Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa
File:                     3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (raw, json)
Hash identifier:          jRI7u+pgcEtmrDDRmjulrcR4SRRZM/aGtsQfGUXuJ24=
Subject key identifier:   69:D2:44:9C:D8:39:FD:27:4E:08:80:9F:0A:B9:9A:CE:02:BD:3F:2E
Certificate issuer:       /CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
Certificate serial:       4696B7E36EF44FC6C17170C4ABBEB02598DBD8C5
Authority key identifier: D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa
Signing time:             Sun 03 May 2026 03:09:10 +0000
ROA not before:           Sun 03 May 2026 03:04:10 +0000
ROA not after:            Sun 02 May 2027 03:09:10 +0000
asID:                     136869
IP address blocks:        103.104.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl
                          rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:96:b7:e3:6e:f4:4f:c6:c1:71:70:c4:ab:be:b0:25:98:db:d8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D626CC25972BF9948C6B3BDE4E354C71F2570880
        Validity
            Not Before: May  3 03:04:10 2026 GMT
            Not After : May  2 03:09:10 2027 GMT
        Subject: CN=69D2449CD839FD274E08809F0AB99ACE02BD3F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:96:cd:eb:bf:b1:df:c5:a9:2d:da:5a:a9:
                    ee:62:3d:b5:3f:d6:5d:51:b3:92:2c:d2:50:e0:35:
                    05:51:ed:e5:8b:b1:47:c5:bb:7a:76:af:aa:89:d8:
                    4b:8b:0a:b3:18:03:09:44:48:7f:87:50:67:e3:eb:
                    77:f3:28:e5:59:cd:7e:41:8d:08:a2:90:fd:38:0b:
                    2c:8f:21:0a:c9:e7:9c:f0:21:26:ca:29:4d:82:2c:
                    f0:94:7d:a3:77:a3:86:06:b2:2d:22:df:fb:34:a8:
                    43:f4:a8:9c:0f:4b:16:11:ec:14:7d:8f:28:ad:23:
                    46:92:f3:a2:d1:ac:a1:53:3f:ef:3b:23:46:f6:da:
                    50:89:77:92:f8:88:89:f9:05:8b:17:3c:84:ab:22:
                    b0:e9:67:2b:3d:ce:39:41:35:33:c8:a0:17:27:71:
                    7f:2f:03:1d:1d:09:5e:d2:ff:60:59:4f:c9:49:fa:
                    9c:74:f2:91:95:bc:19:50:e5:74:ea:31:62:1f:66:
                    17:3e:ad:aa:2c:29:14:5e:82:c5:12:2d:fa:b4:92:
                    6e:de:da:ae:50:88:d1:5f:bf:cb:65:bc:29:ab:c1:
                    6a:16:9c:ff:c2:51:34:a6:0d:b3:c5:85:13:95:6a:
                    f1:62:d1:51:d6:37:c4:4f:95:cc:c5:db:e4:2a:a1:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D2:44:9C:D8:39:FD:27:4E:08:80:9F:0A:B9:9A:CE:02:BD:3F:2E
            X509v3 Authority Key Identifier:
                keyid:D6:26:CC:25:97:2B:F9:94:8C:6B:3B:DE:4E:35:4C:71:F2:57:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D626CC25972BF9948C6B3BDE4E354C71F2570880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D626CC25972BF9948C6B3BDE4E354C71F2570880.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:aa:83:31:d7:26:1d:1c:a9:a4:be:5e:b4:46:12:3f:ab:cb:
         75:0c:6a:7b:b6:4d:05:fa:8f:ca:09:97:cd:39:18:cc:e3:6a:
         14:73:52:7d:92:04:6e:90:a9:c8:6c:5d:9c:31:b4:71:81:d7:
         14:c9:99:65:76:91:e3:13:7e:a7:f8:7c:1e:93:8a:eb:8e:99:
         4b:fc:c0:8e:a8:93:5e:aa:e4:8f:96:03:cf:3a:91:a0:4e:f5:
         92:09:03:50:3a:b8:6c:86:55:b4:af:ec:8f:8b:2f:b2:1e:9c:
         6b:32:f0:d2:e0:62:19:be:3e:df:a0:d8:42:65:79:02:6c:00:
         8a:5f:15:55:cb:cd:98:7e:72:23:90:4f:9b:c9:0b:59:92:6e:
         38:cc:ce:d4:1b:5b:7f:6c:d8:80:94:58:1e:55:2b:10:35:7c:
         c9:c5:b1:8e:6e:41:4a:d9:a7:84:14:2f:76:e7:ac:bd:39:3d:
         51:e3:b1:2f:96:36:41:2f:77:9b:03:44:6b:f5:84:db:24:d1:
         64:fe:52:33:3a:26:9e:f0:34:67:a4:24:be:ec:d5:be:6e:ab:
         a9:c3:00:b0:05:bd:1f:df:b8:37:e4:d4:9c:24:e5:86:12:4f:
         ee:64:af:32:6f:40:02:cf:3b:c2:6d:6a:ce:a2:78:6b:35:0b:
         c0:ac:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:40 2026 by rpki-client