Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363635.roa
File:                     3130332e3233362e3135302e302f32342d3234203d3e203535363635.roa (raw, json)
Hash identifier:          cXnC5cl/njjZNoWgKqGJNy+yMsmKCKsijjGKEZpg/jE=
Subject key identifier:   C6:39:79:1F:C0:CB:48:1E:DD:AD:60:C4:34:99:7D:8E:9D:0E:5D:BF
Certificate issuer:       /CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
Certificate serial:       6F04D68F4A1D10BEBFDF7278118453458029BE39
Authority key identifier: CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363635.roa
Signing time:             Tue 20 Oct 2026 03:47:59 +0000
ROA not before:           Tue 20 Oct 2026 03:42:59 +0000
ROA not after:            Tue 19 Oct 2027 03:47:59 +0000
asID:                     55665
IP address blocks:        103.236.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl
                          rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 10:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:04:d6:8f:4a:1d:10:be:bf:df:72:78:11:84:53:45:80:29:be:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265
        Validity
            Not Before: Oct 20 03:42:59 2026 GMT
            Not After : Oct 19 03:47:59 2027 GMT
        Subject: CN=C639791FC0CB481EDDAD60C434997D8E9D0E5DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:0d:83:9a:41:f8:a8:f1:6d:03:a8:ed:e7:
                    40:4a:e8:4b:34:47:bc:92:a8:23:a5:5b:df:e7:35:
                    fa:ec:8c:aa:68:e8:30:d6:05:42:89:94:d2:e0:de:
                    76:c6:69:d7:82:c8:3a:83:16:aa:16:43:81:ea:d9:
                    a8:82:1e:47:16:1b:57:3f:25:53:ab:9b:91:c3:c2:
                    d5:97:a3:28:5c:33:03:f8:f6:33:f3:a9:67:e4:d4:
                    e6:60:e8:95:ba:b6:19:e9:19:e7:29:d5:6a:a8:05:
                    7c:83:a6:18:f2:48:8e:05:57:d5:f2:4c:88:40:6d:
                    79:54:4d:b9:10:06:ca:77:5f:01:00:de:9c:90:59:
                    96:8c:02:2b:15:29:01:bf:c9:f3:cf:8a:60:1c:18:
                    b1:da:a1:28:2f:13:8a:e0:4a:d1:62:b9:52:15:ed:
                    6e:c1:29:85:9b:01:9f:51:db:3a:49:7a:ff:d9:39:
                    ac:ac:6f:7d:94:8e:eb:8f:91:19:43:d7:18:ed:9e:
                    15:12:b8:6e:52:9e:5f:84:7a:1e:57:2a:b2:91:82:
                    b5:1e:a4:0c:22:25:2d:a6:ea:f1:7b:e2:37:22:0a:
                    7c:fb:6a:1f:75:fd:88:84:78:05:8b:53:ef:54:d4:
                    73:4b:62:ef:7e:05:7e:78:ea:b7:5d:fa:82:8c:31:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:39:79:1F:C0:CB:48:1E:DD:AD:60:C4:34:99:7D:8E:9D:0E:5D:BF
            X509v3 Authority Key Identifier:
                keyid:CF:D4:6F:59:BF:CE:8E:07:99:7F:F3:88:E7:D3:D8:D6:EF:7E:62:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFD46F59BFCE8E07997FF388E7D3D8D6EF7E6265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6a377989-716f-48a5-908e-1984002f323d/0/3130332e3233362e3135302e302f32342d3234203d3e203535363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:dd:c7:d7:c3:8a:49:22:cd:7f:fe:5a:5e:87:2c:ed:00:f1:
         a0:d7:cd:17:42:b1:0b:a0:f7:6d:55:4b:3c:d3:31:86:6a:0e:
         97:d9:85:02:1b:2b:d3:4e:6c:d1:4f:62:df:e3:f1:35:23:4e:
         09:b3:2c:7c:6f:7e:21:8f:09:3e:87:93:a3:2a:ba:b1:ee:d7:
         ec:23:d1:d4:72:9a:76:3d:c1:1a:2c:2d:5c:23:46:2c:6c:09:
         5c:a0:81:1d:06:37:29:0e:e1:6e:ff:a6:10:9e:66:05:83:fe:
         91:bc:3c:8e:84:1e:be:3d:91:b6:00:f5:df:fe:ee:0e:cc:4b:
         f9:c3:32:ed:a1:97:57:a3:47:8e:b7:24:de:01:9b:c5:d0:30:
         03:61:40:57:a0:3b:9c:5a:ff:b8:76:09:71:4b:b9:e8:aa:28:
         8f:06:0a:84:04:6d:19:20:a8:35:72:22:33:1c:9f:d2:b2:fd:
         27:c0:12:34:46:19:66:97:5a:d2:57:50:c9:b9:ff:3a:fb:d9:
         5d:2d:d2:ee:1c:0c:5f:ca:2d:0e:31:c6:e5:14:3a:af:67:4b:
         50:ae:79:85:a4:97:a3:f4:f2:33:b4:23:ad:7a:1c:20:76:e7:
         f8:fc:ff:a5:e1:69:d2:da:1a:3d:d4:c1:cc:35:a2:14:30:34:
         de:70:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 14:30:34 2026 by rpki-client