Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa
File:                     3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa (raw, json)
Hash identifier:          T5oGPnWr17+Z/qxR/4P+WVHStjulaV81T2wJtDh4Fto=
Subject key identifier:   A0:E6:49:80:DA:D5:24:CE:9C:00:76:42:02:A1:D6:51:C4:BC:BA:DF
Certificate issuer:       /CN=6918A05044E6DDA8F7ED9081D4CAF15429459236
Certificate serial:       31FA3F87B93E31C39E8DE1AC83CA813BB9F2210D
Authority key identifier: 69:18:A0:50:44:E6:DD:A8:F7:ED:90:81:D4:CA:F1:54:29:45:92:36
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa
Signing time:             Sun 03 May 2026 02:14:32 +0000
ROA not before:           Sun 03 May 2026 02:09:32 +0000
ROA not after:            Sun 02 May 2027 02:14:32 +0000
asID:                     149758
IP address blocks:        103.189.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.crl
                          rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fa:3f:87:b9:3e:31:c3:9e:8d:e1:ac:83:ca:81:3b:b9:f2:21:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918A05044E6DDA8F7ED9081D4CAF15429459236
        Validity
            Not Before: May  3 02:09:32 2026 GMT
            Not After : May  2 02:14:32 2027 GMT
        Subject: CN=A0E64980DAD524CE9C00764202A1D651C4BCBADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:bf:f1:88:fe:bb:72:51:9a:c0:4f:f3:52:
                    8f:40:04:b9:7b:c2:68:26:b4:c5:53:16:d3:45:6b:
                    1c:db:1a:49:48:c5:e0:79:53:3e:12:b7:e1:81:b0:
                    df:04:d4:2f:15:20:c0:b4:9c:f1:4e:6e:41:20:fd:
                    b3:a8:3e:df:50:be:4b:6d:aa:d7:50:2c:c0:a3:ae:
                    a8:47:8b:db:ec:3e:a0:f9:45:fb:2b:b5:11:91:bb:
                    ad:5e:7a:da:75:3f:de:05:ec:d9:f3:de:69:ce:00:
                    e0:2e:37:64:72:98:41:d2:2e:61:d3:35:4d:8f:c6:
                    82:04:8d:f9:e6:c7:08:a0:59:0e:c8:71:ac:70:67:
                    e8:3d:d8:1e:10:e4:4f:3a:53:54:18:6d:ea:e6:3c:
                    dd:99:fb:aa:1b:db:1b:de:56:74:d2:09:8d:57:7d:
                    47:66:06:f7:64:10:10:4f:28:72:e2:b9:b6:c9:e6:
                    92:47:b5:96:aa:37:8c:f8:39:31:52:60:b7:b5:ab:
                    71:24:00:f4:ba:56:4a:a3:77:dd:06:84:2a:c3:92:
                    fa:d4:6f:6a:14:02:86:f3:b6:23:a7:f7:94:3d:68:
                    40:ba:32:d1:24:ca:87:f1:88:59:d2:46:25:6e:3b:
                    6d:59:06:12:47:6c:3c:3e:39:6c:98:4e:78:36:33:
                    ce:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E6:49:80:DA:D5:24:CE:9C:00:76:42:02:A1:D6:51:C4:BC:BA:DF
            X509v3 Authority Key Identifier:
                keyid:69:18:A0:50:44:E6:DD:A8:F7:ED:90:81:D4:CA:F1:54:29:45:92:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/6918A05044E6DDA8F7ED9081D4CAF15429459236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6918A05044E6DDA8F7ED9081D4CAF15429459236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/137dfb88-fb50-48d1-b90d-e525102f4f5e/0/3130332e3138392e35382e302f32332d3234203d3e20313439373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:73:75:dc:88:3e:e6:b7:40:ce:06:7c:38:8f:3d:61:1c:48:
         01:9a:76:d4:30:5f:87:2a:fc:06:2c:bc:5e:74:9e:17:27:12:
         52:d5:82:a6:e4:d0:5a:a3:a7:64:9f:be:fd:63:aa:d0:10:14:
         e1:45:5c:1a:4e:92:29:4c:47:00:46:89:7f:53:4a:f6:ef:8f:
         3e:fe:ee:34:d7:9c:17:e1:7d:a0:16:a7:ca:31:6b:ec:cb:0b:
         0f:31:49:54:27:ca:4a:11:1e:32:f1:e2:b0:80:8f:04:b6:27:
         19:8c:07:07:9b:1b:cd:5d:18:3b:f8:76:b4:31:54:6b:52:d7:
         32:79:e7:1b:98:34:84:7e:21:69:97:cf:4c:5c:02:71:f5:6f:
         2c:a0:fb:ae:ec:eb:68:b8:75:00:16:3d:d2:11:3b:d0:8f:b1:
         1d:cb:25:70:8c:8e:3a:4d:b5:4e:e6:e0:e1:21:15:91:14:99:
         41:62:b0:3a:21:2d:53:78:00:27:9f:12:76:d2:65:3e:72:b5:
         fe:ab:dc:a7:84:3e:8d:d4:a7:30:e9:0a:c6:33:f4:eb:49:da:
         8b:c1:01:d2:3f:25:9b:33:aa:40:f9:f9:c2:1e:ca:3e:c0:c3:
         5f:98:88:66:10:fb:1b:43:ef:3c:ad:21:6e:ae:df:88:b4:5e:
         9c:0a:2b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:06 2026 by rpki-client