Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa
File:                     3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (raw, json)
Hash identifier:          NlPuBH9s19urTN9l/ySJyKm6WWO9NdJomGBorLJ9CcM=
Subject key identifier:   FD:1C:DC:60:70:37:57:7E:62:7D:73:95:17:B7:25:C2:B8:0E:A9:4D
Certificate issuer:       /CN=6D157C9F12B387F14489E16709B7918837CC6D0D
Certificate serial:       285254229DAC93447906B47E00D5D010CBCE366C
Authority key identifier: 6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa
Signing time:             Sun 03 May 2026 02:54:06 +0000
ROA not before:           Sun 03 May 2026 02:49:06 +0000
ROA not after:            Sun 02 May 2027 02:54:06 +0000
asID:                     150510
IP address blocks:        103.61.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl
                          rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:52:54:22:9d:ac:93:44:79:06:b4:7e:00:d5:d0:10:cb:ce:36:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D157C9F12B387F14489E16709B7918837CC6D0D
        Validity
            Not Before: May  3 02:49:06 2026 GMT
            Not After : May  2 02:54:06 2027 GMT
        Subject: CN=FD1CDC607037577E627D739517B725C2B80EA94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:be:79:6a:13:e5:37:14:75:af:df:39:ac:28:
                    89:ec:8d:07:13:e0:38:73:ac:82:4e:40:44:94:3f:
                    1c:50:90:3c:56:91:a7:34:ee:ca:a4:d3:24:4f:08:
                    d6:ed:16:a3:62:ea:5a:c2:04:1a:9f:c4:b0:35:26:
                    8d:90:f5:bf:67:01:bb:64:75:02:91:6d:1f:55:89:
                    e8:e1:fd:74:55:02:f5:74:b1:61:07:ea:b3:70:9a:
                    cc:b8:7b:b7:d5:a8:f9:40:4d:ad:68:49:aa:8b:2e:
                    fb:d7:52:b1:3e:bc:b8:4d:e4:0e:b9:f3:eb:b2:8a:
                    6c:48:05:b6:55:07:ec:03:a6:f4:aa:9f:77:7c:6b:
                    54:24:62:41:53:cf:3f:ef:70:76:0b:be:c7:a0:87:
                    f5:23:1e:81:0f:bd:53:74:2f:37:bf:c6:20:9b:2b:
                    50:b9:ad:09:5e:2d:02:ad:a0:0f:49:5c:1a:52:b3:
                    5e:cc:6b:4c:03:90:72:9b:ef:c8:fa:a9:a7:90:75:
                    a6:dd:90:ca:83:c5:a4:22:3f:26:27:c1:b6:ce:8d:
                    97:e4:b6:7d:2c:82:ed:2f:2c:e7:19:a3:19:6f:70:
                    24:ff:6e:e7:37:9d:b0:a3:f8:24:31:6b:95:cf:41:
                    2d:2c:9d:7c:55:23:8f:fd:3f:ed:9d:cc:df:2d:53:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:DC:60:70:37:57:7E:62:7D:73:95:17:B7:25:C2:B8:0E:A9:4D
            X509v3 Authority Key Identifier:
                keyid:6D:15:7C:9F:12:B3:87:F1:44:89:E1:67:09:B7:91:88:37:CC:6D:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/6D157C9F12B387F14489E16709B7918837CC6D0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D157C9F12B387F14489E16709B7918837CC6D0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:20:f8:d4:9e:e8:de:a8:8a:b4:a1:b4:77:6e:81:1f:f2:
         ad:54:e8:50:fc:0a:99:9f:bd:bb:9c:7b:ea:cc:93:35:0a:5c:
         e6:33:ac:8c:d9:5f:37:28:2e:56:9a:59:83:1c:a7:be:ea:55:
         dc:c8:70:05:2d:f6:fb:d1:ee:cd:e0:ea:f2:f5:3c:5f:52:79:
         fc:7d:12:1e:fd:c9:25:ee:2d:16:d2:e2:34:b3:da:04:32:18:
         90:31:cf:7a:5f:4b:ee:e5:dc:fe:4a:dc:b8:9f:64:f8:d8:1b:
         ba:8e:fd:92:f9:04:b7:99:7e:cc:9f:9e:3c:31:0d:57:2e:aa:
         d0:0c:1d:5a:68:f6:26:07:7b:21:4c:53:42:e8:13:79:a7:65:
         85:34:de:f1:d3:74:d8:8e:51:3a:38:18:38:7f:b9:ef:0a:6d:
         0e:1f:98:53:3a:61:5d:e5:d5:34:08:86:20:de:96:a3:b8:99:
         e5:b8:bf:06:53:20:52:d0:bd:42:69:5e:04:bc:6b:b0:36:a4:
         1d:64:dc:3a:c9:2c:70:a3:1c:9a:9c:c5:8d:52:b8:57:65:1b:
         30:44:06:92:ac:2c:32:72:98:9b:9f:4c:61:87:27:1a:13:b5:
         ef:31:fe:b4:6f:ae:00:0e:d4:e7:57:9f:c0:0e:0d:11:71:2f:
         b2:5f:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:02 2026 by rpki-client