Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32332d3233203d3e203436303233.roa
File:                     3130332e3130362e37382e302f32332d3233203d3e203436303233.roa (raw, json)
Hash identifier:          HeHyNgFUN9sd7uOBZ40+XUgPRXPqZt6Vsbz0lmGFKoc=
Subject key identifier:   83:BD:C5:7D:87:AD:EB:A3:A6:49:72:51:02:10:FD:D0:B8:22:FD:24
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       1522F6223AB7D8B85BC2D247CAF157C8462E5973
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32332d3233203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:45 +0000
ROA not before:           Sun 03 May 2026 02:59:45 +0000
ROA not after:            Sun 02 May 2027 03:04:45 +0000
asID:                     46023
IP address blocks:        103.106.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:22:f6:22:3a:b7:d8:b8:5b:c2:d2:47:ca:f1:57:c8:46:2e:59:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:45 2026 GMT
            Not After : May  2 03:04:45 2027 GMT
        Subject: CN=83BDC57D87ADEBA3A64972510210FDD0B822FD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:08:0e:af:8d:62:0e:bb:d9:3d:7c:2b:74:
                    1a:00:90:79:24:d9:73:5f:8d:c0:81:df:5b:32:60:
                    0e:a0:1f:df:b8:21:27:c7:be:64:fa:d9:43:7d:59:
                    e9:45:35:d6:c0:0e:12:b5:af:68:b7:09:66:3e:91:
                    be:e5:5f:5e:a9:dc:13:0b:96:87:d3:54:4f:16:fd:
                    c0:d9:58:ae:60:9f:fd:ab:19:53:8d:c9:f5:e9:2e:
                    7d:b7:39:04:ea:b0:0c:66:e4:dc:67:b9:ff:20:c6:
                    76:0c:05:d7:d9:39:98:f8:f9:a2:41:cb:de:38:ee:
                    81:42:b0:c7:39:3b:2a:4f:e6:70:6b:65:81:01:64:
                    62:74:51:72:5e:d9:de:5d:e7:d4:d6:df:6b:b3:11:
                    89:9a:4e:6b:78:4a:c2:f0:e8:8f:69:80:a0:13:57:
                    48:33:50:6f:01:95:7e:40:a0:5e:50:b7:0e:18:52:
                    34:45:83:1c:34:7c:0f:9e:a0:db:16:8a:ee:b7:53:
                    60:ac:22:0d:15:c2:5f:47:24:4f:fd:d9:22:94:48:
                    44:fc:98:b9:1f:28:73:6a:c8:55:9a:3f:03:e6:2d:
                    dd:6a:5f:08:b5:04:3c:06:07:45:60:b2:33:e3:ff:
                    11:b7:d4:41:4a:b2:4f:7e:b7:78:c9:b9:65:cc:25:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BD:C5:7D:87:AD:EB:A3:A6:49:72:51:02:10:FD:D0:B8:22:FD:24
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32332d3233203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:c3:d2:63:ef:20:0c:ee:2f:20:9a:0c:f3:c5:5d:ac:3c:28:
         7c:a4:66:cc:57:53:c3:c6:fc:70:82:56:85:d0:b6:6e:a9:78:
         45:c5:42:03:7d:2b:b8:38:90:2c:f6:e0:a0:92:e3:55:f7:2d:
         28:a8:0f:8d:00:44:07:17:fa:72:67:bc:4d:ba:5c:a8:bb:46:
         5d:ea:e5:e7:14:30:26:f3:6d:8c:17:85:4b:05:0e:29:1c:84:
         68:f1:b7:a5:e2:42:5b:5b:ab:7d:09:d2:11:01:aa:0b:43:e7:
         0d:11:ea:ee:fd:58:9a:88:f7:57:69:6d:95:1c:79:64:2e:5c:
         19:a8:1b:74:a2:fb:e5:65:92:f8:27:49:b3:af:df:30:3f:e0:
         50:e8:74:00:f8:b4:d1:a2:73:7f:fc:42:ae:3c:d7:c0:2b:1d:
         66:d6:05:68:94:eb:a2:37:05:55:27:3c:64:bf:39:01:9b:16:
         f1:09:56:b8:75:52:4d:26:d3:23:5c:3b:97:37:d5:15:d8:44:
         d9:3b:c7:27:22:b7:c8:58:42:bf:22:ce:f4:08:e4:d6:50:96:
         24:64:3b:7e:45:ed:8d:4e:ea:79:af:c3:99:ef:ac:ef:83:df:
         12:5f:46:b3:2a:02:c4:c1:9f:a3:fc:85:11:d3:91:54:7a:0c:
         a9:0a:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:30 2026 by rpki-client