Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa
File:                     3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (raw, json)
Hash identifier:          8AqsSwbCPBkMa1bd8eWoyuIjrtuzrPJimjGA2fsl3AA=
Subject key identifier:   D1:01:80:17:7E:32:FE:46:94:71:4B:29:54:95:27:13:FB:F5:30:F4
Certificate issuer:       /CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
Certificate serial:       632D64A0DF17842A3963189B0B5AC653DC6C0796
Authority key identifier: E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa
Signing time:             Sun 03 May 2026 03:15:44 +0000
ROA not before:           Sun 03 May 2026 03:10:44 +0000
ROA not after:            Sun 02 May 2027 03:15:44 +0000
asID:                     150935
IP address blocks:        103.109.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl
                          rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2d:64:a0:df:17:84:2a:39:63:18:9b:0b:5a:c6:53:dc:6c:07:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E029C9E3702797CC6083E1D4D891799F0F5AA144
        Validity
            Not Before: May  3 03:10:44 2026 GMT
            Not After : May  2 03:15:44 2027 GMT
        Subject: CN=D10180177E32FE4694714B2954952713FBF530F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:a7:70:47:64:e7:b6:01:66:e5:9f:d0:8b:
                    27:c3:64:13:3b:bd:32:a4:9b:11:81:4a:59:d9:48:
                    d5:ea:c5:e3:11:6b:9f:60:e7:f0:5a:c0:2c:bf:1a:
                    b2:e7:b2:49:e5:f8:2d:0e:1c:a4:7c:bf:f9:ae:89:
                    2f:d2:60:ea:0b:b5:6b:ac:a9:f4:9d:dc:27:a8:aa:
                    c0:59:c4:7a:1f:b1:88:02:32:67:7e:a9:6d:0e:ce:
                    cc:a4:bb:dc:2f:a6:3b:58:b9:fd:c7:e4:6b:06:26:
                    bf:48:73:2e:1e:85:7d:3c:f2:c2:58:6a:0b:42:0c:
                    ea:2e:04:27:f6:15:ff:fc:38:cc:fa:73:26:85:59:
                    53:58:db:df:c4:56:d1:58:3a:9e:52:dc:1f:54:0b:
                    0d:a0:92:59:81:e2:55:16:ce:ed:58:51:26:fc:15:
                    9e:99:5e:fd:ac:55:54:b5:1a:d4:17:87:f7:c8:41:
                    bb:d0:14:f8:8c:e7:28:35:83:b5:2d:25:fe:8c:35:
                    53:c1:bd:09:03:1f:1f:d1:d3:56:02:f8:23:99:ff:
                    33:58:4c:6b:6a:01:13:3b:ed:80:7c:80:32:2a:5b:
                    dc:fc:08:c7:a7:26:34:8c:b9:96:f6:1c:59:86:67:
                    d4:53:27:a6:31:e7:1e:fb:6c:9f:47:b3:61:e5:95:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:80:17:7E:32:FE:46:94:71:4B:29:54:95:27:13:FB:F5:30:F4
            X509v3 Authority Key Identifier:
                keyid:E0:29:C9:E3:70:27:97:CC:60:83:E1:D4:D8:91:79:9F:0F:5A:A1:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/E029C9E3702797CC6083E1D4D891799F0F5AA144.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E029C9E3702797CC6083E1D4D891799F0F5AA144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:8c:d2:2d:02:99:56:67:92:50:53:a7:a7:db:a4:fe:76:
         7c:96:ed:22:e1:0b:4e:7e:97:3e:23:c6:26:7c:55:f0:dc:2e:
         96:80:4f:cd:5c:01:27:87:13:3a:8a:79:81:ec:1c:af:c3:c0:
         3a:45:e9:eb:ba:6f:79:07:53:90:a0:f7:04:59:3a:9d:72:de:
         aa:f9:5e:e4:1a:8e:cd:de:c0:3a:6f:27:1f:a9:f9:46:e1:fe:
         77:3b:a7:b4:db:3a:4f:8c:3f:9d:f6:9c:a8:93:b8:1d:f7:79:
         ed:d7:e3:f7:91:c4:70:47:6b:0a:79:c7:1c:c8:77:8e:e2:d1:
         08:70:4e:bf:c7:8d:e7:08:06:f2:26:a1:c2:0c:ca:2d:54:bf:
         7f:7f:61:c9:c3:3d:26:cb:fd:e6:44:ab:ca:d9:62:09:82:33:
         b5:f0:4a:e1:f6:6d:a5:de:c6:aa:f0:48:10:71:ad:0b:9b:43:
         98:10:4f:09:c7:b8:d1:1d:b6:f8:d7:ca:6c:a3:01:c2:bf:a3:
         08:88:08:ef:43:cc:3a:70:1a:88:bc:3d:da:fd:69:1b:01:99:
         b1:77:1e:44:64:ad:80:16:4e:98:98:20:df:d6:96:d1:02:08:
         3e:7e:1b:cd:2f:07:85:be:39:54:9c:c0:76:a0:7a:39:96:fd:
         ce:80:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:31 2026 by rpki-client