Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
File:                     3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          vn6fDh5P+Nx59npDGlgkHszkp/jNfWKmlW62yBSFpu8=
Subject key identifier:   A3:3F:85:98:6C:79:75:11:D0:6A:45:E1:0F:C9:8D:E6:E1:13:0C:9E
Certificate issuer:       /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial:       4BED39737DE1BA06CED253D83B5BD1FE8B5D3AC4
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa
Signing time:             Sun 03 May 2026 03:07:16 +0000
ROA not before:           Sun 03 May 2026 03:02:16 +0000
ROA not after:            Sun 02 May 2027 03:07:16 +0000
asID:                     45289
IP address blocks:        103.241.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ed:39:73:7d:e1:ba:06:ce:d2:53:d8:3b:5b:d1:fe:8b:5d:3a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
        Validity
            Not Before: May  3 03:02:16 2026 GMT
            Not After : May  2 03:07:16 2027 GMT
        Subject: CN=A33F85986C797511D06A45E10FC98DE6E1130C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:39:7d:21:4a:e8:1c:4e:dc:81:50:2b:c8:85:
                    dd:17:3f:11:1c:24:a7:5c:b2:61:c8:ee:a7:69:25:
                    d0:fe:95:85:7b:50:f2:a5:31:72:ee:cf:d0:11:68:
                    1a:ab:db:23:aa:1d:74:d9:aa:83:80:03:4d:2d:53:
                    c2:44:a8:ff:38:6f:76:d7:1d:a7:46:46:fe:07:d4:
                    27:19:a8:35:8f:eb:d0:28:12:03:19:a0:f1:c1:20:
                    ed:c8:0c:2e:26:71:96:ee:2f:b5:1b:11:19:64:58:
                    28:d4:df:ec:0a:97:7a:e6:dd:c2:9e:92:e2:08:4c:
                    c8:f1:74:47:9f:fc:7e:eb:47:c9:9d:13:04:6e:2d:
                    ce:06:48:f2:85:62:c0:39:fd:58:71:4a:5f:a2:2e:
                    de:92:ec:fe:05:5c:47:8f:c1:3b:3a:d4:90:34:c5:
                    62:8a:31:f3:db:54:c6:d2:aa:33:5e:75:e2:61:17:
                    8f:fa:93:0b:f9:78:64:ae:e9:20:ed:cc:4c:74:5d:
                    7a:b1:4d:4c:03:a3:46:11:e5:79:d8:82:5a:2d:25:
                    0e:06:e4:c5:27:b7:f1:73:92:3a:6f:23:8f:7a:8e:
                    79:b9:43:4c:cf:30:4b:e2:d3:01:a3:50:7f:06:ea:
                    bc:bf:ec:fa:01:02:21:ba:fe:4d:15:e0:c2:84:95:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:85:98:6C:79:75:11:D0:6A:45:E1:0F:C9:8D:E6:E1:13:0C:9E
            X509v3 Authority Key Identifier:
                keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137392e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:58:3f:7f:dd:42:74:4f:59:a4:bb:5d:b1:1b:6f:b7:e5:
         6a:f8:cc:4f:63:12:5a:fe:22:d8:ff:29:30:34:8e:22:f1:36:
         8d:f8:dc:0f:29:95:d0:52:d4:54:3d:6a:d0:7e:04:bd:ea:ba:
         ca:61:c8:79:b6:16:18:50:15:97:fe:c7:5d:10:e8:c2:fc:7f:
         9c:9d:86:69:5a:e5:a7:3b:8b:33:fc:0e:38:10:c6:37:05:10:
         1a:a7:c9:e7:09:43:14:6a:cb:75:c1:74:09:6f:0f:2e:c9:b2:
         91:9b:9b:ba:98:85:51:9e:e6:f5:a5:6e:48:bf:4f:bd:4f:b5:
         7c:6c:ff:a0:bb:ea:67:cc:a4:68:26:95:ae:a9:65:65:5d:cd:
         3d:23:2b:4a:36:c1:5b:80:4a:f9:be:82:cf:1f:41:33:05:3d:
         ab:fd:04:d7:79:64:cc:ea:27:c7:e9:2f:3b:d7:5b:cb:84:9d:
         95:7f:d6:72:0b:43:ab:ab:2a:1c:9d:33:38:e6:62:56:06:44:
         5a:d1:37:37:0a:0d:f7:de:de:a6:fe:40:ba:26:28:14:f6:a3:
         4d:5b:83:06:b9:cd:f6:e8:91:88:3f:f7:28:1a:14:9d:91:6b:
         be:78:5a:1f:28:b7:1c:26:a3:38:a1:44:29:0c:76:bf:35:89:
         dd:94:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:53 2026 by rpki-client