Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
File:                     3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa (raw, json)
Hash identifier:          aiwbNNYCBkF8WsACoWg258A4bhQpYB5MKKFIh5lf3x4=
Subject key identifier:   EE:E2:FB:90:6E:28:1D:58:DF:B0:FE:FC:F0:FC:33:BB:4A:6B:C5:10
Certificate issuer:       /CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
Certificate serial:       0860E08EC0FE3B5455F9652C08684F68C7383527
Authority key identifier: 5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa
Signing time:             Sun 03 May 2026 03:15:26 +0000
ROA not before:           Sun 03 May 2026 03:10:26 +0000
ROA not after:            Sun 02 May 2027 03:15:26 +0000
asID:                     133796
IP address blocks:        103.108.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl
                          rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:60:e0:8e:c0:fe:3b:54:55:f9:65:2c:08:68:4f:68:c7:38:35:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
        Validity
            Not Before: May  3 03:10:26 2026 GMT
            Not After : May  2 03:15:26 2027 GMT
        Subject: CN=EEE2FB906E281D58DFB0FEFCF0FC33BB4A6BC510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4a:d1:ed:92:5c:22:8c:c1:d0:d4:0c:17:18:
                    1b:52:af:4a:17:17:95:68:12:61:72:1b:d3:94:cd:
                    34:12:d3:89:43:56:08:68:ab:57:81:fe:d3:37:c4:
                    a3:35:48:4c:1d:d6:84:e3:97:ea:6a:f6:13:69:22:
                    1c:99:3d:3f:f6:34:1d:30:35:85:41:55:4c:01:b7:
                    36:de:29:71:7d:89:6a:e2:bc:a1:09:42:71:77:da:
                    b1:79:26:05:6a:ab:19:f9:b2:e7:7b:6c:b3:32:ec:
                    45:6f:f1:31:a2:1a:c0:d0:0b:2e:08:d2:93:66:64:
                    3c:a4:8d:c6:cb:9f:43:0b:26:30:82:af:85:f9:09:
                    ca:46:15:34:9c:3a:8a:55:3d:a5:dc:85:70:12:ee:
                    75:d9:26:5e:22:c5:c7:f6:2d:00:66:98:f4:b2:63:
                    74:69:ae:83:99:9a:17:9a:a4:06:57:2e:20:ee:c9:
                    12:81:db:4e:83:70:75:e5:3a:af:84:aa:e7:3d:df:
                    10:be:8b:9d:b7:9b:02:0d:24:6d:4b:6a:39:5e:33:
                    27:0b:c1:86:37:e8:f8:74:81:88:af:c4:6d:10:6b:
                    14:34:0e:63:22:2d:dc:c6:71:9b:08:31:b9:ef:5f:
                    54:3c:c6:9e:df:fd:26:9e:df:62:30:9f:bc:23:0e:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E2:FB:90:6E:28:1D:58:DF:B0:FE:FC:F0:FC:33:BB:4A:6B:C5:10
            X509v3 Authority Key Identifier:
                keyid:5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234312e302f32342d3234203d3e20313333373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:ec:80:4b:3a:85:69:db:e0:29:c0:12:d4:dd:91:ed:38:
         77:7f:ec:1c:5d:b4:f0:6f:f3:02:14:6f:df:71:97:dd:8a:d4:
         66:b7:72:48:8e:86:94:bd:17:f2:86:1b:39:36:db:32:b8:f6:
         f6:e1:a2:50:45:ab:de:24:6b:4e:ce:20:54:ea:7f:ea:e6:27:
         da:3d:c3:1e:fe:03:3c:b4:a8:00:10:7d:4b:52:60:26:36:58:
         59:a0:54:5f:25:47:3c:94:1f:dc:cb:c8:cf:54:d7:c2:f5:99:
         10:21:e9:19:54:1d:0c:40:af:af:c8:89:35:7e:89:57:35:e9:
         05:1a:cb:24:7b:fb:59:f3:96:d0:16:40:e5:19:8d:53:12:33:
         82:74:6d:29:13:df:84:4c:90:de:e8:4c:2f:c7:01:28:37:03:
         75:6d:b2:29:83:68:45:28:61:f2:62:67:df:67:e6:d0:39:49:
         a0:23:75:db:c3:2e:77:20:22:c7:7d:82:47:b1:71:a0:a2:16:
         56:38:c3:1d:a3:82:86:1c:09:ff:33:42:0e:20:e1:7b:b3:8f:
         0a:6f:7c:c6:01:27:4a:93:3b:14:6a:3f:b0:bb:03:f9:89:27:
         84:ed:9e:31:00:6c:08:97:d5:04:9a:99:7c:20:06:b5:d9:c1:
         e3:92:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:24:38 2026 by rpki-client