Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
File:                     3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa (raw, json)
Hash identifier:          JAYComMgZGW5cs4I42/MUqz0BDM3vJap3w0IwfifL1A=
Subject key identifier:   78:FC:36:92:39:A8:60:D0:E6:4C:B6:AF:53:24:DC:A5:21:95:5D:EF
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       1C155C7A7953CB7963DBDC49CE5FD8070AD7E593
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:44 +0000
ROA not before:           Sun 03 May 2026 03:07:44 +0000
ROA not after:            Sun 02 May 2027 03:12:44 +0000
asID:                     137329
IP address blocks:        103.106.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:15:5c:7a:79:53:cb:79:63:db:dc:49:ce:5f:d8:07:0a:d7:e5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:44 2026 GMT
            Not After : May  2 03:12:44 2027 GMT
        Subject: CN=78FC369239A860D0E64CB6AF5324DCA521955DEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:d3:b7:cb:dc:37:cb:11:e2:c9:63:dd:b9:
                    79:1b:42:b8:98:2b:b0:e0:c9:43:7d:59:9a:8c:8e:
                    53:6a:49:c2:76:6b:bb:fd:2b:79:c4:ba:f7:f6:53:
                    a9:74:8c:5f:af:d9:a5:24:2a:b0:af:43:68:c3:4c:
                    8f:21:49:b3:9d:86:3f:ff:c4:04:0f:f7:25:29:62:
                    b8:f9:20:57:75:ce:84:7a:04:3b:8b:fe:2a:21:0f:
                    79:ab:01:65:19:2c:fc:62:bd:14:5c:89:54:b6:4e:
                    18:8e:17:ef:7b:d8:9b:58:7e:fd:1e:08:0f:ad:a4:
                    ab:56:1d:e5:8d:1d:8c:9b:d7:f9:73:b1:1f:d8:bd:
                    38:fc:05:c8:a4:fe:33:2b:f2:1f:73:a1:0d:10:c4:
                    68:07:b4:80:6f:28:71:73:e0:73:d3:3b:77:b9:fc:
                    6d:ee:70:ee:97:ce:13:1d:ab:ed:ac:b4:7a:26:52:
                    25:d8:09:1d:ca:86:27:11:80:7d:2d:15:ec:54:b5:
                    95:4a:2c:37:47:e5:0b:04:0f:37:bb:ad:f8:a8:40:
                    08:11:64:5b:0b:99:24:0b:c5:1f:6c:3c:88:db:d7:
                    35:27:00:3f:39:99:47:57:97:71:c6:6f:52:d6:e2:
                    19:d7:b0:df:23:64:42:7d:dd:6b:28:d9:93:8c:2e:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FC:36:92:39:A8:60:D0:E6:4C:B6:AF:53:24:DC:A5:21:95:5D:EF
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231362e302f32322d3232203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:45:43:5e:59:fa:c3:4a:3c:14:5d:2e:1b:1a:25:45:1d:
         e5:f5:16:80:f7:e5:a1:62:0f:ee:7a:d6:02:c9:17:23:57:eb:
         e9:01:c8:8e:10:7f:48:52:da:ad:77:dc:db:80:89:3b:f3:b1:
         51:69:d7:0c:59:6d:45:a3:4c:fb:9d:7d:b3:c6:af:0d:47:06:
         aa:2a:85:cf:5e:67:f8:b8:ec:c8:b3:81:5f:c4:ff:2d:91:dd:
         d9:93:8e:df:3b:ba:a7:1b:19:d8:7c:71:d5:38:92:1a:65:68:
         c6:a3:92:ba:bd:ff:74:7e:f7:30:a6:4c:37:e2:0b:33:12:38:
         3b:82:62:3c:33:14:53:da:2c:bb:5d:b7:41:ac:71:ec:8e:97:
         81:3c:90:ed:d5:31:16:2c:9a:12:cb:12:16:a8:8c:a0:b6:28:
         2d:75:f3:25:da:f6:fe:33:35:d4:e9:4c:c0:b8:fb:62:91:36:
         b5:22:75:4f:26:ce:d1:4a:8a:43:50:03:97:fd:8c:bd:c1:60:
         43:76:be:63:69:21:d3:e7:61:8e:b5:f8:44:7c:81:47:db:11:
         f6:34:3c:29:be:21:52:a7:0e:15:0d:83:47:70:71:90:a8:57:
         0f:80:c0:cc:a2:df:cb:7d:b6:0f:f1:dd:7f:6e:26:dc:94:68:
         c4:aa:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:16:27 2026 by rpki-client