:ba:
         d2:a7:10:5b:72:ad:97:1c:fa:0d:e8:2b:e9:a6:9b:23:fb:59:
         a2:ab:85:fb:9c:33:25:52:04:15:fd:1b:34:b8:33:c8:1f:45:
         86:78:f8:b6:af:fc:fb:19:ba:81:09:32:65:ea:a0:e4:f2:9b:
         6e:9e:6a:6e:bf:8c:0e:51:a3:d0:04:b2:f8:bd:04:88:76:69:
         66:69:77:27:eb:a9:44:35:54:0d:39:cd:4c:0e:3d:37:d1:86:
         42:53:2e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:42 2026 by rpki-client