Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
File:                     3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          5aAX0IVwi9Xgk1AjsNPK5oymgMFcjVvUxV24RP5spu8=
Subject key identifier:   0C:8A:AE:53:FF:8C:88:70:F7:44:37:55:DC:DC:B2:45:8E:1D:16:0C
Certificate issuer:       /CN=993E93A0664A9D902D978F3596929ADCAC0D2885
Certificate serial:       6BAB8788F457F18DFEE333DB36FF7351E3613CF5
Authority key identifier: 99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
Signing time:             Sun 03 May 2026 02:13:58 +0000
ROA not before:           Sun 03 May 2026 02:08:58 +0000
ROA not after:            Sun 02 May 2027 02:13:58 +0000
asID:                     63874
IP address blocks:        103.53.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl
                          rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ab:87:88:f4:57:f1:8d:fe:e3:33:db:36:ff:73:51:e3:61:3c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993E93A0664A9D902D978F3596929ADCAC0D2885
        Validity
            Not Before: May  3 02:08:58 2026 GMT
            Not After : May  2 02:13:58 2027 GMT
        Subject: CN=0C8AAE53FF8C8870F7443755DCDCB2458E1D160C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:3b:dc:97:35:26:76:23:62:1b:36:19:42:
                    d7:1a:a1:95:f2:62:c0:38:79:72:39:38:79:6a:26:
                    d6:21:42:23:8a:36:d8:e2:78:06:79:93:c7:08:8d:
                    b1:fe:85:04:2a:55:ea:1c:2d:41:24:e9:ce:4f:c5:
                    b1:7a:ba:60:f9:ca:22:91:aa:dd:da:a1:2e:f0:96:
                    b1:52:4b:ae:d6:37:e8:1c:93:17:06:a7:6e:59:14:
                    28:0d:40:36:66:cb:e7:7a:06:91:d7:36:02:fd:88:
                    a9:30:8f:05:f3:ca:70:dd:1c:30:25:21:5d:f3:52:
                    db:8b:04:45:31:41:dd:5e:6a:6f:9e:2d:ec:6d:89:
                    3f:6c:1e:13:78:ee:97:7b:f6:a1:6a:3f:6d:e1:c0:
                    4d:24:51:42:7f:70:6d:fe:8b:50:b3:10:0b:7b:2b:
                    f5:22:b5:08:ad:27:58:96:e7:ad:98:2e:40:0a:ce:
                    01:52:f0:53:18:7b:96:25:e1:77:fd:0a:2d:14:45:
                    75:de:1b:80:f5:90:00:f9:6b:a6:88:e0:94:6c:d1:
                    a2:15:80:18:38:20:8e:2b:3e:7e:29:17:47:c8:a4:
                    19:df:8f:84:c2:9c:b7:f1:80:f1:3d:5b:67:82:c7:
                    1c:f8:50:4a:e0:fa:b1:40:04:00:5f:8f:11:4b:9a:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8A:AE:53:FF:8C:88:70:F7:44:37:55:DC:DC:B2:45:8E:1D:16:0C
            X509v3 Authority Key Identifier:
                keyid:99:3E:93:A0:66:4A:9D:90:2D:97:8F:35:96:92:9A:DC:AC:0D:28:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/993E93A0664A9D902D978F3596929ADCAC0D2885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/993E93A0664A9D902D978F3596929ADCAC0D2885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:1d:72:9f:c1:62:48:51:43:ea:e7:0a:37:fe:de:27:91:
         d4:2a:f1:bc:ed:72:a3:e3:7d:91:6d:fd:15:2d:d6:c3:e4:d5:
         10:16:4f:cb:4d:01:5f:f0:f7:c5:5d:73:6f:10:15:e2:b8:d4:
         48:6d:52:d4:75:4c:a2:ac:d0:ee:83:b3:51:28:5b:2a:11:b2:
         03:72:22:d6:4f:27:17:09:63:15:c4:5f:80:c5:a4:27:e5:50:
         2c:0d:1d:84:86:e7:70:f9:55:e9:3e:cf:30:64:63:8b:52:f6:
         62:cd:c0:5b:73:93:1e:9e:ad:fc:a6:c1:ff:d7:97:89:a4:cf:
         7d:c9:a1:19:d8:66:e5:5c:aa:4a:26:5d:b3:49:62:fd:07:df:
         14:b5:57:a2:4f:a5:ca:b6:ca:21:5c:9e:3d:e1:ec:09:af:aa:
         fc:a3:0c:1a:0f:2c:a1:50:06:d3:34:79:b3:18:b6:99:57:58:
         26:63:28:d6:2b:fa:4a:3c:28:d7:86:91:10:4e:e4:8d:fa:83:
         a3:28:c0:5e:04:c7:27:53:c9:54:31:5d:93:7b:00:47:0e:15:
         5c:61:4a:68:9c:a2:bf:c4:28:f9:22:a4:e9:af:82:c1:f4:54:
         1d:fa:71:47:bc:b9:b0:da:f4:3a:48:55:77:ea:5c:c8:90:17:
         a9:55:5d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:22:19 2026 by rpki-client