Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
File:                     3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa (raw, json)
Hash identifier:          nSbG5Aubx/R8t9wZYLZJODyqF5GhZgVw7+j6TizEJ40=
Subject key identifier:   38:17:93:28:8A:7D:21:73:5A:6F:5C:08:70:B5:2A:AF:92:8D:D1:C3
Certificate issuer:       /CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9
Certificate serial:       1E697B67E6FD6A735DE412EC6CBFC8D4523ABF0D
Authority key identifier: 7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa
Signing time:             Sun 03 May 2026 02:19:49 +0000
ROA not before:           Sun 03 May 2026 02:14:49 +0000
ROA not after:            Sun 02 May 2027 02:19:49 +0000
asID:                     149961
IP address blocks:        103.184.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl
                          rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:69:7b:67:e6:fd:6a:73:5d:e4:12:ec:6c:bf:c8:d4:52:3a:bf:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E396DC08063D89F8DA97A09F6739E4E6EA00BF9
        Validity
            Not Before: May  3 02:14:49 2026 GMT
            Not After : May  2 02:19:49 2027 GMT
        Subject: CN=381793288A7D21735A6F5C0870B52AAF928DD1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:61:f7:f2:b8:8f:70:43:ba:aa:33:59:83:
                    c3:90:ac:58:0f:a0:2e:22:e5:bd:ad:c1:77:72:c9:
                    fb:ff:2a:19:61:71:0a:b3:10:e3:98:86:d2:79:b0:
                    e2:a2:49:b5:6f:6d:c4:70:4b:cd:fa:2a:46:ce:d4:
                    ea:e8:cf:ad:1c:d8:08:e4:32:94:7f:a5:14:3d:4d:
                    2c:a0:d0:72:81:ce:b7:9b:8f:e0:39:86:0a:97:45:
                    b0:d5:13:46:92:66:44:85:f9:9e:ff:6c:20:90:6d:
                    a3:c0:15:20:3b:84:40:69:79:9c:9a:1a:be:26:3f:
                    79:0c:e7:40:ea:97:9d:0c:17:3e:ab:2b:ed:e3:17:
                    fb:76:17:43:81:c2:fd:3b:27:0a:53:d7:90:32:9d:
                    09:36:9b:89:1b:5f:9c:e5:66:e3:17:2e:f2:fd:90:
                    c5:25:4c:6b:a0:c1:4b:84:43:44:40:da:11:49:00:
                    fc:63:3b:e9:be:90:d0:17:89:6e:8a:6e:38:1c:e5:
                    af:35:f5:b9:ab:6c:8c:5d:a2:96:c2:eb:b4:75:6f:
                    50:85:f4:df:75:ba:12:0c:b0:a4:9c:11:e2:b4:87:
                    86:2c:9c:85:7f:f8:fb:8b:cb:42:75:b7:89:d2:c7:
                    a2:f6:a4:86:f3:18:d2:49:fb:2d:be:1f:31:99:dc:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:93:28:8A:7D:21:73:5A:6F:5C:08:70:B5:2A:AF:92:8D:D1:C3
            X509v3 Authority Key Identifier:
                keyid:7E:39:6D:C0:80:63:D8:9F:8D:A9:7A:09:F6:73:9E:4E:6E:A0:0B:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7E396DC08063D89F8DA97A09F6739E4E6EA00BF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2271806c-43d0-4646-8c8d-61117c2341a0/0/3130332e3138342e3138332e302f32342d3234203d3e20313439393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:71:67:e6:c6:33:14:9c:15:66:89:8c:98:12:63:15:5e:ef:
         35:a6:6f:35:07:df:ba:e2:9c:55:58:c5:ae:ef:35:2e:00:6f:
         ab:bc:34:51:a7:3a:e1:a9:35:16:b0:8d:1b:6b:68:58:f3:7a:
         d5:e5:e5:a6:9a:0f:81:d0:ae:e1:89:b1:a1:02:5d:70:7c:14:
         02:ae:79:29:57:8f:8e:33:27:23:96:c5:13:32:df:f2:69:68:
         98:af:f8:a1:07:b8:ce:00:3d:df:aa:d4:cf:55:c2:ca:83:1c:
         1a:a4:bc:83:86:47:34:47:98:b3:e8:31:d8:96:98:95:60:3b:
         29:bd:45:2c:09:e6:4a:97:d0:49:0d:66:d3:22:1a:a2:7f:35:
         ba:14:a4:36:b7:59:23:72:60:99:11:54:56:f4:e0:b1:c6:c7:
         f3:41:81:0f:2f:c4:12:c1:d7:2e:c8:de:38:b8:d3:fa:54:49:
         ac:aa:d5:21:21:3c:f0:05:d5:59:34:fe:b0:6f:41:05:4f:b4:
         d6:c6:9a:cb:ea:14:9e:98:15:be:67:56:44:f6:b1:92:7e:1b:
         bc:5e:a7:70:18:49:78:65:4f:3c:23:10:20:e9:b0:3c:61:d5:
         dd:1b:77:a0:52:54:4a:c4:c6:c6:52:41:a9:30:35:7b:cb:55:
         91:4f:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:24 2026 by rpki-client