Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa
File:                     3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          fyKEzPeEJ4+E+32EaynXxqr/Ouql5hSrF2WTR5BFrF8=
Subject key identifier:   B0:4D:E1:FC:FC:17:2E:CC:D3:37:CE:3E:EB:54:54:9D:23:38:09:E1
Certificate issuer:       /CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
Certificate serial:       47BB751F60956DAE5A5C3E84CAD2A021AD12984C
Authority key identifier: 4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa
Signing time:             Sun 03 May 2026 03:17:42 +0000
ROA not before:           Sun 03 May 2026 03:12:42 +0000
ROA not after:            Sun 02 May 2027 03:17:42 +0000
asID:                     141107
IP address blocks:        103.210.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl
                          rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bb:75:1f:60:95:6d:ae:5a:5c:3e:84:ca:d2:a0:21:ad:12:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0
        Validity
            Not Before: May  3 03:12:42 2026 GMT
            Not After : May  2 03:17:42 2027 GMT
        Subject: CN=B04DE1FCFC172ECCD337CE3EEB54549D233809E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c6:ea:48:dc:73:d1:87:ce:57:19:f4:19:bb:
                    b8:c6:8d:45:f9:99:3f:27:9b:3b:82:8b:b5:a9:32:
                    81:23:2b:39:17:67:52:38:5a:8a:3d:5f:7c:7e:6b:
                    83:95:2f:0d:30:d1:bb:16:f9:36:43:e7:35:68:ac:
                    63:fb:13:42:9c:ce:76:b7:fe:05:c0:d8:db:bd:36:
                    7a:70:66:0f:b7:e0:46:d4:fe:7f:87:dd:d4:d7:be:
                    44:48:df:8e:3a:fc:ff:e7:3a:70:00:76:05:fd:92:
                    2c:6d:5d:2f:3a:45:71:99:ba:5c:b7:be:97:bb:4a:
                    67:f1:6e:05:32:8d:5f:fd:22:0a:77:d7:c2:be:63:
                    68:17:36:a1:e7:02:c9:a4:1d:12:02:03:f8:a6:e0:
                    34:56:18:6a:eb:79:a1:da:04:73:2c:4f:61:6d:12:
                    66:0d:8a:03:04:b4:e3:15:b0:a2:da:67:18:8a:18:
                    ce:e9:00:70:c9:f8:c4:c3:82:1b:00:64:95:31:9e:
                    70:da:09:80:c8:53:be:ef:4a:be:ad:62:f9:0d:9a:
                    66:4b:46:0f:ae:54:7f:45:d1:1a:41:a1:5c:dc:ec:
                    81:cf:18:88:3d:91:99:a9:1b:13:07:ba:15:92:92:
                    05:c0:22:15:7e:27:a2:ec:d4:58:64:0b:96:31:7a:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:E1:FC:FC:17:2E:CC:D3:37:CE:3E:EB:54:54:9D:23:38:09:E1
            X509v3 Authority Key Identifier:
                keyid:4B:E6:C1:BB:F0:E9:F5:30:97:19:55:68:AD:EA:22:26:4F:B4:E1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4BE6C1BBF0E9F53097195568ADEA22264FB4E1B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/3130332e3231302e36382e302f32332d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:92:a4:ce:21:1e:fc:32:ab:c3:67:b8:c5:c3:b4:2b:10:
         e1:24:d9:af:5e:41:54:a7:2b:95:98:38:1a:36:f1:6d:54:26:
         df:1b:b8:a8:be:76:91:53:73:4d:db:a8:c7:0b:7d:ce:89:33:
         53:89:cf:fa:2a:e5:75:25:eb:21:e4:a1:a0:0a:dc:4c:49:83:
         6f:29:7b:f0:a5:3e:c7:a1:58:63:dc:fe:bf:3c:de:35:c3:8e:
         95:f1:e6:c8:c9:52:4e:dc:9a:9f:50:c4:09:bd:b1:4f:b1:18:
         48:42:3a:ee:15:38:e5:89:31:26:89:05:d5:f5:bd:54:ae:34:
         3b:8c:7a:36:d9:70:2e:bd:9e:66:82:7e:66:2e:9e:59:fb:d1:
         ff:9f:4d:3e:ff:4e:8b:63:e8:c0:78:60:2c:e6:42:22:bd:94:
         0f:dc:37:a9:e6:dc:bd:a5:e1:c6:ba:58:5f:95:38:fd:29:a9:
         22:20:36:23:97:51:ef:12:94:ed:6b:65:7c:37:dc:ba:37:3e:
         54:2a:0a:cc:72:89:72:28:b2:14:cb:82:72:a5:8c:c9:dc:bc:
         10:76:b5:97:f4:3f:c5:6d:cf:6e:37:5e:95:68:8e:93:c1:35:
         3c:f0:d8:b5:cb:c6:4a:40:bf:c8:3e:86:6d:fc:b0:01:ec:47:
         2e:1c:3e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:44 2026 by rpki-client