Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa
File:                     3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa (raw, json)
Hash identifier:          lw3Ph+05xOCfBGre0101Mumi0SBmIeVe3yfjhxly5RI=
Subject key identifier:   A3:1E:50:6C:6E:9C:F8:CC:70:4C:4F:35:E3:80:06:C5:76:F1:CE:D2
Certificate issuer:       /CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A
Certificate serial:       1D2F81D52EA2EDC9854DCBCE0768CB862E7EE46B
Authority key identifier: 9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa
Signing time:             Sun 03 May 2026 02:15:34 +0000
ROA not before:           Sun 03 May 2026 02:10:34 +0000
ROA not after:            Sun 02 May 2027 02:15:34 +0000
asID:                     150230
IP address blocks:        103.18.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl
                          rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2f:81:d5:2e:a2:ed:c9:85:4d:cb:ce:07:68:cb:86:2e:7e:e4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A
        Validity
            Not Before: May  3 02:10:34 2026 GMT
            Not After : May  2 02:15:34 2027 GMT
        Subject: CN=A31E506C6E9CF8CC704C4F35E38006C576F1CED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:ad:74:47:b5:8b:f8:5b:93:16:38:8a:7d:
                    2d:b2:62:a0:a8:ef:d9:c9:5b:a4:4b:a3:53:23:28:
                    90:cc:24:6d:f7:fc:48:c7:46:2a:f0:5f:bc:5e:62:
                    59:c7:19:bc:50:a6:47:88:79:2e:5e:c8:e0:d9:51:
                    50:d1:a3:cd:8f:82:ff:f8:c1:0c:a4:4e:08:e9:e6:
                    30:3c:41:db:da:4d:2a:75:ed:22:54:f4:32:f5:2b:
                    f6:6b:d1:33:0d:74:59:2b:1f:ff:ed:c2:dd:ed:74:
                    e3:4b:17:45:03:6a:f3:44:24:9d:a7:7a:39:a5:d0:
                    b4:c1:a1:c3:a9:43:d2:97:0e:a4:ee:69:ff:1f:20:
                    0c:1a:5e:f5:02:d8:28:a7:17:fd:ea:2f:5f:11:8b:
                    50:2b:f0:b5:27:40:ec:05:42:ad:15:f4:d5:1a:ca:
                    74:d2:68:52:d0:7e:72:7d:01:3d:41:c7:da:f5:80:
                    3d:fd:96:13:4f:49:69:f5:48:a3:a9:e7:4d:8c:b6:
                    55:d7:c5:f8:d0:04:c7:8e:eb:fd:f6:26:2e:81:60:
                    95:9d:30:dc:79:4f:1a:f3:64:0d:56:ba:87:db:28:
                    86:a4:fe:45:b4:23:92:0a:d8:55:3d:6d:c1:70:fe:
                    eb:9e:61:e8:d2:3e:2f:03:cd:e6:7a:33:dc:f0:03:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1E:50:6C:6E:9C:F8:CC:70:4C:4F:35:E3:80:06:C5:76:F1:CE:D2
            X509v3 Authority Key Identifier:
                keyid:9E:5A:74:B4:E1:E6:2D:25:BA:36:E3:E7:A4:40:2D:90:6E:F7:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9E5A74B4E1E62D25BA36E3E7A4402D906EF70E2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16c0cd5d-d085-4e2f-b230-7b7e66d1393f/0/3130332e31382e3138342e302f32332d3234203d3e20313530323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:12:e3:82:be:37:fa:a3:a6:55:44:cb:8f:94:4b:fe:2e:c3:
         81:a0:a1:65:ca:95:35:8b:c5:d0:d1:7e:94:4e:0d:f4:e9:ee:
         f1:30:86:78:ef:a4:db:ee:71:1b:44:8d:75:8b:89:c0:07:99:
         a3:31:74:f1:9a:77:90:b4:83:52:63:60:50:be:f2:67:28:e5:
         76:ff:75:8b:95:b5:d9:c9:1c:b4:46:02:77:dc:c9:bc:a2:1d:
         21:fc:f4:2a:52:2e:81:ea:a8:c6:7c:a0:0a:17:0a:e4:f4:17:
         0c:1c:06:9c:e1:32:e1:34:d6:f7:a1:31:3c:2b:e4:f5:4e:45:
         8e:db:17:bb:77:33:55:41:db:26:60:5a:7c:c4:87:82:90:82:
         8a:ee:30:a4:33:89:f2:83:21:5d:b5:4b:2d:54:cf:d9:67:06:
         6a:3b:9c:4d:32:6c:ca:c9:4c:fe:d6:b8:3e:d6:38:dd:b2:f1:
         75:5d:18:4e:21:cb:5c:63:76:ea:7f:a6:3b:6b:e0:01:fd:31:
         b8:57:15:b3:28:be:ab:da:95:e0:73:c5:05:e8:6c:0a:9b:80:
         0e:3b:f1:eb:23:a1:db:16:43:f1:f9:bb:31:01:5f:ad:ef:43:
         92:09:c9:7b:0a:6b:db:d4:24:96:10:8e:79:ea:3a:08:48:b9:
         c6:e3:d7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:41 2026 by rpki-client