Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
File:                     3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (raw, json)
Hash identifier:          jZB6AoxFPmq2StJBGZ1mdA9GsmBKZztOt6aOVpNettg=
Subject key identifier:   60:5F:16:57:B5:F8:CA:44:B5:E4:55:F6:5F:C6:90:25:B9:22:3B:9B
Certificate issuer:       /CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
Certificate serial:       7700E5EF90F5A705F8FC9F6CF023BB6650677DF4
Authority key identifier: 5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
Signing time:             Sun 03 May 2026 03:15:26 +0000
ROA not before:           Sun 03 May 2026 03:10:26 +0000
ROA not after:            Sun 02 May 2027 03:15:26 +0000
asID:                     136855
IP address blocks:        103.108.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl
                          rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:00:e5:ef:90:f5:a7:05:f8:fc:9f:6c:f0:23:bb:66:50:67:7d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C
        Validity
            Not Before: May  3 03:10:26 2026 GMT
            Not After : May  2 03:15:26 2027 GMT
        Subject: CN=605F1657B5F8CA44B5E455F65FC69025B9223B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:81:7e:6c:bf:e1:1d:8d:98:c7:52:b4:f7:
                    02:bf:e6:b9:fb:27:0d:41:4f:d2:19:f1:39:d5:1e:
                    46:6a:48:55:f4:7f:51:9c:d1:22:ba:4a:b2:1e:70:
                    ef:88:b4:7b:55:36:3d:da:4d:3f:84:a8:56:09:04:
                    e2:c8:7d:ed:02:7a:d6:ef:28:64:54:19:04:9a:ef:
                    08:f5:ce:02:e8:ad:61:b4:f4:45:0e:e7:47:f7:74:
                    75:56:e9:6a:ef:be:e9:20:6a:71:8c:65:74:e8:bd:
                    75:99:f5:7d:6f:6f:22:9b:2e:96:c7:2e:4e:14:fc:
                    97:2b:aa:af:76:97:0b:f8:7f:36:b3:11:4e:19:89:
                    8f:3a:3b:a0:f5:bd:e9:8c:bd:d9:09:e2:61:3a:0d:
                    80:ce:c3:fb:85:c5:75:0d:32:f7:d6:2d:b3:df:5b:
                    92:70:7a:c7:26:42:9e:c5:13:b1:f6:34:a5:06:35:
                    0a:75:37:5a:89:5a:b2:64:9e:7d:ee:b8:38:82:96:
                    82:24:42:1b:eb:5f:72:1a:66:17:ec:1e:da:ef:da:
                    3b:93:07:b4:ed:4f:8f:2d:4d:6c:5d:16:90:4f:be:
                    36:6e:43:61:4f:22:22:16:f9:90:58:de:3c:28:ab:
                    a8:e4:78:44:2b:a1:9e:61:5e:dd:0d:41:03:94:ca:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5F:16:57:B5:F8:CA:44:B5:E4:55:F6:5F:C6:90:25:B9:22:3B:9B
            X509v3 Authority Key Identifier:
                keyid:5C:6E:2E:BE:6C:D0:4B:80:5F:20:4A:7D:6B:B2:60:F8:35:AF:0B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C6E2EBE6CD04B805F204A7D6BB260F835AF0B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:9f:8b:97:17:c0:c2:39:45:1b:33:ab:ae:7a:20:92:0e:1d:
         88:0a:67:c0:ff:7e:89:d2:0b:d2:8c:1a:16:a2:0a:0e:c9:b5:
         67:ed:47:99:d5:5b:3b:9c:a2:3e:52:38:18:58:12:cd:6d:85:
         ad:0d:a0:48:a1:db:38:21:09:5d:df:b6:b8:4f:ee:75:64:7d:
         c0:01:1c:d9:23:b2:84:a6:bb:92:01:fd:28:8a:b7:34:e4:db:
         cc:1f:1c:13:a7:3d:78:de:e2:c4:e3:7c:8c:ef:5c:5b:47:62:
         77:5c:2c:d0:dc:4e:94:dc:7f:1d:f8:af:f6:bd:58:01:f2:49:
         fb:ca:54:0f:e4:af:9f:0b:6c:da:da:d6:c6:91:70:17:9e:18:
         79:89:23:7c:94:66:0c:a9:78:84:4c:2d:5d:ab:4b:88:38:87:
         8b:bb:70:a4:f4:f7:43:34:35:65:58:4e:3e:ac:b7:5f:06:9f:
         e8:d6:74:e6:01:a1:ce:a5:8f:11:4c:65:8c:e4:a7:0c:42:66:
         08:ce:fd:93:1b:9f:16:ae:d6:57:05:ef:ea:2d:c4:ff:4e:2b:
         ba:bd:ab:f1:21:e7:8c:1b:fa:1c:f4:94:fc:9f:7c:e8:eb:d6:
         52:ef:e8:78:17:8a:74:7b:c6:40:f7:07:1f:47:bf:b8:5c:76:
         36:8d:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:51 2026 by rpki-client