Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa
File:                     3130332e36312e3131392e302f32342d3234203d3e203536323435.roa (raw, json)
Hash identifier:          Jyqx3xCiMFSg8q0SZhug0rC+4VH9BsVLux500tzyrkM=
Subject key identifier:   E0:34:D0:52:DD:04:FC:2B:F8:78:5A:34:3E:C2:2B:8C:22:58:92:0F
Certificate issuer:       /CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6
Certificate serial:       70DE94F4A2BF407337FEE11F216C8A850405B90F
Authority key identifier: BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa
Signing time:             Tue 13 Oct 2026 15:48:03 +0000
ROA not before:           Tue 13 Oct 2026 15:43:03 +0000
ROA not after:            Tue 12 Oct 2027 15:48:03 +0000
asID:                     56245
IP address blocks:        103.61.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl
                          rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:de:94:f4:a2:bf:40:73:37:fe:e1:1f:21:6c:8a:85:04:05:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3DEE19A820316EB74DEA5A21779744CF1BE4D6
        Validity
            Not Before: Oct 13 15:43:03 2026 GMT
            Not After : Oct 12 15:48:03 2027 GMT
        Subject: CN=E034D052DD04FC2BF8785A343EC22B8C2258920F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:f8:25:ca:a0:d2:1d:88:44:03:ac:f8:ed:
                    e7:5a:19:41:2e:52:2b:36:6b:aa:30:91:5e:ca:db:
                    b4:73:cc:99:0e:f8:10:a3:e7:3f:d4:02:a8:13:2f:
                    47:75:6e:c6:5f:dc:f0:42:91:0d:b4:8e:cd:92:a2:
                    96:a2:66:1a:ea:f9:b2:0a:90:ed:0b:00:c7:09:97:
                    54:db:31:31:be:f2:42:5a:73:ee:98:30:42:09:38:
                    7c:68:29:c8:b3:da:a2:16:90:1b:3f:d6:ca:96:5e:
                    14:a6:91:a7:17:00:48:8c:b8:ad:25:f3:ed:ff:b8:
                    e3:91:8e:42:9a:6b:02:1d:ce:1b:dc:01:8c:a9:a2:
                    f7:0c:b0:65:b7:e9:3f:39:fb:86:5a:53:45:18:dd:
                    41:e0:19:fc:11:fa:f0:0a:c2:69:11:74:43:78:4a:
                    0d:09:39:b7:7d:85:8d:2a:5c:76:c1:a0:cb:3d:6b:
                    db:9e:d9:2a:94:9b:50:33:37:9d:a0:9a:06:53:d8:
                    dc:6a:92:9f:f8:c9:c6:35:b1:bf:de:f0:c3:e2:e3:
                    64:b1:4f:c1:f8:a5:e1:53:8f:42:71:f5:cf:f7:7c:
                    cb:a4:78:8b:af:13:3c:06:b0:70:06:47:df:4f:45:
                    1a:7a:7d:04:c1:b5:a9:33:75:28:a6:c4:9f:f8:26:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:34:D0:52:DD:04:FC:2B:F8:78:5A:34:3E:C2:2B:8C:22:58:92:0F
            X509v3 Authority Key Identifier:
                keyid:BE:3D:EE:19:A8:20:31:6E:B7:4D:EA:5A:21:77:97:44:CF:1B:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3DEE19A820316EB74DEA5A21779744CF1BE4D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ad568551-7470-425a-8427-9c82a2b46196/0/3130332e36312e3131392e302f32342d3234203d3e203536323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:5b:04:e6:16:d6:5c:2b:34:31:d6:a2:fb:c6:47:0a:dd:fd:
         b3:7c:58:e7:a0:83:c6:31:cc:cf:df:cd:37:dc:b1:95:87:0f:
         2e:fa:5b:87:f2:3d:21:a8:10:f5:10:97:14:b6:86:b9:1a:05:
         67:9d:07:98:34:44:d8:32:33:60:56:d2:21:8b:cb:44:29:f3:
         96:66:b2:c4:55:8f:32:9b:1e:55:5a:7b:1e:0f:3a:9e:c7:3b:
         ef:6b:21:d3:bb:e6:15:6b:38:1a:4f:27:b6:45:de:8d:4e:11:
         e4:3b:4c:16:55:98:19:ef:1c:1f:f1:1b:9e:6a:47:f9:fe:1e:
         8e:1f:fd:4c:47:e5:7f:2f:85:e4:04:84:a6:b2:1a:6e:f9:53:
         7a:4f:e7:ff:4c:a8:fc:94:51:43:f3:75:f9:d2:3e:be:63:c4:
         78:58:96:5f:98:ce:f6:0b:62:11:b3:00:f7:31:d3:3f:c4:cd:
         ac:64:ef:58:26:6b:86:5a:88:85:1f:25:69:db:56:2f:5f:41:
         e5:7f:ed:76:4f:74:83:af:19:8a:57:93:79:8d:b0:1b:0f:06:
         47:81:f1:18:22:a9:e4:23:43:eb:0d:3f:11:2f:09:29:49:b0:
         3d:bd:90:37:ba:55:03:98:7e:a6:d5:40:97:c8:c6:03:ef:59:
         34:f3:12:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:08:50 2026 by rpki-client