Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          wk53PpIWUn/ADId/yWgTYshwYtjkJ2bipL3Y2qURaUk=
Subject key identifier:   B2:78:48:91:E0:B8:83:0B:61:A7:EB:53:05:74:45:F6:12:19:F2:2D
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       51DE942F2277275FF7FB54BC81017168FE64DC4A
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:42 +0000
ROA not before:           Sun 03 May 2026 03:07:42 +0000
ROA not after:            Sun 02 May 2027 03:12:42 +0000
asID:                     137329
IP address blocks:        103.106.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:de:94:2f:22:77:27:5f:f7:fb:54:bc:81:01:71:68:fe:64:dc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:42 2026 GMT
            Not After : May  2 03:12:42 2027 GMT
        Subject: CN=B2784891E0B8830B61A7EB53057445F61219F22D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:dd:65:aa:70:a8:1a:d6:f1:88:66:3b:4d:
                    cc:9d:ab:05:11:70:68:12:85:15:c0:6d:8e:20:a0:
                    c7:96:51:6a:20:5f:b5:e3:a2:d0:fd:a5:6d:a6:0a:
                    21:f2:ab:24:10:1f:f0:9f:22:94:11:c1:5c:93:6a:
                    a0:63:0e:ac:ba:ac:73:e5:fd:7e:4c:95:00:cd:48:
                    9b:d8:92:b6:ab:fe:2f:0e:53:bb:67:2f:f0:59:9d:
                    a5:df:0b:de:64:b3:b3:e8:fa:33:ea:8a:93:69:8c:
                    4a:47:c7:6f:76:ac:72:aa:cf:48:60:d7:8e:18:f2:
                    84:94:3a:72:de:05:3e:1e:de:40:35:06:c8:2b:e7:
                    0d:0b:ae:3d:f3:04:dc:b7:a1:10:bb:70:6f:e4:45:
                    86:7c:c1:84:7a:28:8b:5b:ce:5b:4b:9f:78:dd:90:
                    14:92:d6:ea:9e:c8:89:21:ad:95:13:9b:08:6b:e6:
                    0f:61:87:75:18:39:02:c0:19:56:b4:d2:03:5d:4f:
                    62:54:17:7a:ba:a2:c0:22:b5:18:f6:65:f0:8d:88:
                    9e:d8:88:2e:36:a0:4f:9a:f7:be:99:4f:87:a7:3c:
                    ac:16:aa:3c:7e:39:82:c9:70:dd:b8:ad:a8:0c:27:
                    87:f7:19:7c:d9:c8:d3:33:b5:3a:1b:7f:ea:0f:ad:
                    7e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:78:48:91:E0:B8:83:0B:61:A7:EB:53:05:74:45:F6:12:19:F2:2D
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231372e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:d8:f0:87:99:a7:86:da:66:08:70:79:85:cf:18:d0:af:e4:
         15:26:0b:63:47:f9:80:75:1b:72:b1:e6:94:10:79:f3:4e:5c:
         2d:a7:86:b1:d4:66:9a:88:52:2f:86:24:85:e5:e6:cc:6f:45:
         c6:4e:09:dc:85:00:f2:9f:c6:96:22:94:09:3d:e4:dd:40:2a:
         96:60:a3:fc:cf:ce:fe:cc:6a:9d:8b:97:0a:75:12:e1:dd:2c:
         d0:90:5b:f9:33:c3:ce:fc:08:36:8c:14:3a:3d:07:1f:b0:de:
         5d:a9:9c:cb:e9:3d:13:4f:9a:43:6b:7e:82:fc:4a:07:52:4c:
         7b:61:eb:6a:6b:be:1c:f5:b4:7b:2f:0b:b3:d1:92:f1:78:38:
         38:45:aa:9a:c9:b1:9d:d0:ba:d4:91:50:c9:aa:ce:16:dd:e4:
         6b:c9:c9:6e:fe:97:c6:33:9a:a7:b4:3d:ab:62:af:91:94:fa:
         c3:3d:c3:5e:a1:d4:53:0e:66:fc:4a:57:7d:c1:35:dd:09:b6:
         34:83:c0:10:0a:29:b9:e6:87:bb:7f:51:24:e1:60:9a:18:8a:
         f2:2c:d7:e9:49:13:e7:7d:32:5d:a5:9a:cf:7d:54:a1:56:36:
         ad:34:61:15:8b:89:0d:55:ee:3a:49:7b:c6:ed:6c:5a:33:08:
         50:2c:2c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:40 2026 by rpki-client