Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa
File:                     3130332e35312e3230342e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          6vTt7iakNGcfslwAVhme6SWsiB0WL5VdL85Bqsh/QS0=
Subject key identifier:   79:23:76:EE:76:7E:D8:33:8E:02:5E:84:06:C9:BE:4A:04:98:BF:FE
Certificate issuer:       /CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
Certificate serial:       2FB205B0020F862641674701CF4354FB2B63D21A
Authority key identifier: BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa
Signing time:             Sun 03 May 2026 03:05:38 +0000
ROA not before:           Sun 03 May 2026 03:00:38 +0000
ROA not after:            Sun 02 May 2027 03:05:38 +0000
asID:                     45305
IP address blocks:        103.51.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl
                          rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b2:05:b0:02:0f:86:26:41:67:47:01:cf:43:54:fb:2b:63:d2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB6EE49795E5FDE1E98253E3448067A9D07E5EB4
        Validity
            Not Before: May  3 03:00:38 2026 GMT
            Not After : May  2 03:05:38 2027 GMT
        Subject: CN=792376EE767ED8338E025E8406C9BE4A0498BFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:57:15:3c:56:4e:66:e7:90:ed:e8:72:9d:
                    88:dd:4c:cc:fc:65:66:a8:92:ea:cb:0e:eb:74:93:
                    77:1c:d2:75:2c:8c:c8:f2:0c:74:a8:29:80:f3:5e:
                    3d:b4:5b:3c:77:35:1f:f7:bd:80:65:d5:64:2d:33:
                    c0:ec:a3:f8:67:f0:52:2a:fe:6d:d8:b1:8c:ea:e7:
                    03:66:06:af:22:de:0b:57:c9:12:31:b0:41:d9:1a:
                    80:e2:e0:87:5a:0d:26:3a:ab:1c:d8:5b:e7:69:f6:
                    d8:97:e5:cb:ee:65:78:98:53:69:f0:e9:fe:e0:2e:
                    ff:bc:61:22:13:d4:95:bd:70:17:cf:50:e5:94:d9:
                    20:5d:2e:9b:51:b5:5d:39:18:3d:ef:a2:f3:25:9c:
                    88:04:b3:b7:65:cf:ed:13:a1:77:1f:a3:5b:05:e5:
                    41:06:f0:54:27:c7:b5:e8:26:03:57:77:87:aa:09:
                    1f:03:5e:e8:2f:99:89:9e:32:df:11:eb:97:e5:95:
                    a9:44:27:08:ac:4c:0b:88:7b:ed:70:1b:15:b7:3f:
                    84:42:01:23:fb:c3:cb:f3:f5:66:a6:82:e2:75:35:
                    b0:80:59:6b:ef:00:e9:88:d0:90:de:94:53:20:93:
                    09:2c:4e:7c:bb:fa:f9:31:9e:b0:fb:d8:24:7b:d4:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:23:76:EE:76:7E:D8:33:8E:02:5E:84:06:C9:BE:4A:04:98:BF:FE
            X509v3 Authority Key Identifier:
                keyid:BB:6E:E4:97:95:E5:FD:E1:E9:82:53:E3:44:80:67:A9:D0:7E:5E:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BB6EE49795E5FDE1E98253E3448067A9D07E5EB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c65b84f2-9804-4670-8bbc-c33271b59259/0/3130332e35312e3230342e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:14:be:9d:b3:55:f3:0f:0f:0f:f2:95:fd:e2:b1:e3:52:
         0e:9a:88:d1:9b:86:af:0f:c5:be:50:e1:de:6c:8c:08:1c:fd:
         bc:a3:d3:a2:fb:e5:a0:9c:03:77:cc:44:41:c4:98:c9:97:1e:
         77:61:f6:d8:eb:e0:52:67:e0:4e:44:8b:d0:0a:b7:12:0f:76:
         da:49:98:cf:f1:f3:59:c2:26:e4:b1:30:b3:e0:9b:91:ef:cf:
         48:87:9b:55:fa:7c:f6:65:83:10:7c:b0:c9:a8:6e:83:37:f1:
         63:6e:f8:44:06:59:91:fe:56:34:ea:75:c3:81:2f:95:44:b8:
         f8:57:35:01:7f:f2:9c:fd:fe:3b:e2:3b:e8:3e:db:87:aa:af:
         25:5a:32:00:8a:9f:9b:5a:29:28:5d:03:cf:20:33:bb:68:2f:
         35:25:e8:ff:2a:29:4c:32:71:b8:a3:27:03:a6:db:58:4a:e6:
         45:00:6a:f9:c0:0c:21:f5:09:dc:2c:98:0b:35:70:bc:dd:6f:
         e7:b3:fa:1b:92:52:3b:9c:56:18:ef:f3:77:07:29:67:91:22:
         4b:5a:af:7e:53:ce:7c:c6:e5:9a:19:66:01:dd:d2:24:73:a2:
         cc:d0:b8:ed:ea:f4:05:d7:36:89:62:75:5b:69:d7:ee:1f:56:
         64:fd:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:29 2026 by rpki-client