Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa
File:                     3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (raw, json)
Hash identifier:          xIJUaCMg08Lnbs2bKvj/IFfZIvxq53y31WSTNK47B34=
Subject key identifier:   FC:94:27:EB:C7:10:AB:76:E0:27:A8:6E:DF:9F:36:86:2E:64:9D:17
Certificate issuer:       /CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4
Certificate serial:       382D059C4E3A96B4E3F8DA8B5CF8A6325B5D133A
Authority key identifier: CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa
Signing time:             Sun 03 May 2026 02:11:04 +0000
ROA not before:           Sun 03 May 2026 02:06:04 +0000
ROA not after:            Sun 02 May 2027 02:11:04 +0000
asID:                     149714
IP address blocks:        103.186.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl
                          rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2d:05:9c:4e:3a:96:b4:e3:f8:da:8b:5c:f8:a6:32:5b:5d:13:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFBC1816795868D3AD54A9A760FF305D0B62C5B4
        Validity
            Not Before: May  3 02:06:04 2026 GMT
            Not After : May  2 02:11:04 2027 GMT
        Subject: CN=FC9427EBC710AB76E027A86EDF9F36862E649D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:7c:ec:dc:be:16:ec:ff:72:ae:5d:8f:a9:
                    43:92:b1:04:54:a0:d1:cd:b7:b2:77:ba:0b:c7:93:
                    12:67:0a:c6:94:c3:1e:09:33:be:26:dd:fb:79:38:
                    8d:75:a6:b3:b2:4a:10:c1:b7:9d:89:05:f5:44:f4:
                    78:a3:02:a5:60:f2:49:ed:3b:86:75:41:bc:e3:e5:
                    b2:ab:a9:1d:79:56:7d:07:16:fd:86:3a:8f:fe:4f:
                    2d:2a:ec:73:f6:5b:92:0f:5d:14:44:5f:fa:e5:89:
                    2d:9f:41:f7:d7:ce:cf:1a:10:6b:bb:89:a8:88:ac:
                    3a:09:7e:40:ac:ba:73:71:2f:cd:4b:e3:a3:e9:39:
                    10:90:4e:71:49:75:c1:6d:8a:b6:a3:8d:b5:99:9d:
                    0d:5f:c8:1c:b2:e7:3f:43:17:6d:59:b3:6f:1a:47:
                    10:42:44:80:9a:3a:7c:33:83:1e:36:0f:27:d8:8b:
                    06:88:39:dc:0f:14:9f:41:4d:0a:0a:d9:f4:c0:0e:
                    8a:1e:f1:ab:c1:4c:f7:b8:bc:bb:bd:fd:7d:34:00:
                    da:7a:ee:3e:9f:81:3b:d7:41:6b:cb:52:4f:38:0f:
                    72:1b:f5:de:7d:e0:90:f7:84:12:65:78:8e:c5:38:
                    07:f9:a3:38:ad:ca:ee:dd:e1:2f:2d:35:44:7c:87:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:94:27:EB:C7:10:AB:76:E0:27:A8:6E:DF:9F:36:86:2E:64:9D:17
            X509v3 Authority Key Identifier:
                keyid:CF:BC:18:16:79:58:68:D3:AD:54:A9:A7:60:FF:30:5D:0B:62:C5:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CFBC1816795868D3AD54A9A760FF305D0B62C5B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:25:36:5e:49:17:59:09:91:dd:c6:b3:e5:6e:5a:37:77:
         0b:1a:64:db:14:33:13:ec:06:1a:87:22:42:b3:10:c2:0e:ac:
         76:be:62:46:87:f8:94:dd:6b:6c:93:35:4c:99:bd:b9:d5:a3:
         72:2a:f7:8b:fc:3b:a1:4b:ec:ba:63:d9:1c:74:06:77:f5:30:
         28:24:b4:8c:ee:a9:12:d8:07:f7:73:da:a3:98:f6:b1:c9:47:
         3d:01:b2:22:e5:68:a8:6a:ad:32:94:8e:b1:5d:0f:ef:53:ab:
         b0:f3:94:c3:3e:e5:da:1a:e2:0a:f7:e1:76:80:ea:19:09:b4:
         75:1b:4a:6a:c6:f6:ed:2f:d5:89:ad:cc:ce:ec:3a:ad:a9:33:
         2b:0b:1c:f9:4d:07:13:92:f0:fb:ab:31:32:29:ae:8a:38:7a:
         52:ab:c4:9c:36:68:38:2e:8c:da:6b:5b:b5:8e:46:fa:8f:fd:
         df:91:44:04:ea:60:f2:d0:57:e8:a1:40:83:6e:8c:88:40:f7:
         a2:2c:a2:82:dd:72:61:3c:2e:7a:48:25:b7:b9:2d:1e:b8:41:
         b2:c3:5c:85:44:a8:6d:2a:bc:87:bc:03:f6:be:fb:81:27:cf:
         a0:05:a5:48:ed:98:fd:29:21:d3:b1:81:bf:e6:d7:c8:fc:7e:
         7f:77:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:52:08 2026 by rpki-client