Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/3130332e362e3136362e302f32342d3234203d3e20313439393335.roa
File:                     3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (raw, json)
Hash identifier:          0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=
Subject key identifier:   20:13:D8:E5:6E:40:FF:3A:B7:9E:40:C4:9A:DA:FF:47:9D:EF:1B:C1
Certificate issuer:       /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
Certificate serial:       18D5AD446218571BDFD3F68568B3C50CE9CDE1DF
Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/3130332e362e3136362e302f32342d3234203d3e20313439393335.roa
Signing time:             Sun 03 May 2026 02:55:05 +0000
ROA not before:           Sun 03 May 2026 02:50:05 +0000
ROA not after:            Sun 02 May 2027 02:55:05 +0000
asID:                     149935
IP address blocks:        103.6.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl
                          rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 10:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d5:ad:44:62:18:57:1b:df:d3:f6:85:68:b3:c5:0c:e9:cd:e1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D
        Validity
            Not Before: May  3 02:50:05 2026 GMT
            Not After : May  2 02:55:05 2027 GMT
        Subject: CN=2013D8E56E40FF3AB79E40C49ADAFF479DEF1BC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:39:05:3e:30:6b:f8:56:38:33:f7:9a:27:
                    a2:eb:88:9b:53:1b:a8:44:d6:1d:d5:a4:6e:27:68:
                    70:00:15:84:7c:1b:2a:1d:36:06:ea:e0:93:30:5d:
                    f9:1f:6e:0d:c1:a7:ae:d9:87:bb:d8:b5:1f:f7:e3:
                    45:7a:01:e0:1b:58:50:12:8a:9e:67:2f:9c:62:e4:
                    f9:4b:ad:ba:2a:0b:a0:7f:0f:f8:19:10:41:ee:86:
                    25:f6:32:99:eb:38:c4:a6:3e:18:0b:ef:eb:8f:94:
                    85:f1:ec:32:22:b5:85:c2:dd:fa:06:a1:88:d1:20:
                    b7:d0:26:42:23:db:6e:75:01:d3:e0:56:ec:ee:aa:
                    93:b4:6d:a8:9f:13:09:39:d9:67:de:6f:d5:9b:7c:
                    60:13:8e:89:e2:ad:f5:14:47:34:83:8b:df:57:bc:
                    7d:32:4e:0f:1d:27:d8:98:a4:b8:63:a1:f9:07:18:
                    a4:8d:cc:00:a2:da:5f:12:48:3c:63:4b:68:3e:ee:
                    5b:01:b6:eb:52:98:ec:86:c4:2d:1d:1c:36:8b:5d:
                    9f:94:84:6b:96:82:1a:70:18:f7:bc:c7:aa:eb:0e:
                    01:2a:69:81:52:a6:41:87:4c:e7:fe:8e:ee:9c:98:
                    18:ee:9d:ef:64:38:7f:9e:92:14:0f:e8:8d:1d:39:
                    e6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:D8:E5:6E:40:FF:3A:B7:9E:40:C4:9A:DA:FF:47:9D:EF:1B:C1
            X509v3 Authority Key Identifier:
                keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/3130332e362e3136362e302f32342d3234203d3e20313439393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:40:e0:e9:52:dc:4a:e1:39:6e:f7:e0:2f:70:7f:8b:78:77:
         1e:09:a4:e9:7d:f3:76:45:24:a4:83:a0:1b:cc:44:1e:78:a9:
         40:f3:95:03:1a:ca:bc:09:60:82:4d:0c:4e:26:f7:15:95:6f:
         d2:c5:1e:5c:e7:46:1d:7d:19:b7:66:c9:54:24:c0:0f:26:03:
         4b:37:8d:9b:96:8d:f7:ad:16:6a:ca:0a:13:01:e6:c6:73:e7:
         37:0b:5e:6a:7e:9f:37:1b:9c:87:15:ba:a5:25:8c:31:92:9c:
         41:d5:ce:f3:c8:7a:78:ed:c7:63:5a:72:52:4b:92:2c:de:e2:
         bd:4e:31:ec:a8:04:1e:09:c0:fa:63:5c:77:47:a7:16:cc:05:
         d6:03:d8:00:7a:d7:dd:23:1b:3a:14:40:93:00:a1:ef:be:01:
         8d:61:20:e6:e5:59:c3:37:d5:2f:7a:8c:1f:1c:0d:db:d5:83:
         f3:64:c6:cb:31:be:62:ac:24:76:16:08:cb:4d:42:a9:f8:42:
         b4:60:40:03:3e:b0:aa:60:b4:b8:f3:75:76:3e:60:98:95:7a:
         a1:3c:4e:d1:5a:92:8c:22:db:0e:0d:de:ac:85:8d:6b:3a:a6:
         4e:be:8a:41:75:ec:42:c8:fb:d6:fd:53:93:58:92:3b:4b:e9:
         a4:2a:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:53 2026 by rpki-client