Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
File:                     3130332e31312e3232322e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          Z0euP4Mz5azIXz2gQa7C76gHRFvS6x+UlkXhOokx2h4=
Subject key identifier:   06:EE:19:9C:46:59:31:40:9B:75:B5:20:91:0C:F5:AD:ED:A8:5E:50
Certificate issuer:       /CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
Certificate serial:       3429244FCF7A36CA1451BA5D456224873B82BF91
Authority key identifier: B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa
Signing time:             Sun 03 May 2026 03:02:38 +0000
ROA not before:           Sun 03 May 2026 02:57:38 +0000
ROA not after:            Sun 02 May 2027 03:02:38 +0000
asID:                     58396
IP address blocks:        103.11.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl
                          rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:24:4f:cf:7a:36:ca:14:51:ba:5d:45:62:24:87:3b:82:bf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87AC5C104D51A16D1FED6AABA40D5F336C76E32
        Validity
            Not Before: May  3 02:57:38 2026 GMT
            Not After : May  2 03:02:38 2027 GMT
        Subject: CN=06EE199C465931409B75B520910CF5ADEDA85E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:94:bc:e2:5e:77:e3:35:a3:82:c4:82:b3:
                    16:db:bb:3b:8a:df:fc:c5:bb:71:20:69:c7:65:fc:
                    d5:ae:2f:3d:76:14:23:a7:50:5d:3a:03:38:a9:74:
                    4f:3c:a7:09:fc:35:b5:b3:5a:b0:76:89:e7:1e:fc:
                    5a:5a:0a:b3:3e:76:5f:17:8b:66:ca:98:8e:61:99:
                    36:17:65:fb:20:83:66:67:67:c4:4f:08:c9:aa:ec:
                    ad:e2:38:1a:2e:0e:18:69:c3:50:0f:09:46:71:3e:
                    bd:0f:f1:75:b0:e9:46:77:e1:cf:c9:b5:f0:ec:21:
                    d7:3c:e9:6e:1b:51:25:77:70:17:24:a9:f9:bb:3b:
                    3a:ed:fd:40:6f:40:d7:5d:bc:73:6a:11:92:1a:76:
                    89:2c:a0:38:1b:6c:28:5b:0a:47:dd:bf:1e:8f:0d:
                    04:14:a9:dd:80:08:a0:83:ec:a4:42:50:5d:e6:c4:
                    57:5a:60:26:c9:7e:8f:44:80:a3:0f:46:8e:a8:26:
                    ee:fc:f8:0e:f8:67:9b:fb:83:e0:67:42:7a:63:ec:
                    ab:57:46:ba:90:b8:f6:8a:fb:0f:88:8b:ef:c1:d4:
                    2b:a6:ee:75:a1:b3:a5:d1:d0:b8:e4:b4:68:ba:5a:
                    75:ca:1c:63:67:f7:05:4c:36:e8:ea:4f:c5:95:28:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EE:19:9C:46:59:31:40:9B:75:B5:20:91:0C:F5:AD:ED:A8:5E:50
            X509v3 Authority Key Identifier:
                keyid:B8:7A:C5:C1:04:D5:1A:16:D1:FE:D6:AA:BA:40:D5:F3:36:C7:6E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87AC5C104D51A16D1FED6AABA40D5F336C76E32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/3130332e31312e3232322e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:3e:52:c3:a5:9d:b4:7d:47:d0:48:c2:b1:9e:b8:fe:ad:
         fc:7f:c2:99:8a:57:f7:1f:7d:26:f5:f0:ee:51:74:54:0e:09:
         7b:86:e0:19:e7:bc:aa:11:1b:67:3f:38:32:a1:81:73:42:33:
         c6:24:a8:ea:5a:17:bf:c6:89:91:79:7b:58:30:26:d8:56:e4:
         0e:e2:d1:e1:ac:2a:3c:62:91:65:74:52:6e:19:c9:6a:8d:cb:
         6e:c5:9a:5f:16:1b:f5:69:39:bd:7c:6e:27:2f:15:13:73:46:
         c0:f3:c3:14:ce:e7:ac:b7:bc:50:6d:01:45:49:89:c8:e7:4f:
         1b:0e:05:86:95:05:33:c9:be:1c:07:ab:d4:4f:5b:c2:29:ed:
         3f:21:df:7f:e0:cb:27:2d:a3:af:85:bf:be:67:07:ac:c1:22:
         47:92:31:70:e8:46:59:71:16:cf:ed:71:e7:09:ba:31:9a:57:
         a5:a7:81:e2:21:7e:d9:fc:57:b3:6a:e5:8b:e2:dd:d6:c0:36:
         63:13:76:50:f9:ff:07:ec:79:1a:d9:1b:7e:61:16:f5:53:27:
         0b:17:40:07:29:87:fe:4f:00:3d:96:cb:68:16:09:5c:07:a8:
         6f:23:50:57:a3:f3:dd:41:00:cb:fe:2a:1c:4e:08:62:7c:92:
         ed:f7:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:28 2026 by rpki-client