Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa
File:                     3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier:          0aDHxXMr4KUimzxt4JkDC404Ezku76mxRU40fEJqQUU=
Subject key identifier:   D3:AF:62:C3:87:BD:F3:D9:BC:EF:72:5A:7E:27:94:51:D7:BB:EB:38
Certificate issuer:       /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial:       21628D01707DB979659D85518C88D9CCBEF1A029
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa
Signing time:             Sun 03 May 2026 03:09:09 +0000
ROA not before:           Sun 03 May 2026 03:04:09 +0000
ROA not after:            Sun 02 May 2027 03:09:09 +0000
asID:                     136869
IP address blocks:        103.104.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
                          rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:62:8d:01:70:7d:b9:79:65:9d:85:51:8c:88:d9:cc:be:f1:a0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
        Validity
            Not Before: May  3 03:04:09 2026 GMT
            Not After : May  2 03:09:09 2027 GMT
        Subject: CN=D3AF62C387BDF3D9BCEF725A7E279451D7BBEB38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1b:08:bf:7b:32:2c:66:b5:bb:fb:e8:ac:b1:
                    7b:19:5d:33:5a:aa:02:e4:55:5f:9d:59:db:90:5e:
                    4b:55:27:d0:21:81:2d:f3:fc:35:df:8e:1e:7d:29:
                    fa:28:a2:82:73:69:7b:b5:4d:8c:61:43:5f:26:fd:
                    bf:2a:58:ac:e8:42:a1:4d:29:e2:61:18:4b:26:53:
                    cc:2d:ca:c6:09:31:77:ce:7a:27:e9:a3:b1:2a:3d:
                    24:3a:3f:e2:65:1f:84:2e:83:a2:71:9c:7d:4b:b7:
                    5c:58:08:53:83:65:d5:8a:3b:4d:42:7d:a4:39:f7:
                    60:c5:a0:a1:16:c3:44:6f:fe:e0:f7:00:4d:1c:23:
                    81:24:ab:d4:4d:0f:35:a0:27:75:80:0f:89:46:91:
                    cf:fb:30:fd:e1:f6:11:2c:c7:45:cb:ca:a5:6b:0d:
                    de:2c:dc:5f:5d:55:d9:46:9f:c3:12:d4:05:12:90:
                    e2:78:b8:92:a5:12:d6:42:f7:02:60:dd:95:c6:a9:
                    07:f6:1a:81:45:73:11:31:52:27:23:65:5f:f3:14:
                    23:5d:07:24:34:04:b6:e5:07:83:9d:eb:c6:09:97:
                    ed:08:1a:aa:f4:87:b7:e9:7f:ed:81:ab:41:0b:1d:
                    b7:fe:23:71:c4:38:18:ff:cb:4d:27:62:ea:82:52:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AF:62:C3:87:BD:F3:D9:BC:EF:72:5A:7E:27:94:51:D7:BB:EB:38
            X509v3 Authority Key Identifier:
                keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:65:48:4d:d0:81:c9:ba:26:2f:c3:5d:2c:5e:eb:b7:41:
         c0:5f:8c:4b:63:8e:39:ed:07:0a:a5:97:05:15:73:1b:38:aa:
         38:c0:c1:3d:ec:62:8b:ba:79:90:fd:8d:8e:0a:4c:9b:b6:33:
         4f:35:25:c4:3e:52:1e:7c:8e:09:27:f1:db:92:01:eb:24:ee:
         60:5b:ea:81:20:a3:db:86:c0:ec:10:97:6f:22:93:0f:30:f8:
         75:6c:bc:c4:13:56:3c:c1:6a:e1:8c:17:9b:97:ee:cb:9b:ed:
         c6:dc:89:b1:84:6e:ab:49:3d:3f:22:29:fe:19:39:74:5b:62:
         2f:1b:ab:f3:91:51:68:2e:e4:ab:91:00:d8:a6:60:32:38:c8:
         be:60:d4:84:59:f3:84:75:7c:04:c1:b4:d7:2e:ab:cc:5f:b9:
         09:c1:fc:8d:00:11:ef:da:37:f2:4f:69:c8:ce:fb:e6:c7:ff:
         9b:d1:cf:88:20:38:f0:90:61:55:26:a6:df:62:83:e1:03:5d:
         63:51:dd:0e:3d:60:92:c7:38:3b:22:49:8c:88:d4:24:eb:0f:
         bf:f2:a2:14:68:fc:5c:b6:4b:63:bd:81:d7:7b:2e:41:d3:90:
         95:94:11:52:28:a5:57:6c:5e:22:1f:55:aa:a0:70:19:27:e7:
         9b:4c:7e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:33 2026 by rpki-client