Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa
File:                     3130332e35362e3230362e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          CVqG9mh1X9V1ZbC6R/r5UJJ2xSfzA9r4RYW1GFYyElI=
Subject key identifier:   78:E3:5A:A7:39:A7:E6:F7:58:CE:2B:F9:72:1C:D6:0C:F8:FD:91:91
Certificate issuer:       /CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
Certificate serial:       0DC1E3F69D67F05B652F925A951644B253D526BD
Authority key identifier: 8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa
Signing time:             Sun 03 May 2026 03:09:30 +0000
ROA not before:           Sun 03 May 2026 03:04:30 +0000
ROA not after:            Sun 02 May 2027 03:09:30 +0000
asID:                     58477
IP address blocks:        103.56.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl
                          rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c1:e3:f6:9d:67:f0:5b:65:2f:92:5a:95:16:44:b2:53:d5:26:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE9BB21003E87396CEDD7898B4A50424E8CEC8F
        Validity
            Not Before: May  3 03:04:30 2026 GMT
            Not After : May  2 03:09:30 2027 GMT
        Subject: CN=78E35AA739A7E6F758CE2BF9721CD60CF8FD9191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:c5:18:9d:b6:14:a2:1c:e0:7e:0b:af:7a:
                    db:f7:ea:2e:88:04:1a:e1:41:33:d7:ec:b5:92:8f:
                    80:17:e9:b9:d4:58:69:87:43:f4:48:0a:97:50:ed:
                    d5:86:56:e0:e2:39:95:9c:d5:b8:0c:f2:2c:66:91:
                    57:dd:51:dd:4a:cc:12:88:b6:c7:ba:d3:4f:94:dd:
                    e0:be:0d:c1:ab:23:8e:f3:8b:48:7a:5e:ef:3e:ba:
                    40:51:75:8e:1c:ae:7a:a4:1b:d7:84:5c:06:07:73:
                    f7:8f:b4:0d:38:c7:ff:18:59:fc:30:c5:d9:0e:5b:
                    fd:b3:b1:62:2f:b2:9a:ae:23:76:79:38:41:f9:ed:
                    51:1d:dc:0c:5b:86:b6:af:df:b8:54:f3:32:ae:b9:
                    c9:23:d6:dc:1b:d4:ac:82:6d:16:d5:ed:ee:13:66:
                    21:4d:97:4e:d7:8b:e1:94:de:d1:41:ad:f8:57:3e:
                    90:a3:03:ef:22:ef:0c:22:9d:f5:6f:16:68:1b:55:
                    f2:13:9e:5a:95:06:ee:4d:12:4c:a5:7c:23:d7:7e:
                    37:48:7b:b1:c5:40:6d:17:e9:a5:a7:cd:a4:e3:32:
                    6c:34:72:08:6a:04:56:cd:d4:90:61:45:2e:97:77:
                    39:ed:31:c8:35:b3:f3:58:2c:f0:c0:e7:72:a0:11:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E3:5A:A7:39:A7:E6:F7:58:CE:2B:F9:72:1C:D6:0C:F8:FD:91:91
            X509v3 Authority Key Identifier:
                keyid:8A:E9:BB:21:00:3E:87:39:6C:ED:D7:89:8B:4A:50:42:4E:8C:EC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8AE9BB21003E87396CEDD7898B4A50424E8CEC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d3f8f55c-9e35-4ce2-890f-0de3e2404611/0/3130332e35362e3230362e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c6:3a:fe:7b:25:9c:6b:62:8c:bc:bb:41:9d:d8:81:b1:f7:
         da:d7:cc:5f:73:68:da:e5:5b:6e:97:ef:94:66:f6:15:a0:4e:
         9d:32:d0:21:04:f9:d5:e5:ef:74:5b:06:e4:3d:0a:1b:4e:91:
         3b:c5:4d:21:e7:dd:20:55:79:15:22:68:1d:a8:9c:14:b0:96:
         cd:f8:f6:32:d4:fe:49:a2:19:bc:a3:67:ba:6f:ed:f9:f1:27:
         ed:49:dc:d0:46:b3:4a:a7:60:9c:3d:44:86:ca:93:5d:70:e8:
         04:e2:f4:22:af:f6:27:6d:a1:04:93:95:ac:3e:44:b5:cb:84:
         95:14:89:b5:39:ce:68:a2:57:70:d3:d3:9f:2b:a6:8a:ad:98:
         42:7d:4c:d4:c3:b6:0b:b5:89:07:88:9f:3b:ee:90:8f:0e:c4:
         2b:d7:26:55:21:08:cf:57:eb:b6:63:61:21:b7:3a:95:7f:09:
         1f:35:f3:9c:11:49:eb:dd:2c:04:cd:7d:fd:f4:72:5c:28:44:
         49:62:67:64:76:be:56:c5:d1:71:d0:d2:15:97:25:14:dd:91:
         3c:ae:31:f8:99:16:a2:f3:82:bf:cb:27:2c:0c:19:0e:d8:52:
         5a:c4:3e:ad:96:41:77:ca:1e:7d:b5:ba:ef:76:80:53:5d:b5:
         21:4f:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:24 2026 by rpki-client