Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa
File:                     3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa (raw, json)
Hash identifier:          Zyhhedn/Iz6aSf+Yr3+Wo7YGWadCiJ6E/0cYSxuM6K0=
Subject key identifier:   D0:DD:1F:9D:B8:1C:FA:F4:15:13:6E:57:00:33:9B:05:C7:20:43:45
Certificate issuer:       /CN=69B77CAB9072D68BBE83893A641426388C0EE20B
Certificate serial:       06E5867F305AF372D348CB593B84563EA98F1843
Authority key identifier: 69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa
Signing time:             Sun 03 May 2026 03:19:34 +0000
ROA not before:           Sun 03 May 2026 03:14:34 +0000
ROA not after:            Sun 02 May 2027 03:19:34 +0000
asID:                     141887
IP address blocks:        103.105.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.crl
                          rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:86:7f:30:5a:f3:72:d3:48:cb:59:3b:84:56:3e:a9:8f:18:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69B77CAB9072D68BBE83893A641426388C0EE20B
        Validity
            Not Before: May  3 03:14:34 2026 GMT
            Not After : May  2 03:19:34 2027 GMT
        Subject: CN=D0DD1F9DB81CFAF415136E5700339B05C7204345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:d1:0c:b4:63:72:34:ed:21:a8:6d:3d:57:
                    fe:3a:84:3c:1a:67:8c:7e:75:d3:41:45:5c:7a:e6:
                    51:79:64:9d:2a:13:dd:59:77:68:4f:8b:97:b3:4a:
                    bb:2c:c3:1c:b2:39:90:dd:02:fe:8e:df:48:f0:4e:
                    7c:26:21:94:00:14:78:af:95:1f:ab:e8:ff:70:2c:
                    ce:bd:6e:f2:5f:6b:b1:e8:13:76:2a:01:3c:41:48:
                    e1:1e:70:95:f3:df:e0:33:e4:41:1e:bf:22:7b:af:
                    3a:ca:31:9e:ce:5d:6b:34:d4:e6:e0:6f:71:e7:ef:
                    3b:9c:c2:40:66:bc:b0:54:55:7b:21:49:40:a6:09:
                    f8:de:ed:69:a0:a6:c1:12:ed:f6:23:22:19:d5:90:
                    c7:95:43:33:dd:51:87:35:94:31:40:69:f2:e6:7c:
                    46:cb:99:36:74:f2:ff:9d:b6:5b:0c:96:1a:5f:9b:
                    4a:a6:61:d0:4a:6a:63:bf:e3:bd:6e:60:2b:84:06:
                    6c:01:7b:72:33:7d:60:07:94:48:22:3d:7b:99:93:
                    c8:a8:ee:3a:30:40:af:e6:82:68:3b:a8:f7:a6:9c:
                    7f:48:a4:aa:57:cd:9e:f4:6b:53:43:08:3c:ed:3e:
                    cc:65:69:ed:6a:a9:fd:d0:e1:7b:f7:c4:23:5d:ab:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DD:1F:9D:B8:1C:FA:F4:15:13:6E:57:00:33:9B:05:C7:20:43:45
            X509v3 Authority Key Identifier:
                keyid:69:B7:7C:AB:90:72:D6:8B:BE:83:89:3A:64:14:26:38:8C:0E:E2:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/69B77CAB9072D68BBE83893A641426388C0EE20B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69B77CAB9072D68BBE83893A641426388C0EE20B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/3130332e3130352e3131342e302f32342d3234203d3e20313431383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:88:20:da:33:0f:1e:13:aa:bb:62:a3:71:2f:8f:e5:8d:76:
         89:71:9b:24:62:27:e8:d4:f4:a8:0e:ba:78:d0:60:6b:d2:28:
         a8:f8:86:b8:29:78:ef:da:53:1b:6e:a9:be:db:6b:f4:1c:28:
         34:59:75:09:2d:88:b4:b8:0f:06:8d:5a:5b:ec:b9:8a:47:5c:
         44:71:e7:b2:5d:e2:fd:c0:aa:83:46:60:e7:6b:e4:1b:dd:2b:
         6d:74:d4:e0:3a:2f:73:ca:27:ab:ba:d0:d4:3f:41:04:f8:9c:
         30:06:7c:19:5d:97:f7:de:88:35:f8:c3:01:e9:66:a7:8c:71:
         e3:19:a0:38:e7:3d:f9:a1:96:0e:1b:79:36:d1:f0:79:69:ec:
         51:37:c3:86:ba:6b:d2:47:29:c6:ea:06:0e:7f:80:cb:06:6f:
         e1:a4:81:d0:d0:1d:d3:a8:7e:75:b9:9a:95:e4:11:8e:aa:54:
         eb:5a:d0:b0:ac:e4:a9:a6:1f:1e:27:25:57:31:f0:72:05:17:
         48:61:79:a3:85:8d:7f:57:c5:c1:cb:72:ff:ca:6e:45:6d:5c:
         31:bd:54:0a:a0:e7:17:f8:18:f2:53:dc:02:7f:e3:2e:4e:5d:
         82:d8:e8:d2:86:71:06:14:e6:c2:84:57:a6:62:f8:77:a3:2a:
         3b:a3:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:18:59 2026 by rpki-client