Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa
File:                     3130332e3130362e37392e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          SHNzwRWsLHbwnZJn1ekRqogSWn8IbVRPjwnaTpUQuGY=
Subject key identifier:   95:55:94:11:78:FF:A0:58:F8:89:01:14:DB:31:5E:CF:0B:7C:04:74
Certificate issuer:       /CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
Certificate serial:       22623F496D39760F2EDE21F441570AB783C072D7
Authority key identifier: C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa
Signing time:             Sun 03 May 2026 03:04:45 +0000
ROA not before:           Sun 03 May 2026 02:59:45 +0000
ROA not after:            Sun 02 May 2027 03:04:45 +0000
asID:                     46023
IP address blocks:        103.106.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl
                          rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:62:3f:49:6d:39:76:0f:2e:de:21:f4:41:57:0a:b7:83:c0:72:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6A84D8B6545FC91A92B3C723F416A11EADB68D0
        Validity
            Not Before: May  3 02:59:45 2026 GMT
            Not After : May  2 03:04:45 2027 GMT
        Subject: CN=9555941178FFA058F8890114DB315ECF0B7C0474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d1:d4:bb:82:ca:ce:f1:50:b3:06:f9:c5:a0:
                    7a:b2:23:0e:b1:ea:83:29:d3:47:31:6a:ab:b6:8d:
                    39:2d:fc:ce:98:86:4a:42:b0:b9:02:a5:36:27:3c:
                    35:f5:61:75:f4:fd:19:87:bb:2e:2e:82:4f:79:e5:
                    b8:56:f4:9a:83:9b:8f:6a:ab:71:80:8b:bf:9f:c1:
                    43:18:c6:29:f0:81:86:5c:59:d0:c8:ab:ad:ff:44:
                    e5:0e:5e:d0:11:77:8a:f5:71:18:fa:1e:1d:e6:d9:
                    de:d1:24:cc:25:40:6f:5a:5a:65:7e:92:cd:f4:51:
                    9b:6d:ef:a9:c2:90:4c:70:c7:47:d1:96:aa:ab:74:
                    65:95:f6:b8:9b:d8:33:78:51:ad:f6:ac:76:9f:cd:
                    a3:c2:00:1a:54:1a:fc:03:1b:27:b8:43:22:71:0c:
                    8d:9b:7f:a1:66:77:9d:c6:8c:58:da:cc:8c:10:71:
                    77:4a:4a:08:8b:89:eb:d9:8c:0b:2c:ad:a8:51:a3:
                    f3:6c:aa:94:fb:c4:b7:3f:15:48:a2:cd:db:5a:4c:
                    26:0f:e2:f5:df:66:e5:2e:c9:f2:c3:59:88:9b:a4:
                    9f:d9:a2:d4:2e:ad:7b:72:0b:40:5d:ea:a0:db:46:
                    99:fa:55:be:c1:cf:08:a2:8e:7e:ba:71:c7:ec:cd:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:55:94:11:78:FF:A0:58:F8:89:01:14:DB:31:5E:CF:0B:7C:04:74
            X509v3 Authority Key Identifier:
                keyid:C6:A8:4D:8B:65:45:FC:91:A9:2B:3C:72:3F:41:6A:11:EA:DB:68:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6A84D8B6545FC91A92B3C723F416A11EADB68D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c3dd6135-548c-4881-af78-93af9f2a2516/0/3130332e3130362e37392e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f0:b3:8f:64:8d:8f:2f:c7:4d:ff:45:8e:c8:e8:22:14:7d:
         43:a0:27:1a:10:5c:68:a7:ad:59:73:ae:7a:b0:6d:3c:aa:8c:
         99:ce:6b:9b:eb:f3:09:fb:75:0c:2e:24:05:d6:83:a2:8c:93:
         a9:44:38:86:c7:42:de:1b:64:b5:83:6b:e1:9d:76:e8:4e:29:
         e1:9e:96:14:06:3b:fd:63:57:2d:b4:6f:13:f8:f5:32:6b:2f:
         0f:96:aa:01:dd:0f:40:5a:d0:98:16:6a:0d:82:5c:95:6e:ec:
         57:a6:31:0f:6a:19:5b:11:23:34:1d:21:4d:e6:61:75:4c:f1:
         e0:49:1a:0d:d0:e4:f0:1f:f4:dc:18:ac:39:f0:08:b6:fa:98:
         e4:2d:f7:3c:18:b7:6e:a1:0c:12:0e:f2:9b:39:a1:64:6d:f5:
         4a:bc:c5:e2:62:91:98:19:26:14:d9:3d:25:00:a3:8b:37:5a:
         b1:f2:55:c9:2f:80:63:91:b5:97:7b:26:58:47:a4:70:1a:3f:
         38:9a:1d:bc:ab:9b:c2:6b:ab:32:e7:09:a7:d2:53:f7:87:a6:
         99:38:b1:dd:af:3b:08:3f:d6:5e:df:71:5a:57:78:4d:5a:3a:
         eb:6b:58:e8:c9:8d:17:33:f1:bc:11:58:e3:bb:c0:4e:26:14:
         49:fa:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:11 2026 by rpki-client