Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32322d3232203d3e203436303233.roa
File:                     3130332e3130362e37362e302f32322d3232203d3e203436303233.roa (raw, json)
Hash identifier:          U+XsrDROpLK4jKC497+JwnaTHK8kc4AKi4ocNW4Dijg=
Subject key identifier:   C5:37:DE:43:CF:05:12:B5:84:DC:9A:D7:C5:F3:F2:8B:35:76:5F:E9
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       51217D6578076E2701E290745ABB74DE485C13F5
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32322d3232203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:45 +0000
ROA not before:           Sun 03 May 2026 02:59:45 +0000
ROA not after:            Sun 02 May 2027 03:04:45 +0000
asID:                     46023
IP address blocks:        103.106.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:21:7d:65:78:07:6e:27:01:e2:90:74:5a:bb:74:de:48:5c:13:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:45 2026 GMT
            Not After : May  2 03:04:45 2027 GMT
        Subject: CN=C537DE43CF0512B584DC9AD7C5F3F28B35765FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1c:d4:96:da:fb:ca:19:43:a4:e6:3c:dd:fd:
                    47:21:eb:b3:31:28:80:e4:d8:c6:ba:e5:12:53:64:
                    3a:be:db:fa:6a:60:d3:7a:c2:1c:5c:32:eb:98:0f:
                    e4:b2:ee:8f:b2:e5:b2:55:29:ec:df:bb:e6:ea:64:
                    80:58:4b:f2:91:4a:47:5c:da:b5:ca:5a:12:fb:c7:
                    4d:b9:39:99:7b:0e:ad:f6:04:69:0c:37:ef:dd:8e:
                    04:f8:93:73:67:51:4e:c5:1c:5d:3c:44:69:50:39:
                    7a:59:80:24:33:c2:08:39:02:4b:5b:21:a9:a6:d5:
                    fa:0d:fd:c1:3d:6f:14:87:81:51:a5:8f:ba:13:04:
                    82:a5:90:7a:d8:3d:59:d2:0e:7f:90:ad:bb:50:1b:
                    b1:7a:d8:c7:a5:77:2e:d3:c0:58:de:77:a3:50:52:
                    83:19:84:63:69:43:56:2b:f1:61:4b:75:13:7e:b6:
                    43:e7:f8:d8:97:b5:73:e0:53:84:75:13:0f:09:f3:
                    b3:56:6c:89:1f:2c:8e:c8:3b:99:ab:c4:a0:e6:f5:
                    3e:e8:1d:07:e9:92:1b:6c:7e:d6:e5:08:80:bc:2c:
                    7d:23:d8:31:6f:e4:85:0f:c1:21:cc:41:a4:56:5c:
                    5f:56:64:be:04:7d:25:8e:7c:d7:88:e5:87:6c:f1:
                    a8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:DE:43:CF:05:12:B5:84:DC:9A:D7:C5:F3:F2:8B:35:76:5F:E9
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32322d3232203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:64:24:1f:ca:28:47:f1:9c:84:25:a5:4f:6d:cd:55:2e:
         5e:02:f0:5c:d8:17:3b:78:da:21:f6:cc:dc:74:bd:32:ac:42:
         c9:7d:3a:fa:a4:99:83:a1:9c:dc:c5:11:0b:bb:ed:0d:0a:ad:
         48:d9:dc:78:70:47:a0:fc:88:28:e8:17:34:eb:3e:a3:63:83:
         5b:4a:a3:38:be:28:14:f8:f4:9e:09:61:01:5c:1e:dd:eb:df:
         59:72:29:4f:17:99:a3:77:a4:1e:46:83:54:1e:8c:af:dc:0a:
         5d:72:e9:e7:60:2d:91:4c:98:8c:79:f9:ca:c1:6b:60:b0:84:
         40:c8:2c:88:3a:c5:96:eb:dc:3a:96:f8:5b:1c:7c:ec:33:7a:
         08:80:a2:72:e2:ce:da:de:5e:59:81:56:f9:25:3a:f1:4e:29:
         1e:79:03:c3:ec:dd:0b:fb:4f:61:ee:fc:06:9d:2d:06:bf:ca:
         70:c4:8c:f2:bb:e3:e7:1f:e6:19:57:19:ef:a1:a5:4e:03:81:
         1f:e9:fa:83:24:ac:cf:5a:e3:21:d7:ca:e7:de:46:ef:68:b2:
         fb:d0:12:17:fe:b8:1c:3a:84:24:b8:49:20:8c:77:7c:f7:57:
         db:cb:64:b7:da:15:81:c2:15:d8:7d:59:27:c0:e3:bd:d0:32:
         04:33:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:57:55 2026 by rpki-client