Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3131332e332e302f32342d3234203d3e20313337333432.roa
File:                     3130332e3131332e332e302f32342d3234203d3e20313337333432.roa (raw, json)
Hash identifier:          4qEfAhcwD7rfPzD19j4fQcoIdGMpA7OvU8syRxtutsI=
Subject key identifier:   17:6A:E1:5B:C4:46:17:64:81:8C:45:F4:78:32:B5:10:F4:B4:C8:27
Certificate issuer:       /CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
Certificate serial:       1344058001C6770B77B1FF84AEBB02ADD82A3462
Authority key identifier: 06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3131332e332e302f32342d3234203d3e20313337333432.roa
Signing time:             Sun 03 May 2026 03:12:54 +0000
ROA not before:           Sun 03 May 2026 03:07:54 +0000
ROA not after:            Sun 02 May 2027 03:12:54 +0000
asID:                     137342
IP address blocks:        103.113.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl
                          rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:44:05:80:01:c6:77:0b:77:b1:ff:84:ae:bb:02:ad:d8:2a:34:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06D6B8077F3D028DBD2DFCD3D54577CB351E4B36
        Validity
            Not Before: May  3 03:07:54 2026 GMT
            Not After : May  2 03:12:54 2027 GMT
        Subject: CN=176AE15BC4461764818C45F47832B510F4B4C827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:b6:3b:0d:fc:44:9b:5e:39:46:61:e5:07:
                    2e:e3:ed:ce:2f:9d:1a:5c:b8:6a:9d:17:92:49:66:
                    6d:36:a0:35:c7:cc:94:d3:48:81:0e:33:d5:dc:82:
                    12:11:6e:3a:12:ab:32:8d:85:c6:4d:b9:36:73:27:
                    54:2d:ca:53:3e:63:5c:71:0c:ce:d0:68:8a:22:69:
                    80:9d:46:73:c3:73:bb:5e:94:61:3b:43:e5:9d:78:
                    80:e4:6c:67:54:e5:3e:e1:c5:d5:28:6a:19:f9:23:
                    b5:c4:a4:ea:b7:6e:df:b7:1e:c5:a5:e7:d5:d3:63:
                    6d:c6:c1:b9:93:9a:73:aa:07:df:42:3a:42:c3:12:
                    2b:24:b5:1f:d1:a3:fe:98:63:59:75:34:71:c4:2d:
                    90:40:d5:47:73:de:bb:d1:0e:54:c1:0d:f1:ad:dd:
                    80:1b:3c:ac:43:13:6e:c3:f7:1e:9a:d6:3a:c0:6f:
                    3e:f0:fe:2c:f7:fc:3f:3b:01:4c:b6:ba:fa:34:42:
                    64:79:e9:09:5a:f9:d4:63:c4:84:b1:f2:8a:7e:b7:
                    16:81:a6:a0:4d:21:06:d1:ab:c1:cb:57:d2:12:27:
                    6b:c6:88:0c:0a:81:4b:6a:63:20:0f:20:7f:69:16:
                    8f:e4:36:e0:5e:80:05:79:70:cf:68:7a:7f:0d:6d:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:E1:5B:C4:46:17:64:81:8C:45:F4:78:32:B5:10:F4:B4:C8:27
            X509v3 Authority Key Identifier:
                keyid:06:D6:B8:07:7F:3D:02:8D:BD:2D:FC:D3:D5:45:77:CB:35:1E:4B:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/06D6B8077F3D028DBD2DFCD3D54577CB351E4B36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e1c48756-b662-468a-906d-6cd461cb6e42/0/3130332e3131332e332e302f32342d3234203d3e20313337333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1d:31:a3:bc:10:b2:d3:f0:c4:08:d1:6c:7d:8d:a0:1a:33:
         9b:d4:bd:07:20:6c:32:34:1d:88:c0:b8:19:a0:c4:73:a4:11:
         50:60:ed:d2:3c:d2:35:a2:6e:2b:d0:70:67:95:64:af:52:b3:
         ad:fa:9c:f0:2a:29:aa:95:6b:52:c0:60:52:b2:75:f8:a6:1f:
         f6:6e:73:9c:a4:5e:e0:3a:f9:d5:2e:87:c4:b2:81:0d:c7:56:
         2a:7e:58:17:8f:ba:a4:44:8e:c2:74:c2:a9:50:36:be:9f:4a:
         94:7b:2a:9f:24:34:99:4c:f0:cb:74:d6:75:d7:45:a0:a9:ca:
         03:b2:0f:b4:79:85:13:d0:42:25:f1:b9:8b:99:46:98:8a:8d:
         02:e5:a5:76:c5:7f:ab:65:a8:34:97:3b:df:28:f9:da:0e:46:
         82:98:88:57:06:26:82:a0:c4:ce:5d:41:38:7f:60:3f:dc:ab:
         78:6e:31:a7:da:a4:f8:43:37:68:5f:e0:33:dd:25:28:5e:8e:
         d3:f3:07:53:c1:9c:55:7f:5a:b5:4b:c0:f5:7d:b3:16:ed:37:
         ba:ed:83:0d:53:62:1c:f1:e4:8d:14:47:0e:7d:c3:cc:50:52:
         45:76:b4:a9:88:e6:77:42:00:39:e5:71:c4:9e:18:fe:4c:e4:
         a3:ce:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:35 2026 by rpki-client