Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa
File:                     3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa (raw, json)
Hash identifier:          6SPqfWofEqX1QD5UAEMH2hqU1phhUwtiErMkzEVth0s=
Subject key identifier:   03:8F:C4:E9:B1:AF:DA:B7:A4:F5:D3:EF:4D:4A:10:A4:65:F1:3D:1D
Certificate issuer:       /CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
Certificate serial:       1F5400E5DCD2FEF86F2C7F15B36C7121AED4BB3F
Authority key identifier: A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa
Signing time:             Sun 03 May 2026 02:12:10 +0000
ROA not before:           Sun 03 May 2026 02:07:10 +0000
ROA not after:            Sun 02 May 2027 02:12:10 +0000
asID:                     149723
IP address blocks:        103.186.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl
                          rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:54:00:e5:dc:d2:fe:f8:6f:2c:7f:15:b3:6c:71:21:ae:d4:bb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA
        Validity
            Not Before: May  3 02:07:10 2026 GMT
            Not After : May  2 02:12:10 2027 GMT
        Subject: CN=038FC4E9B1AFDAB7A4F5D3EF4D4A10A465F13D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:e9:81:fb:00:e0:80:1d:33:c8:2b:1e:f0:
                    a3:ae:14:b3:99:04:35:a7:1f:89:de:1a:8c:c4:27:
                    90:59:a0:19:f0:a6:16:a1:bb:d2:30:46:47:73:72:
                    c9:94:1d:63:42:60:f4:ed:6c:28:72:53:11:21:bd:
                    48:48:01:be:8f:39:28:be:2c:96:9e:27:79:1e:18:
                    61:2e:9d:9e:12:1d:c3:dc:48:81:5b:ee:9a:e5:5a:
                    55:7e:dd:67:8a:61:9c:35:56:4b:d1:80:ef:1d:a1:
                    2a:5b:bf:10:7c:d6:d9:ce:76:8d:29:ba:ee:f1:9a:
                    96:15:95:f8:af:9d:64:5e:e7:b0:c9:17:25:b0:d8:
                    45:32:68:95:ba:45:f3:6e:c3:54:da:6b:1f:f0:59:
                    74:ae:42:f0:16:c2:ce:ae:e1:3d:6f:c1:cd:0b:b9:
                    57:64:4d:92:78:2c:79:4d:60:33:cc:c6:af:35:10:
                    50:74:14:b8:b0:b8:2a:db:1d:76:1e:99:c4:84:7a:
                    7b:2e:f5:b2:84:1b:22:6e:a8:8c:d6:1e:ad:87:77:
                    29:98:1c:36:a5:a3:58:f3:13:a3:d6:5d:b0:9e:91:
                    1d:83:1e:dd:d7:7d:fc:84:02:e8:30:08:4e:6d:41:
                    a2:bb:9e:6a:0b:2d:3f:01:9b:eb:c2:cd:40:c1:6e:
                    12:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:C4:E9:B1:AF:DA:B7:A4:F5:D3:EF:4D:4A:10:A4:65:F1:3D:1D
            X509v3 Authority Key Identifier:
                keyid:A8:B7:FD:04:F9:C2:A7:D6:EF:8E:53:27:92:F9:C8:03:D1:2F:A1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8B7FD04F9C2A7D6EF8E532792F9C803D12FA1AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/07680d0d-e240-4aaf-bc23-282359373289/0/3130332e3138362e3230342e302f32342d3234203d3e20313439373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:a7:ef:08:a9:7c:89:cf:af:6c:8d:bf:50:15:28:5c:f7:
         b2:9c:bf:84:54:d9:4e:ef:df:c4:1c:2d:be:cf:b6:b4:1f:81:
         6f:e0:0d:bf:31:50:92:a3:13:35:c7:07:a9:8a:fe:7c:05:38:
         10:d4:1a:56:3f:09:81:9e:dd:45:0a:dc:0d:10:27:56:bf:e5:
         99:03:83:c2:db:27:e3:fd:a9:87:bc:3d:a3:11:f0:a6:79:8e:
         3c:4f:1d:2d:c8:ed:70:ec:d3:57:90:6e:19:39:ff:09:8c:40:
         eb:74:2f:60:ff:0b:85:56:41:05:6d:ee:b0:b4:c1:d2:99:cf:
         85:52:0c:6b:e2:92:07:e3:95:47:ca:12:ed:19:e0:b7:de:21:
         81:18:18:6a:9e:69:73:53:05:d3:f5:3a:65:0e:01:8b:b6:4e:
         a3:f8:63:0e:df:4a:14:86:20:ce:58:4f:82:c1:db:1a:4f:fa:
         2d:78:5a:b7:0a:c9:7d:62:fb:60:65:66:37:c1:96:f6:9e:1b:
         88:ef:6c:2e:f4:0f:c6:17:c0:02:e8:e4:90:d7:99:da:04:c0:
         0f:bb:3a:86:f9:dc:dc:96:a4:7a:4b:09:39:40:ba:62:1a:09:
         2f:88:65:93:ae:be:58:af:24:2b:e7:f5:c4:37:e6:94:57:cd:
         4d:a7:b9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:37 2026 by rpki-client