Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa
File:                     3130332e3130362e37362e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier:          nnetaFQH9cc/0ttdoAAAV/hjdoW+vJXjVqlMuycgo/k=
Subject key identifier:   13:10:3C:A2:9C:97:F5:DA:88:E0:25:C1:BB:06:5F:49:1E:28:4A:6D
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       7614A692C244C9EDD66E7C9C927A93D30BBE9CB1
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:46 +0000
ROA not before:           Sun 03 May 2026 02:59:46 +0000
ROA not after:            Sun 02 May 2027 03:04:46 +0000
asID:                     46023
IP address blocks:        103.106.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:14:a6:92:c2:44:c9:ed:d6:6e:7c:9c:92:7a:93:d3:0b:be:9c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:46 2026 GMT
            Not After : May  2 03:04:46 2027 GMT
        Subject: CN=13103CA29C97F5DA88E025C1BB065F491E284A6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:82:17:f2:1e:15:1e:14:26:3c:ba:4b:0e:
                    21:bd:43:38:0d:61:a4:33:02:bf:60:61:8f:87:c3:
                    62:23:7b:1c:b3:62:40:1e:e3:06:31:1e:50:9c:c6:
                    46:c3:9f:7d:66:52:f1:e0:9f:c9:9e:c0:63:fc:ba:
                    2f:44:b2:d8:c0:3e:ec:c5:07:72:8c:7b:a3:e6:5c:
                    d4:0e:1c:ed:54:69:ca:a9:b2:17:21:75:c9:c4:cd:
                    25:4f:7d:4f:ea:44:b9:95:bd:ef:c6:4a:1a:2a:75:
                    18:1d:f6:b7:f7:67:ec:40:77:c3:55:75:e8:d1:ce:
                    45:28:1d:a6:dd:81:e2:09:83:af:1c:50:14:13:68:
                    61:c2:a5:db:71:39:4c:4e:d7:5d:1b:61:41:a3:0a:
                    22:3f:45:9a:8d:bf:4a:cf:6d:60:78:8c:10:f4:2d:
                    90:e6:e5:1e:47:f9:51:7f:1e:eb:f5:15:d3:09:79:
                    cc:d9:78:fa:e1:7f:6e:2a:57:71:7b:e1:d5:e5:08:
                    75:17:8e:3f:18:11:2f:39:ca:20:77:c8:63:ee:62:
                    2e:b9:95:de:9c:75:03:be:33:19:01:90:29:28:f8:
                    1c:a9:73:95:c5:f2:92:b9:19:e3:d5:e6:75:09:a3:
                    e1:77:ce:66:10:84:82:73:a7:38:c4:64:72:a0:5b:
                    ee:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:10:3C:A2:9C:97:F5:DA:88:E0:25:C1:BB:06:5F:49:1E:28:4A:6D
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32332d3233203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:ae:a1:82:c6:e4:71:ec:f0:d7:c3:4e:0e:11:62:0b:34:
         5c:9d:5f:be:8f:fd:d0:8f:d0:ad:11:9e:c6:29:b6:55:a5:6d:
         21:6d:49:e9:10:1d:e4:b4:ab:e8:97:60:9f:e3:35:8e:0b:37:
         04:78:27:ba:ff:d7:1a:ca:1a:b0:44:c0:fb:d9:a3:ae:8a:69:
         a7:39:a6:16:de:5e:e4:d8:9d:32:0e:bf:29:ce:a4:a6:c8:0b:
         aa:ed:96:fb:cb:27:1e:0e:62:b0:46:6f:40:92:cb:2a:c0:e4:
         41:89:6f:87:88:9b:50:29:c3:93:72:eb:ca:00:a4:58:53:85:
         7e:1d:60:ae:e4:f6:84:23:13:2d:b2:e8:3a:02:9a:69:25:0a:
         e0:69:16:e4:f5:0a:f7:87:b8:a6:18:ad:4e:dd:02:e4:0a:a7:
         c6:0b:f5:5e:91:55:d9:18:77:cd:30:1e:09:68:7b:61:40:16:
         57:0f:5f:09:2e:59:40:d6:ca:c2:b8:45:65:86:b5:bc:15:d2:
         db:7d:cf:92:14:fd:ed:c6:00:72:d0:51:33:46:5a:26:c9:ab:
         2e:65:8e:e8:4e:bc:7d:ef:21:1a:6e:a2:76:0a:f5:03:a5:bc:
         e5:ed:3d:f0:5a:c3:ee:05:5a:5b:2c:62:9f:fe:30:ab:61:14:
         c5:84:f3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:08 2026 by rpki-client