Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
File:                     3130332e36312e31372e302f32342d3234203d3e20313530353039.roa (raw, json)
Hash identifier:          XtTS/mCdngeqqFjc8wIuybtYZWF8EYN94kDxpI/AJoI=
Subject key identifier:   0D:A9:E6:B5:9E:23:0A:FE:0E:7C:F4:5A:E2:BD:A7:5C:15:5E:F7:E7
Certificate issuer:       /CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
Certificate serial:       06397073B1637DF446AA821AB3FE0146D9029D8B
Authority key identifier: 6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa
Signing time:             Sun 03 May 2026 02:53:03 +0000
ROA not before:           Sun 03 May 2026 02:48:03 +0000
ROA not after:            Sun 02 May 2027 02:53:03 +0000
asID:                     150509
IP address blocks:        103.61.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl
                          rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:39:70:73:b1:63:7d:f4:46:aa:82:1a:b3:fe:01:46:d9:02:9d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C21F371FCEDD2DE29AE914B353F6951F995079A
        Validity
            Not Before: May  3 02:48:03 2026 GMT
            Not After : May  2 02:53:03 2027 GMT
        Subject: CN=0DA9E6B59E230AFE0E7CF45AE2BDA75C155EF7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:15:83:77:af:82:92:f9:d5:82:13:bf:69:
                    e8:15:60:d8:64:ae:5a:48:56:56:e8:44:ae:20:aa:
                    95:e0:c6:f3:87:59:30:b3:8e:46:5f:b9:5f:ba:89:
                    b8:45:b1:f4:ab:6f:1b:32:2f:a9:e1:b6:7e:9d:32:
                    58:5e:f5:8a:15:5e:6b:f3:06:3a:d2:b4:76:19:1f:
                    bd:29:37:6f:28:3c:d6:5b:2e:17:81:02:bd:c9:bb:
                    ed:dc:16:d1:b7:22:f1:96:0e:14:85:75:05:8e:83:
                    8b:30:b5:0a:c5:c1:ff:f6:04:1a:6d:c1:5e:75:ce:
                    d1:44:5a:7a:d1:61:3b:21:cc:2d:90:d6:82:d9:cc:
                    8f:f2:82:b9:fe:28:2b:44:08:03:e0:8f:cb:9b:f6:
                    62:02:bc:88:c5:93:55:01:bd:f8:64:9e:2f:01:06:
                    f0:3e:0c:75:e9:2d:8f:d7:73:2a:61:90:11:71:e0:
                    aa:da:ce:48:92:a6:ca:20:6f:b3:cb:d1:89:0c:af:
                    e5:11:e5:46:ca:8d:fa:ae:ee:16:e5:5c:33:45:40:
                    51:1c:df:b0:5e:e4:50:16:41:82:ce:de:06:21:84:
                    c6:49:9e:da:45:5d:e4:68:55:75:78:17:c4:d9:d3:
                    73:48:fb:a5:cf:61:2a:04:46:e2:f5:7a:33:f7:a7:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:E6:B5:9E:23:0A:FE:0E:7C:F4:5A:E2:BD:A7:5C:15:5E:F7:E7
            X509v3 Authority Key Identifier:
                keyid:6C:21:F3:71:FC:ED:D2:DE:29:AE:91:4B:35:3F:69:51:F9:95:07:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/6C21F371FCEDD2DE29AE914B353F6951F995079A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C21F371FCEDD2DE29AE914B353F6951F995079A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/95ec6cf8-9655-4379-bf36-37271438d03a/0/3130332e36312e31372e302f32342d3234203d3e20313530353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:cf:2d:38:65:1d:69:55:95:84:e4:cd:89:bb:f8:0b:25:
         91:2d:a8:26:94:47:71:e6:c0:48:3c:d7:5e:ab:f2:91:29:02:
         a9:86:73:45:fb:30:f4:cf:5b:ce:e6:49:43:4f:36:32:b1:19:
         3d:4e:c2:a2:76:f6:30:b0:f4:2d:cb:3b:c1:c0:de:52:47:29:
         41:42:39:66:17:fc:bd:77:9a:5d:5a:29:8c:0a:f3:e1:92:a8:
         ce:ce:1b:d0:73:da:82:24:20:be:4f:e9:d1:dc:43:18:2e:6a:
         38:36:39:2b:07:79:a3:a8:12:b6:09:03:a7:e6:a9:47:22:2b:
         67:76:f9:31:ac:e4:fb:a7:e8:20:60:2b:d7:f4:1e:f2:57:2e:
         de:57:5a:a1:53:d9:04:5b:4c:25:2f:f0:c7:67:3c:d7:49:dc:
         e9:5e:77:1c:7a:f2:23:bd:e5:1a:51:fa:c1:d3:e0:23:9a:06:
         1f:b0:9b:36:8a:80:f5:1c:ea:4a:bc:33:36:05:78:a9:10:29:
         fb:bc:82:8c:c1:04:cf:e8:bc:6f:21:fb:d5:81:a3:df:14:e2:
         61:59:69:2e:2e:74:69:e9:55:44:c2:9b:f8:56:9d:24:0c:c6:
         86:5f:2f:e0:ac:e9:e9:56:fa:3f:bb:a0:ba:b0:3f:21:86:73:
         32:f9:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:19 2026 by rpki-client