Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          SE/gtmrek7FkfiZWGLhqu6Im/V7R0oLSA9l56vd8nZo=
Subject key identifier:   A4:3B:B9:71:81:5C:03:B1:8B:3A:EE:40:9D:EC:10:65:C7:04:82:D9
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       675895938E5213A49CC4AB595C62BC6F5CE91EB3
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:46 +0000
ROA not before:           Sun 03 May 2026 02:59:46 +0000
ROA not after:            Sun 02 May 2027 03:04:46 +0000
asID:                     46023
IP address blocks:        103.106.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:58:95:93:8e:52:13:a4:9c:c4:ab:59:5c:62:bc:6f:5c:e9:1e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:46 2026 GMT
            Not After : May  2 03:04:46 2027 GMT
        Subject: CN=A43BB971815C03B18B3AEE409DEC1065C70482D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:b0:91:94:c3:fb:c9:37:f4:8f:00:a8:0e:
                    47:60:82:fd:94:b8:e1:d6:e9:4a:bb:ad:51:29:24:
                    dc:bb:bf:1a:45:3e:6d:b2:61:b4:3b:ac:22:f1:f2:
                    e5:b7:fa:e9:ad:93:fa:4d:a3:da:99:f4:a0:01:d8:
                    98:da:d0:6f:7b:4f:b5:55:9e:eb:c0:48:89:75:69:
                    d2:82:fc:7f:19:e8:d0:c2:58:0e:72:c6:2b:f9:ea:
                    c8:26:cf:3b:b7:d5:bd:4b:b9:cb:0c:ad:e9:c0:0e:
                    78:d6:f9:87:ce:cb:5a:5a:20:ab:8b:52:97:40:c7:
                    65:14:72:a6:5d:05:c0:28:5e:25:cc:7c:5e:14:9f:
                    03:52:b4:7f:91:ac:1a:2d:24:e7:3a:2e:06:04:2d:
                    1e:7b:b1:df:98:40:38:bd:3c:af:07:1a:5f:b5:52:
                    c1:71:4d:77:1e:02:7a:e1:d1:c4:8c:22:15:73:f9:
                    71:18:cc:c1:56:f6:13:d1:21:e2:11:50:4d:ee:2d:
                    b7:5d:2c:cd:6c:fd:ca:e3:0a:26:84:6f:45:b5:09:
                    42:84:d3:5e:a0:56:a0:39:46:7d:3b:9c:21:c2:4b:
                    ec:bc:39:90:1f:a0:76:a6:f8:a8:d9:a9:49:c8:00:
                    b2:10:b0:44:ba:ef:cb:87:35:3c:47:68:d5:54:b0:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3B:B9:71:81:5C:03:B1:8B:3A:EE:40:9D:EC:10:65:C7:04:82:D9
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:75:6c:bb:09:06:0f:6c:f8:11:82:eb:2e:b0:3b:27:ee:bd:
         c9:19:e8:2d:56:76:6c:87:89:1d:ba:2f:43:92:90:4d:4f:7d:
         ca:62:a7:a5:9f:98:50:e5:57:14:48:64:ef:e2:ff:58:b1:05:
         43:d0:74:be:ca:9c:10:07:89:90:4e:f4:06:0b:61:46:8a:e1:
         32:c3:7c:6b:f5:eb:a1:0c:fc:ae:c0:44:98:8d:67:68:32:e6:
         11:a9:fc:b1:f1:94:c0:f6:4c:83:ea:f6:9d:58:c0:39:1a:db:
         61:80:42:98:c8:25:33:62:20:ec:5f:ce:8e:82:c7:71:0d:b4:
         da:2b:a6:c1:4a:88:bb:e1:95:c9:8c:78:d2:86:26:56:da:08:
         d7:e3:44:43:d1:a1:4d:68:aa:2d:ef:f5:a0:a1:e1:66:26:9a:
         38:f7:ff:a1:f2:4c:9c:dc:54:68:86:b3:8d:05:8e:44:8a:7a:
         e4:ab:30:0e:db:50:f8:e2:76:7f:4c:ee:56:76:db:88:93:6e:
         fd:98:9f:09:23:29:b1:e2:bb:c3:76:05:7c:f0:52:ae:d3:9f:
         4f:ef:d6:79:d7:eb:4c:53:ff:09:a0:1b:30:9a:98:3b:8a:9d:
         2e:d9:9d:bf:0c:dd:fa:d4:99:ee:7d:d3:b5:3a:41:3e:ec:a9:
         a0:83:f3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:32 2026 by rpki-client