Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/3130332e3139382e312e302f32342d3234203d3e20313530393436.roa
File:                     3130332e3139382e312e302f32342d3234203d3e20313530393436.roa (raw, json)
Hash identifier:          quvbYNmn/O14F1WsMTm8aak0xPXGeYxU82kt65bFRhY=
Subject key identifier:   3C:F9:C0:61:BF:C7:0B:BB:6C:36:5A:EE:4D:C9:4A:8A:78:8F:02:7F
Certificate issuer:       /CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
Certificate serial:       15BDAF34C096B2E15C6C247E70C30BBC2B30DF0E
Authority key identifier: 08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/3130332e3139382e312e302f32342d3234203d3e20313530393436.roa
Signing time:             Sun 03 May 2026 02:10:38 +0000
ROA not before:           Sun 03 May 2026 02:05:38 +0000
ROA not after:            Sun 02 May 2027 02:10:38 +0000
asID:                     150946
IP address blocks:        103.198.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl
                          rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 14:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bd:af:34:c0:96:b2:e1:5c:6c:24:7e:70:c3:0b:bc:2b:30:df:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0893307338D8D7BA55CC0C06279150A0C9FAC6CA
        Validity
            Not Before: May  3 02:05:38 2026 GMT
            Not After : May  2 02:10:38 2027 GMT
        Subject: CN=3CF9C061BFC70BBB6C365AEE4DC94A8A788F027F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:74:e4:50:54:84:bd:f0:e5:40:1e:4c:6b:40:
                    79:9f:e4:6c:34:39:41:6a:d3:56:99:60:72:ac:85:
                    f1:dd:2c:98:e2:ad:18:c9:87:61:25:41:64:c6:f9:
                    fc:7f:44:f1:31:d1:c5:d9:e0:e4:c2:ce:fd:66:34:
                    6d:f3:06:8b:26:df:a1:71:f3:ed:f0:dd:33:1a:c3:
                    34:18:79:85:56:d3:87:e4:be:c3:3b:2a:48:09:ec:
                    ba:66:4d:dc:8e:ff:22:cb:70:58:bd:8d:94:d8:91:
                    72:a8:19:98:f6:3f:40:a7:aa:a2:7c:75:f7:2f:62:
                    2a:d5:38:ad:b9:4a:8b:28:8c:db:8b:d6:32:57:13:
                    b9:3c:c4:e7:bd:b5:ae:19:a1:fe:c3:10:35:bd:e1:
                    2f:1d:72:01:da:e4:2d:74:67:a7:37:52:00:88:52:
                    68:d1:58:7e:52:3a:a5:54:89:44:3d:66:d9:98:bb:
                    e5:09:1d:64:b2:78:fe:9a:10:7c:83:cc:7a:af:7a:
                    35:2c:2b:25:43:91:a8:92:f0:69:c6:bc:99:ff:b6:
                    21:12:ed:90:02:2c:26:43:40:0f:74:58:5c:57:cf:
                    ef:6a:77:a9:35:56:1c:f9:5b:f8:da:e5:23:cb:fc:
                    11:31:d5:38:0d:35:44:3d:f6:fb:3c:96:1d:6e:87:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F9:C0:61:BF:C7:0B:BB:6C:36:5A:EE:4D:C9:4A:8A:78:8F:02:7F
            X509v3 Authority Key Identifier:
                keyid:08:93:30:73:38:D8:D7:BA:55:CC:0C:06:27:91:50:A0:C9:FA:C6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0893307338D8D7BA55CC0C06279150A0C9FAC6CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03ba0d38-ca62-4c2b-90e2-8eeeeb831860/0/3130332e3139382e312e302f32342d3234203d3e20313530393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:cb:06:fd:3a:68:ba:2a:84:52:d8:b7:d8:44:87:24:01:c5:
         04:ed:65:37:aa:75:fe:1f:ce:92:bd:70:de:84:42:83:f3:83:
         bd:3d:b0:5d:28:e0:22:e0:58:04:50:89:25:18:c8:39:fe:ac:
         0c:ad:d1:92:cf:98:94:97:9b:3a:dd:07:ea:2f:f7:12:45:7e:
         ed:19:1b:cd:6a:65:31:5c:10:62:72:c3:e3:e0:ba:c7:f2:00:
         e4:9c:19:ef:7d:a6:82:f3:3c:da:7b:92:93:68:d4:f0:65:94:
         02:47:eb:4e:09:ea:66:8f:d2:0c:0c:3c:2b:cc:af:88:2f:64:
         50:d0:94:7e:db:fd:26:33:05:08:97:ad:86:bd:80:cb:a6:11:
         46:7a:4b:da:10:61:92:c9:4d:f3:5e:b7:d1:fe:f8:54:7f:46:
         c7:c5:cb:4b:86:f9:17:1e:78:8e:b8:1d:eb:0b:13:28:63:5f:
         a0:16:6a:9d:18:87:1e:40:e4:d6:37:ba:e8:1a:bb:34:36:1d:
         ab:28:56:e7:1a:29:4a:d9:3c:4d:b6:f4:f7:da:0a:cf:bf:e2:
         4b:b8:10:d0:1a:e9:7d:0b:ff:0a:7f:b6:b6:34:7e:55:36:2b:
         f9:b2:1a:03:60:02:49:85:7b:5b:49:41:63:8f:c4:0b:e9:3d:
         2d:0c:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:37 2026 by rpki-client