Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa
File:                     3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier:          +bc1aSBLcX6ZQm4jECmlMCivSavxhqXkBTLrz820pWg=
Subject key identifier:   4B:04:58:1D:0E:98:1A:D9:D2:A3:18:88:2C:AD:B2:3A:A9:13:B6:D6
Certificate issuer:       /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial:       71CFCF43F402DE25F8C99C2C1B262F5D74F394E6
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa
Signing time:             Sun 03 May 2026 03:09:09 +0000
ROA not before:           Sun 03 May 2026 03:04:09 +0000
ROA not after:            Sun 02 May 2027 03:09:09 +0000
asID:                     136869
IP address blocks:        103.104.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
                          rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cf:cf:43:f4:02:de:25:f8:c9:9c:2c:1b:26:2f:5d:74:f3:94:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
        Validity
            Not Before: May  3 03:04:09 2026 GMT
            Not After : May  2 03:09:09 2027 GMT
        Subject: CN=4B04581D0E981AD9D2A318882CADB23AA913B6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:56:0e:1b:4a:88:2c:65:76:68:d4:fc:f1:
                    cf:9f:42:c0:78:34:2f:2c:91:da:a4:14:00:62:3d:
                    aa:64:b0:03:db:4b:c8:d4:f7:c4:4c:9d:ca:fa:92:
                    62:bf:a5:b1:a8:74:2a:14:74:c3:7a:bf:3a:86:f3:
                    db:07:84:c1:66:75:51:a0:9d:cf:6c:7c:ab:f9:ac:
                    e1:3c:93:e9:5a:ba:72:92:68:b5:f2:59:e7:83:25:
                    09:ef:53:4d:fc:d0:8b:fb:50:d3:db:b8:e4:16:f1:
                    f7:34:a2:bb:d6:b8:6f:93:63:79:33:cc:66:30:a6:
                    dc:25:99:5d:d6:8a:52:99:af:84:52:e1:ac:46:61:
                    65:27:e2:70:a8:43:f4:a8:6d:ec:89:93:28:64:84:
                    cb:68:22:c5:6e:90:e0:4a:d1:f2:94:6e:d5:b6:98:
                    d9:ab:87:b0:79:07:e0:be:6a:4d:18:26:c7:a6:8e:
                    6b:63:11:73:1d:92:b4:ab:19:29:d1:0c:c9:06:9d:
                    71:6b:f9:66:6d:74:d0:43:1a:4a:14:e0:50:9a:52:
                    a5:c7:63:63:8e:34:8a:1c:43:3b:97:58:79:1c:b3:
                    16:91:09:41:dc:c0:ca:99:3e:12:83:91:a0:49:00:
                    34:7b:8d:e9:b6:7a:65:09:12:8b:90:5a:ea:aa:8c:
                    a9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:58:1D:0E:98:1A:D9:D2:A3:18:88:2C:AD:B2:3A:A9:13:B6:D6
            X509v3 Authority Key Identifier:
                keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:02:fa:0a:8e:94:86:f6:37:50:89:49:0f:8c:10:86:5f:39:
         ee:70:4a:0c:41:6e:ad:b6:ba:16:7b:30:1b:4b:66:dd:f9:39:
         38:e3:d8:3d:62:55:5c:11:2c:3b:8e:91:a7:be:e4:dc:3f:09:
         6e:35:29:60:8d:46:c7:46:ca:e3:1c:d7:ff:40:64:4c:83:37:
         88:01:22:3a:82:fb:3e:eb:e9:44:41:6d:cd:fd:2e:5c:b6:bc:
         00:26:6d:c9:62:1d:27:e6:22:bd:f6:ea:11:89:28:74:09:41:
         93:4b:28:68:44:15:f0:59:ae:f1:ab:c8:e8:bd:2b:ce:30:4f:
         00:d0:2c:03:00:52:62:6b:fc:16:03:3e:f5:70:49:82:73:10:
         2d:4c:e0:38:cd:7c:d1:88:e6:bc:b7:c9:bf:a9:f3:77:72:6e:
         b1:b7:af:57:04:fe:6b:ce:3d:b8:f7:01:d7:34:2b:7c:1c:fc:
         e4:18:a8:7d:33:dd:2b:69:a3:d0:eb:13:a1:54:05:c2:3b:d5:
         d3:9a:f0:bf:54:f0:5e:01:33:03:8b:ba:d5:96:a9:de:3a:da:
         eb:99:d3:5c:47:bb:1c:36:53:5d:27:43:ad:b9:78:38:66:27:
         23:eb:7a:0d:d0:d3:66:0f:ba:06:ab:5e:2d:d1:0c:a9:f7:8b:
         6a:5a:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:26 2026 by rpki-client