Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa
File:                     3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa (raw, json)
Hash identifier:          8leg6LkHdDQ0ff68BZZ3SXygrMOUka+9t8aV7r2QrjE=
Subject key identifier:   16:DF:89:5D:9A:1F:6D:71:9E:B5:11:0F:BF:89:2C:63:81:81:4E:9F
Certificate issuer:       /CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3
Certificate serial:       7B7498854D6925A8FE1165CBA86F6260FC90FDE1
Authority key identifier: 0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa
Signing time:             Sun 03 May 2026 02:15:45 +0000
ROA not before:           Sun 03 May 2026 02:10:45 +0000
ROA not after:            Sun 02 May 2027 02:15:45 +0000
asID:                     150931
IP address blocks:        103.196.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl
                          rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:74:98:85:4d:69:25:a8:fe:11:65:cb:a8:6f:62:60:fc:90:fd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3
        Validity
            Not Before: May  3 02:10:45 2026 GMT
            Not After : May  2 02:15:45 2027 GMT
        Subject: CN=16DF895D9A1F6D719EB5110FBF892C6381814E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:65:8d:94:59:85:18:9e:88:1d:0e:fc:ac:9b:
                    a1:57:e2:42:c0:cc:d7:d0:73:48:2e:51:cc:84:4f:
                    65:af:2f:ab:26:b4:b0:2c:d2:f8:86:73:0f:04:b1:
                    ad:b8:9e:5a:06:20:c9:a3:fe:14:3d:9e:3e:3c:98:
                    c7:bf:13:12:71:f9:70:67:f5:52:a3:62:a4:1f:55:
                    b5:e9:7b:03:7e:40:e5:ce:8f:22:60:40:c0:f8:0a:
                    ae:26:cc:44:90:d2:84:fb:37:3f:b9:73:56:95:92:
                    55:5d:a4:e3:10:40:3d:aa:84:3e:06:cc:76:a3:f1:
                    d1:6a:31:55:36:88:da:eb:2c:ab:e5:95:22:d7:f5:
                    64:d8:52:05:5e:33:21:5e:04:2f:4d:f7:7f:b5:5b:
                    69:6c:eb:13:b1:62:87:5b:c2:ee:60:99:b0:d6:c7:
                    a9:ec:0c:5c:67:93:64:6a:ad:af:1b:7b:aa:26:5e:
                    dd:ce:43:1c:d8:8c:6d:8f:de:cf:57:81:bc:83:df:
                    c3:17:08:17:5b:86:01:0c:d3:c9:1d:12:5d:99:77:
                    0f:16:f3:d4:4d:54:ff:2c:81:44:c6:84:e4:ac:63:
                    4a:1e:0a:e3:40:e4:fd:f2:00:84:92:4e:09:4b:d6:
                    d9:f7:8a:bf:9f:a0:0c:63:ef:32:4a:c2:0b:7c:f8:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:89:5D:9A:1F:6D:71:9E:B5:11:0F:BF:89:2C:63:81:81:4E:9F
            X509v3 Authority Key Identifier:
                keyid:0D:24:E8:A0:B8:5F:76:A2:22:BC:BF:8D:E4:EB:1F:5B:73:D0:81:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0D24E8A0B85F76A222BCBF8DE4EB1F5B73D081C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/174dc5e1-1d55-49d2-93d4-5d98ead779ed/0/3130332e3139362e38352e302f32342d3234203d3e20313530393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e1:23:87:a4:a8:ae:9f:2a:88:c0:fc:ea:10:6e:b2:95:e0:
         8f:a6:2d:29:10:4c:3d:c6:e0:9d:cf:a3:5b:1a:f5:4a:fd:53:
         8a:58:c7:d7:0b:7c:ef:f5:fd:53:28:3c:c4:00:62:28:62:00:
         5f:b4:ee:c5:09:11:4c:c6:da:27:85:17:de:8b:ea:6d:c6:11:
         a1:f0:c2:a6:b8:fa:10:ff:9d:60:9a:65:5d:78:bb:1e:16:68:
         86:50:be:bd:be:3b:1f:2e:d8:ac:f6:3b:a1:0b:9b:8d:92:44:
         cb:82:a4:6a:94:da:1c:d7:5c:5c:96:a3:c9:8f:2d:9a:a9:5c:
         ec:d5:e8:fc:8d:fb:0b:6f:95:5e:a0:29:ed:da:f6:eb:52:ba:
         09:2f:0a:d0:d7:c1:d0:06:b1:61:be:56:4f:ce:b2:1c:9e:fd:
         9f:ca:da:5f:3d:3d:f4:ba:3c:5e:ee:e3:e6:1a:9d:d5:b5:4e:
         0e:29:b1:23:c9:3e:4f:30:29:23:90:0b:2d:ad:d6:14:a9:65:
         ad:9c:11:b6:80:21:b8:8a:4a:9f:39:9d:92:75:ff:da:31:ef:
         13:ca:3e:d0:dd:3a:15:00:9b:f7:1c:e7:6e:9f:40:13:86:c7:
         71:43:94:0d:c6:e9:91:2b:f2:4d:e1:e0:3b:2b:fa:8d:88:e9:
         30:af:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:20 2026 by rpki-client