Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e332e35392e302f32342d3234203d3e203435323839.roa
File:                     3130332e332e35392e302f32342d3234203d3e203435323839.roa (raw, json)
Hash identifier:          gYR/crxSzk7AQwYudgq7gQ3UPT8cduEgo5awnIlpiZ4=
Subject key identifier:   F1:A9:69:D4:5C:70:FF:19:B5:C2:4C:AE:36:BE:C2:4A:AC:05:BD:A7
Certificate issuer:       /CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
Certificate serial:       2198BC53A191A36895A396E40DBB694293DA94D2
Authority key identifier: 6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e332e35392e302f32342d3234203d3e203435323839.roa
Signing time:             Sun 03 May 2026 03:07:18 +0000
ROA not before:           Sun 03 May 2026 03:02:18 +0000
ROA not after:            Sun 02 May 2027 03:07:18 +0000
asID:                     45289
IP address blocks:        103.3.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl
                          rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:98:bc:53:a1:91:a3:68:95:a3:96:e4:0d:bb:69:42:93:da:94:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9
        Validity
            Not Before: May  3 03:02:18 2026 GMT
            Not After : May  2 03:07:18 2027 GMT
        Subject: CN=F1A969D45C70FF19B5C24CAE36BEC24AAC05BDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6e:e6:b3:27:8b:e1:23:7d:80:6b:2d:17:51:
                    8c:67:1b:d3:4e:9e:b9:db:aa:47:2e:c3:64:d7:76:
                    e3:f8:cc:50:a3:83:d3:a3:6b:96:d2:a0:e0:3e:5b:
                    87:b9:56:97:84:5c:5e:50:44:72:ce:9b:ab:b4:be:
                    99:c7:04:13:68:22:2a:61:7e:6d:49:29:dd:92:1a:
                    f8:b6:71:fb:76:a3:eb:9f:74:9e:94:1f:dc:10:c2:
                    45:1a:9f:21:e8:e3:39:f2:77:e9:e6:36:0a:f8:c0:
                    de:ba:20:74:56:bc:49:b8:35:11:86:b0:ec:13:fa:
                    ed:79:e1:e9:aa:67:6d:64:8b:ff:5c:7c:5b:99:de:
                    35:13:06:f8:53:a9:57:e2:a9:d8:90:ed:01:b6:8c:
                    42:13:04:15:0f:43:4c:80:b2:79:a7:35:fe:95:f0:
                    b3:4c:ba:77:20:b7:da:df:0a:d6:d4:66:a3:e5:86:
                    18:10:eb:08:08:34:5c:7d:0b:4f:8c:5f:9d:02:90:
                    cb:2b:c1:86:0d:33:17:fb:67:4b:df:67:fc:ed:f9:
                    4f:c2:46:65:bf:44:12:bd:f3:38:dd:9d:4f:d0:66:
                    82:85:cd:5c:96:a4:b4:06:22:44:17:23:07:d5:bf:
                    bb:07:61:06:f8:2f:7b:5f:86:ad:67:fb:0b:e5:2a:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A9:69:D4:5C:70:FF:19:B5:C2:4C:AE:36:BE:C2:4A:AC:05:BD:A7
            X509v3 Authority Key Identifier:
                keyid:6F:8E:E2:55:E2:21:6F:E3:EC:99:36:7C:FB:CC:9A:85:63:F2:C0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6F8EE255E2216FE3EC99367CFBCC9A8563F2C0E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e332e35392e302f32342d3234203d3e203435323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:40:1e:77:d9:78:d3:50:51:0a:75:e9:fe:a8:c3:af:d0:75:
         bc:71:35:b2:60:08:f2:39:5e:10:60:c0:b8:b9:ee:b0:9d:6e:
         00:34:2a:41:31:79:b8:c6:5a:a4:90:43:2e:af:ce:ab:6f:45:
         25:fa:29:34:0a:9f:08:45:82:cb:55:8c:29:33:b8:2d:8b:43:
         fc:9c:0a:5e:63:e8:ff:f3:05:e0:62:55:e1:9e:5e:35:d9:18:
         69:86:90:05:2e:ac:8f:d5:d4:eb:dc:9e:9b:0a:6f:b7:91:90:
         fe:ac:13:c8:01:d5:64:5d:0e:93:8c:5e:17:67:43:13:5a:ab:
         31:0f:ce:72:6f:90:25:ac:36:83:6f:9c:15:09:80:38:e9:d5:
         0f:6c:3e:46:d4:bd:fd:36:e8:4a:2e:2b:f4:85:67:90:00:e3:
         78:21:0a:32:f6:29:e1:76:ed:87:d3:ee:ab:f0:25:c1:76:15:
         7a:6f:c6:20:e0:9b:07:83:bf:47:fb:98:90:35:da:b5:1a:e7:
         19:52:5a:96:4e:c5:fb:0f:c3:6b:05:b2:7f:20:1a:0b:e0:68:
         28:f6:48:70:10:07:48:a4:2b:d5:ae:da:88:5b:aa:24:32:8b:
         a4:0b:ee:a9:1c:45:21:0c:c7:59:f0:7a:af:17:51:b3:ea:4b:
         ed:c7:92:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:16 2026 by rpki-client