Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37372e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37372e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          1EFfunX5lqc2HcSk+iNbYX7CETCZ6fCWzV+VG7zhCJQ=
Subject key identifier:   DB:8F:25:C5:AC:4F:D4:CF:B2:1B:BF:BB:EC:ED:AD:2C:22:D5:B9:FE
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       78B1077DD68B72C78CF60AB559954A34C742B861
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37372e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:46 +0000
ROA not before:           Sun 03 May 2026 02:59:46 +0000
ROA not after:            Sun 02 May 2027 03:04:46 +0000
asID:                     46023
IP address blocks:        103.106.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:07:7d:d6:8b:72:c7:8c:f6:0a:b5:59:95:4a:34:c7:42:b8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:46 2026 GMT
            Not After : May  2 03:04:46 2027 GMT
        Subject: CN=DB8F25C5AC4FD4CFB21BBFBBECEDAD2C22D5B9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:0b:39:40:9b:8b:a8:84:08:63:da:6b:c8:
                    3a:66:24:e9:42:f6:9d:72:54:32:c5:5e:60:fc:e1:
                    4b:46:48:ca:db:d5:99:ec:d8:17:bd:61:95:06:c2:
                    ad:f9:2d:63:cf:ae:c3:1d:9b:2f:68:98:73:2f:7d:
                    22:63:ca:5a:83:9a:6f:2f:85:95:4f:aa:1d:a7:4d:
                    b2:f8:20:f9:88:45:76:2d:d1:bd:f0:29:5b:a7:78:
                    91:fd:f4:ae:6a:23:8b:c6:d6:d0:92:89:92:1e:15:
                    8f:35:40:43:b7:3d:03:cd:81:e2:bb:c0:50:05:2d:
                    1d:f2:33:0a:42:47:2d:c2:c7:f3:59:50:d9:22:06:
                    0d:37:b8:eb:52:39:20:7e:6c:88:cf:aa:c2:30:73:
                    c5:b5:e4:5f:17:46:97:86:cc:d0:26:59:1e:7c:c7:
                    39:55:2a:fc:0c:38:a1:7d:12:66:26:15:2c:9b:24:
                    53:de:73:8f:60:40:64:63:ce:1d:32:6d:9c:f4:55:
                    c9:d3:05:3c:ca:51:b1:f1:60:b6:ef:f5:72:87:c7:
                    26:2b:80:de:b1:1e:12:eb:cc:e0:64:8e:63:21:e9:
                    72:d0:6b:6d:da:be:f5:8a:9a:29:24:24:17:50:b2:
                    fa:27:8c:c9:1d:d1:66:5d:9b:c3:ee:7b:e9:a8:cf:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:25:C5:AC:4F:D4:CF:B2:1B:BF:BB:EC:ED:AD:2C:22:D5:B9:FE
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37372e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:09:5e:06:7e:09:18:a1:e8:6a:bb:7d:65:22:65:60:41:d1:
         6d:45:6c:69:c5:b6:8c:20:76:60:f0:1f:95:f4:d4:54:88:f0:
         a4:30:f9:b4:9f:1e:69:55:29:8b:14:7b:65:6f:cd:c0:dd:7b:
         71:b4:3f:32:60:46:10:3d:f1:f2:61:40:4e:8e:6e:67:71:3b:
         24:62:59:7e:0b:e6:b5:fc:9c:78:8b:36:0f:e5:9c:c8:a1:bd:
         83:5b:41:16:4c:aa:94:71:7f:99:5b:74:e1:1d:c9:a0:d4:1b:
         35:03:f7:a0:26:09:13:97:4c:0c:20:2e:51:d9:76:10:91:53:
         ea:94:bf:39:3a:0a:af:e2:56:54:72:c8:86:62:84:10:0f:9d:
         ac:da:0a:c9:21:00:3b:2f:32:4f:a2:ae:35:9e:9d:9d:e4:8f:
         d4:2b:d7:9c:b1:3b:01:07:10:d7:2c:5a:86:21:28:da:aa:f6:
         6f:fb:96:7d:cc:25:28:ca:a5:c8:10:0d:46:9e:a7:ba:43:ef:
         1a:d1:c7:a6:3f:89:f3:4a:8b:5b:a0:42:dd:7a:1b:5f:23:93:
         2c:4e:61:7c:93:5d:90:9c:3d:fc:4a:d9:8b:f3:43:72:a2:2a:
         5f:cd:04:2a:9f:89:98:89:8d:1a:6a:e6:c5:49:b2:2c:90:d6:
         10:23:e1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:24 2026 by rpki-client