Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa
File:                     3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier:          yo9Rg0RIu4bi5AvFSf1HgeoEO2ptRcGKCjbNNgnoU1A=
Subject key identifier:   45:E3:57:F2:0A:E8:67:76:47:64:AF:D5:C1:53:93:83:49:24:BF:8C
Certificate issuer:       /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial:       21FFE7D165DD40F42C07FAF717E51A8A5368866A
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa
Signing time:             Sun 03 May 2026 03:09:09 +0000
ROA not before:           Sun 03 May 2026 03:04:09 +0000
ROA not after:            Sun 02 May 2027 03:09:09 +0000
asID:                     136869
IP address blocks:        103.104.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
                          rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ff:e7:d1:65:dd:40:f4:2c:07:fa:f7:17:e5:1a:8a:53:68:86:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
        Validity
            Not Before: May  3 03:04:09 2026 GMT
            Not After : May  2 03:09:09 2027 GMT
        Subject: CN=45E357F20AE867764764AFD5C15393834924BF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:26:79:da:74:a8:87:8c:53:e3:fa:cb:31:
                    f8:6e:67:18:f7:4b:1d:c6:a5:c5:c9:76:05:6d:fc:
                    24:61:04:3f:32:44:37:f6:4e:34:f6:ef:82:5c:5d:
                    72:04:d8:b4:71:49:fa:90:a3:3d:57:e2:a7:bf:53:
                    e5:71:e8:15:ec:53:24:df:93:3f:03:e3:e0:c0:c6:
                    34:cb:c4:03:a6:9e:d2:77:c1:7c:8a:3c:fa:dd:89:
                    b0:1a:48:11:0f:6d:f5:e7:9e:45:29:d4:11:3e:a2:
                    28:04:e6:aa:05:c6:b6:48:57:6e:b5:eb:79:6e:1f:
                    1b:45:04:b1:77:ba:0c:0d:14:9c:12:b8:8b:5f:b5:
                    33:ae:99:b3:b7:5b:57:e8:17:b7:e5:68:3b:d7:d0:
                    8b:9f:83:b0:39:d6:70:8a:98:dc:58:50:e5:96:43:
                    ea:25:a6:b3:31:83:3b:a8:e4:e2:37:ab:61:d6:f5:
                    71:d9:a0:81:f2:3d:10:d6:7a:01:f5:a5:be:4d:3e:
                    2b:ba:c6:ea:5f:ae:88:28:8d:69:a6:fd:58:10:47:
                    15:e1:91:27:e5:87:c6:c1:82:28:06:6e:21:a7:a3:
                    86:d8:c4:bd:a5:55:77:c1:cb:d8:6b:e8:6d:f7:9b:
                    d3:51:47:48:98:57:f6:c3:1f:ea:a1:23:42:68:e1:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:57:F2:0A:E8:67:76:47:64:AF:D5:C1:53:93:83:49:24:BF:8C
            X509v3 Authority Key Identifier:
                keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:f9:34:5d:5b:aa:11:f5:4d:0b:6c:92:9a:0d:be:4a:65:b3:
         b6:1a:4c:19:31:23:40:a4:fe:63:59:16:9a:55:e4:0e:3c:55:
         5e:1a:65:fb:b6:60:21:1f:61:97:b5:d2:24:6a:c5:bb:23:9f:
         f0:61:6e:bc:9a:a6:19:cd:a3:20:64:eb:80:c5:b0:59:71:52:
         fd:e8:12:f9:89:9f:3b:7d:49:76:fc:60:5e:da:95:33:0e:c2:
         a2:4f:4b:df:52:dd:9a:85:ab:30:93:fe:32:d1:06:50:fa:ba:
         34:eb:56:1c:4c:2d:58:bf:c3:3d:7b:04:15:a4:c9:af:51:e5:
         16:d8:d7:7e:e5:32:05:f4:b5:91:ef:d2:5f:6a:41:70:0d:ae:
         10:20:ae:3b:7d:39:39:e2:88:a0:70:1f:10:4b:71:ad:fb:ef:
         87:ad:a4:59:58:6d:13:70:f1:7e:2e:9b:cf:5b:e8:e4:31:8e:
         82:fb:95:38:15:b5:a4:fd:1d:44:46:90:d4:5e:07:ac:73:c7:
         60:75:1d:ef:af:9b:17:0a:63:e9:ad:2b:66:84:7c:15:aa:3e:
         23:a3:a6:65:e6:a9:ba:b1:b3:0b:53:b1:06:f7:b5:d1:f9:31:
         13:a5:54:2d:00:28:31:5c:bb:c1:98:f0:95:61:a5:e8:9f:d0:
         5e:b5:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:59 2026 by rpki-client