Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138362e302f32342d3234203d3e203538353533.roa
File:                     3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (raw, json)
Hash identifier:          cFFyKwGpHn4uF9F1ttK0LolsMUqZe11EhB3qJ8iRTTQ=
Subject key identifier:   2E:6D:81:58:69:B8:19:04:4E:64:24:6B:35:10:C1:14:52:37:DC:AC
Certificate issuer:       /CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
Certificate serial:       568B3BA47B2A8BD3C9B09660BB6B6AE258298890
Authority key identifier: 69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138362e302f32342d3234203d3e203538353533.roa
Signing time:             Sun 03 May 2026 03:12:27 +0000
ROA not before:           Sun 03 May 2026 03:07:27 +0000
ROA not after:            Sun 02 May 2027 03:12:27 +0000
asID:                     58553
IP address blocks:        103.20.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl
                          rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:8b:3b:a4:7b:2a:8b:d3:c9:b0:96:60:bb:6b:6a:e2:58:29:88:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697B0C9E367E93F42A6695D98FB6A0F5F186363A
        Validity
            Not Before: May  3 03:07:27 2026 GMT
            Not After : May  2 03:12:27 2027 GMT
        Subject: CN=2E6D815869B819044E64246B3510C1145237DCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:16:7f:b5:08:98:5a:12:b8:1e:f8:e6:4a:
                    6f:03:56:12:67:94:dd:04:05:19:3b:7b:e7:22:fb:
                    3e:e8:ab:fb:0f:b3:b1:b3:db:23:b7:7c:d5:fc:b3:
                    e6:de:eb:05:bc:7c:ba:86:7d:81:6a:73:e9:7e:89:
                    82:bf:a1:19:5b:92:89:1e:30:f7:aa:80:5b:40:f1:
                    bd:03:0b:4f:eb:d7:08:bb:f8:d7:50:ed:47:5c:ad:
                    08:2a:82:57:a1:9c:30:be:94:d4:82:11:d2:b9:6c:
                    7d:39:51:f3:54:cf:4c:64:8f:8f:67:34:8a:51:62:
                    46:61:8f:b0:96:8e:4a:31:c5:c6:3a:0c:f5:ae:4b:
                    61:1d:99:d4:31:f0:90:7e:fe:92:5e:d7:78:9d:1c:
                    de:78:2e:27:41:53:d6:9d:ba:3f:4c:de:7c:6b:91:
                    79:c0:8c:84:41:5a:81:5d:f8:69:b7:27:39:b5:67:
                    b1:2d:7e:dd:47:d2:81:17:25:2a:65:0b:20:a8:66:
                    00:33:b1:06:71:83:ef:78:2d:ab:9c:c1:09:86:51:
                    ce:22:2c:5a:0d:aa:73:cc:e7:c6:28:9a:ba:e3:05:
                    65:1b:ce:62:d7:62:ee:e1:a3:8c:d7:dc:bc:a2:50:
                    83:97:61:43:2a:41:30:ad:f1:33:e5:cd:78:0f:76:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6D:81:58:69:B8:19:04:4E:64:24:6B:35:10:C1:14:52:37:DC:AC
            X509v3 Authority Key Identifier:
                keyid:69:7B:0C:9E:36:7E:93:F4:2A:66:95:D9:8F:B6:A0:F5:F1:86:36:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/697B0C9E367E93F42A6695D98FB6A0F5F186363A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/697B0C9E367E93F42A6695D98FB6A0F5F186363A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/3130332e32302e3138362e302f32342d3234203d3e203538353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:52:8f:80:a4:80:e8:5d:42:04:d0:b0:c9:1f:08:c9:de:
         f3:ea:2f:27:ca:31:b6:79:76:85:ad:23:46:e5:56:48:07:d6:
         1b:7a:b4:f1:5b:e2:9f:50:24:ca:3e:24:3b:55:a1:4a:17:ee:
         ff:05:40:f5:63:5b:82:73:46:00:07:9c:23:9d:db:0e:74:8e:
         83:e6:51:21:a0:d4:73:0e:42:e6:d5:db:9e:3a:f1:d8:53:a6:
         1b:39:b7:68:f6:93:cf:55:94:74:85:74:f5:05:95:b2:94:04:
         18:97:13:f1:97:b1:a3:7a:c6:08:cd:b3:42:33:1e:9e:6f:f9:
         c8:69:73:1a:17:62:a6:18:6f:3e:d7:51:47:d0:ca:52:11:39:
         86:90:b0:67:dc:56:c8:70:f9:af:8b:52:67:8f:f3:7a:4c:6b:
         74:a8:28:c1:c9:e2:d3:b2:77:69:31:65:72:ae:bb:d4:67:5d:
         db:0e:e5:f5:61:89:b5:00:3f:78:7c:d4:1f:3b:82:4f:d4:62:
         38:38:b5:79:83:00:9f:4e:e5:4e:79:56:4a:36:78:94:f7:63:
         13:4a:eb:6f:7a:93:e3:3a:00:ed:52:32:12:a9:9d:7b:b6:2a:
         30:7f:26:a9:96:d5:b1:ae:7b:0e:33:4f:01:5a:70:37:ab:ae:
         61:45:f1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:06 2026 by rpki-client