Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          E7ujcq+dEmkMAJXNGgaQfD0vn6b5moNa67RPB0JjkGM=
Subject key identifier:   86:8A:C9:9A:D6:80:DD:85:09:DF:8F:DB:2B:D6:2E:FC:55:0B:3F:83
Certificate issuer:       /CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
Certificate serial:       139AEE058DDD05A18E46C06BF35B97AE255B9677
Authority key identifier: C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa
Signing time:             Sun 03 May 2026 03:12:43 +0000
ROA not before:           Sun 03 May 2026 03:07:43 +0000
ROA not after:            Sun 02 May 2027 03:12:43 +0000
asID:                     137329
IP address blocks:        103.106.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl
                          rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:ee:05:8d:dd:05:a1:8e:46:c0:6b:f3:5b:97:ae:25:5b:96:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6F0EA3F498965C7361B5EBC2E891630AD2F39BA
        Validity
            Not Before: May  3 03:07:43 2026 GMT
            Not After : May  2 03:12:43 2027 GMT
        Subject: CN=868AC99AD680DD8509DF8FDB2BD62EFC550B3F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:0c:8e:90:5a:7b:b8:ef:36:87:05:fb:87:
                    d8:c1:f6:9f:b1:91:6d:9c:13:d0:f8:8e:49:24:89:
                    c7:03:c0:de:12:ff:c8:0e:ce:18:30:4d:06:bf:69:
                    8c:4e:93:aa:7a:9f:fb:83:4f:5c:c4:1a:4f:88:98:
                    23:43:e2:89:4d:bd:a7:d6:6f:96:97:6e:06:1c:9a:
                    ea:f0:92:ba:16:ca:cf:d1:e3:ed:8e:2d:56:7c:1d:
                    96:b5:36:2a:f7:36:b9:42:72:76:37:05:db:35:da:
                    b8:4e:c8:61:53:4a:53:cb:16:fd:c5:2e:ff:dc:e1:
                    8b:82:72:3a:86:ab:cc:ed:73:17:61:79:9a:3e:16:
                    3f:b4:87:c4:a2:23:20:3f:50:de:2d:a4:a2:1a:94:
                    02:1f:41:d2:ee:5f:c6:98:9a:fb:a4:dc:08:74:c3:
                    db:80:81:75:b6:c4:d4:8d:ca:48:bf:59:4f:67:30:
                    11:0e:66:c9:fd:6d:6a:a0:72:18:12:a9:7f:09:74:
                    e5:04:78:12:f1:97:78:a3:ad:6e:a4:9c:5a:45:50:
                    72:d2:1e:9d:bd:b6:6f:60:c6:7f:a8:55:78:fc:ec:
                    8c:95:cb:10:56:48:cc:1b:74:98:9d:5c:a7:0e:a1:
                    fc:4b:79:d6:bf:a4:93:63:c6:26:0c:d3:db:b8:f7:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8A:C9:9A:D6:80:DD:85:09:DF:8F:DB:2B:D6:2E:FC:55:0B:3F:83
            X509v3 Authority Key Identifier:
                keyid:C6:F0:EA:3F:49:89:65:C7:36:1B:5E:BC:2E:89:16:30:AD:2F:39:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C6F0EA3F498965C7361B5EBC2E891630AD2F39BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:98:87:27:4f:39:49:b5:a9:a0:e3:1b:f8:52:23:29:05:44:
         a7:cd:8b:a5:8b:8d:68:c7:4c:2b:33:b3:db:db:f6:ad:7d:b0:
         46:57:25:3d:f5:b0:83:18:52:f6:71:61:a5:bf:24:c4:50:90:
         5c:0f:34:6d:9f:ef:6d:03:a2:67:d2:ee:5a:c9:8d:3d:49:06:
         52:c5:b2:ac:f7:f2:ed:5b:9d:87:97:e6:54:8d:16:99:47:38:
         b5:25:8a:ff:68:93:fe:83:b3:ec:04:36:b9:6d:fb:38:e3:bd:
         c0:99:d6:b6:65:02:a0:3d:a6:90:bf:b6:95:66:ba:a1:4d:53:
         c9:97:4e:b5:70:ac:3b:4c:26:5e:e0:5d:d7:ac:ed:68:52:62:
         1f:1b:90:6b:fc:51:31:1b:c2:e1:59:34:ab:8d:3d:26:88:27:
         ca:ab:4d:e3:0e:a4:70:cc:86:98:76:00:e5:02:4d:1d:6c:21:
         eb:a6:6a:6d:42:da:1e:38:e4:37:fc:7d:f9:a5:57:5b:7a:0b:
         d0:3e:d4:0d:af:76:53:ea:59:46:0e:a9:26:e0:99:a2:9a:db:
         7c:08:f8:57:30:69:4d:f1:77:06:14:8f:c3:29:60:32:3e:95:
         57:3f:ad:b3:dc:df:db:b4:16:93:e7:e6:7d:a6:07:31:80:d6:
         c5:1d:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:55 2026 by rpki-client