Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37362e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          RXhOoKk2zbrGa3t3vUlHXDF2yvqCPhn7EQhMFp2kA8Q=
Subject key identifier:   5A:07:E0:CA:D2:47:56:0B:0E:87:1B:45:B2:51:0D:DA:93:86:1E:AC
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       40ED5069E36C483B37ED47BF9915DE0C9A91A055
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:47 +0000
ROA not before:           Sun 03 May 2026 02:59:47 +0000
ROA not after:            Sun 02 May 2027 03:04:47 +0000
asID:                     46023
IP address blocks:        103.106.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ed:50:69:e3:6c:48:3b:37:ed:47:bf:99:15:de:0c:9a:91:a0:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:47 2026 GMT
            Not After : May  2 03:04:47 2027 GMT
        Subject: CN=5A07E0CAD247560B0E871B45B2510DDA93861EAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:63:de:c1:e6:a5:23:60:56:55:25:f1:da:03:
                    bf:5f:bb:c3:32:29:f7:ae:c5:a4:74:54:bb:dc:7a:
                    97:94:a0:34:3b:3b:03:15:7b:d8:aa:a6:3b:f5:b5:
                    0a:f0:2d:55:0f:3d:7d:77:38:6d:eb:cb:55:2b:cb:
                    5a:39:f2:d9:90:60:ee:cf:b5:e4:16:2a:01:23:08:
                    a1:57:b7:dd:f4:3a:d3:03:35:85:2a:0b:c0:7b:3a:
                    33:a6:52:d1:8c:45:96:94:bb:5d:98:80:df:db:62:
                    fa:f2:4f:f4:fd:96:c6:81:83:94:bf:dd:7c:68:8b:
                    ac:58:fa:27:51:b8:01:ec:72:60:01:42:48:bc:f4:
                    55:d5:4e:1f:d2:0b:6d:93:fc:53:ef:35:09:06:b0:
                    54:fd:e8:90:3a:e5:93:e8:a5:90:05:e5:b1:3b:e7:
                    c7:03:62:6a:33:96:ba:93:aa:d6:c3:f4:77:97:43:
                    2f:e8:79:9e:78:58:69:b4:67:ce:4f:cf:53:9d:d4:
                    ab:04:24:b5:10:05:a2:ad:74:86:61:37:62:a3:29:
                    98:2f:1c:36:24:de:f7:93:51:ef:27:7b:7e:e2:6d:
                    6f:ce:a0:d6:77:57:c1:8d:0e:3c:53:c6:5a:00:f9:
                    91:15:d6:ef:b3:12:6b:d3:00:1e:57:7d:4a:5c:eb:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:07:E0:CA:D2:47:56:0B:0E:87:1B:45:B2:51:0D:DA:93:86:1E:AC
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37362e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:8f:77:29:d6:ba:33:17:6b:b9:a2:52:57:a2:60:58:5b:
         75:36:0e:89:31:65:2e:49:a0:1f:5f:a7:19:d8:1f:d1:76:61:
         cb:c0:0e:5a:47:d7:ca:e4:e6:1e:83:d1:9d:84:16:c7:29:26:
         f0:77:f9:6f:31:6e:41:00:a4:30:99:a3:c1:e1:7b:f6:e1:7e:
         85:2f:f5:b2:41:c2:27:0d:55:47:40:46:c5:16:c6:3b:b0:69:
         32:d6:56:fa:7f:39:43:67:bc:5f:6a:b2:cb:18:da:23:5c:76:
         96:14:d1:5d:cb:15:f3:91:d1:f1:55:f6:db:59:53:f9:b3:35:
         43:4a:6c:03:b0:cc:86:9c:d5:c0:4d:b8:a6:7d:6b:83:cc:51:
         4e:31:88:d4:b1:c1:bd:69:c7:b0:02:fb:ea:aa:15:ee:2c:87:
         b7:dc:49:c2:79:78:e5:7a:8d:eb:b5:6b:1c:c8:bb:c1:7a:2c:
         b8:f8:48:f4:af:02:c9:38:bd:39:3b:c5:03:5f:8f:c3:f9:a2:
         d1:83:a9:f4:d9:b3:aa:d2:38:24:65:2a:91:8a:33:1f:30:f2:
         ff:63:b6:6f:73:dd:36:4e:31:72:e0:91:6a:f6:f0:a2:81:16:
         7d:bb:96:17:f7:d0:07:7b:84:b1:cf:e6:bd:bd:36:e7:c4:ec:
         7f:da:2f:89
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQO1QaeNsSDs37Ue/mRXeDJqRoFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzZBODREOEI2NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFF
QURCNjhEMDAeFw0yNjA1MDMwMjU5NDdaFw0yNzA1MDIwMzA0NDdaMDMxMTAvBgNV
BAMTKDVBMDdFMENBRDI0NzU2MEIwRTg3MUI0NUIyNTEwRERBOTM4NjFFQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYY97B5qUjYFZVJfHaA79fu8My
KfeuxaR0VLvcepeUoDQ7OwMVe9iqpjv1tQrwLVUPPX13OG3ry1Ury1o58tmQYO7P
teQWKgEjCKFXt930OtMDNYUqC8B7OjOmUtGMRZaUu12YgN/bYvryT/T9lsaBg5S/
3Xxoi6xY+idRuAHscmABQki89FXVTh/SC22T/FPvNQkGsFT96JA65ZPopZAF5bE7
58cDYmozlrqTqtbD9HeXQy/oeZ54WGm0Z85Pz1Od1KsEJLUQBaKtdIZhN2KjKZgv
HDYk3veTUe8ne37ibW/OoNZ3V8GNDjxTxloA+ZEV1u+zEmvTAB5XfUpc6xrbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUWgfgytJHVgsOhxtFslEN2pOGHqwwHwYDVR0j
BBgwFoAUxqhNi2VF/JGpKzxyP0FqEerbaNAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzNkZDYxMzUtNTQ4Yy00ODgxLWFmNzgtOTNhZjlmMmEyNTE2LzAvQzZBODREOEI2
NTQ1RkM5MUE5MkIzQzcyM0Y0MTZBMTFFQURCNjhEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DNkE4NEQ4QjY1NDVGQzkxQTkyQjNDNzIzRjQxNkExMUVBREI2
OEQwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MzZGQ2MTM1LTU0OGMtNDg4MS1h
Zjc4LTkzYWY5ZjJhMjUxNi8wLzMxMzAzMzJlMzEzMDM2MmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdqTDANBgkqhkiG
9w0BAQsFAAOCAQEADPOPdynWujMXa7miUleiYFhbdTYOiTFlLkmgH1+nGdgf0XZh
y8AOWkfXyuTmHoPRnYQWxykm8Hf5bzFuQQCkMJmjweF79uF+hS/1skHCJw1VR0BG
xRbGO7BpMtZW+n85Q2e8X2qyyxjaI1x2lhTRXcsV85HR8VX221lT+bM1Q0psA7DM
hpzVwE24pn1rg8xRTjGI1LHBvWnHsAL76qoV7iyHt9xJwnl45XqN67VrHMi7wXos
uPhI9K8CyTi9OTvFA1+Pw/mi0YOp9NmzqtI4JGUqkYozHzDy/2O2b3PdNk4xcuCR
avbwooEWfbuWF/fQB3uEsc/mvb0258Tsf9oviQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:39:31 2026 by rpki-client