Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa
File:                     3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (raw, json)
Hash identifier:          qt8C98CNugMo7Hs3wPPfuZTKfdaxqA/LCjZgJh4oP7g=
Subject key identifier:   16:AB:50:CE:BE:16:AE:B9:0B:30:A3:F6:8F:B8:37:E2:F5:CC:D6:75
Certificate issuer:       /CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
Certificate serial:       57ACEF5EAA71CB86A91D830FCE98D024E9932C59
Authority key identifier: 0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa
Signing time:             Sun 03 May 2026 02:24:06 +0000
ROA not before:           Sun 03 May 2026 02:19:06 +0000
ROA not after:            Sun 02 May 2027 02:24:06 +0000
asID:                     136125
IP address blocks:        103.186.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl
                          rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:ef:5e:aa:71:cb:86:a9:1d:83:0f:ce:98:d0:24:e9:93:2c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F
        Validity
            Not Before: May  3 02:19:06 2026 GMT
            Not After : May  2 02:24:06 2027 GMT
        Subject: CN=16AB50CEBE16AEB90B30A3F68FB837E2F5CCD675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c8:00:83:3c:ce:b6:ff:70:f0:d0:44:f5:25:
                    7e:b7:62:36:c8:51:2e:ff:5d:f9:bb:18:02:74:c9:
                    bc:97:7d:43:c4:be:82:d4:17:b7:bd:f5:88:2b:41:
                    58:ce:a2:54:83:8a:f4:57:99:4e:db:79:30:35:9d:
                    d8:d2:45:d4:27:46:23:60:b8:1c:c7:28:36:0e:9d:
                    0f:86:06:5a:76:4f:47:05:74:01:95:bc:2a:29:23:
                    af:6f:68:81:ac:59:d7:38:b2:ad:16:18:63:6d:b3:
                    4e:82:ea:95:65:2d:aa:6e:50:da:e2:cf:b3:ad:ab:
                    5e:0e:78:c6:b7:fb:e7:84:9b:4c:52:e7:38:66:ef:
                    2e:b3:8b:b4:c0:f6:cb:a7:91:4a:82:99:ca:62:8e:
                    ca:d4:32:ec:f6:29:ce:4d:d9:91:c0:fa:3c:3d:d0:
                    a2:9f:73:09:ad:8c:56:1f:f8:a7:d9:f4:20:28:06:
                    a3:43:2f:ae:66:99:4f:eb:dd:2d:28:d0:a2:68:47:
                    a1:4c:fc:cd:53:69:d9:35:96:40:f2:42:43:ea:d2:
                    81:4d:a1:05:65:43:cb:88:f6:68:3d:66:77:10:38:
                    52:48:85:0f:ef:f6:1c:26:69:db:d3:14:98:23:55:
                    a8:23:f8:0f:7f:63:a1:23:b0:ea:25:ed:48:cb:01:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:50:CE:BE:16:AE:B9:0B:30:A3:F6:8F:B8:37:E2:F5:CC:D6:75
            X509v3 Authority Key Identifier:
                keyid:0B:18:9B:4D:9D:00:55:3E:F2:F8:75:5E:AD:7F:A4:4A:A8:E9:05:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0B189B4D9D00553EF2F8755EAD7FA44AA8E9059F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:3b:52:f6:3f:eb:12:b2:47:2c:12:32:eb:df:7c:8d:61:ce:
         ca:b7:fe:b4:bf:61:75:5b:d6:49:c5:a5:5f:31:2b:35:85:dc:
         d9:2b:91:c4:b9:53:66:bc:22:e1:c4:52:94:a4:4b:7b:39:4e:
         61:b1:08:f0:9c:29:9f:d7:18:ad:a8:c7:e5:46:8b:cb:8c:f4:
         d6:12:d3:b5:1b:93:dc:de:ca:70:16:59:93:13:bb:18:a0:1a:
         78:74:ea:20:ab:f0:b5:ed:60:d0:e6:c4:6f:a8:f3:e7:28:8c:
         e2:72:ba:25:d1:7a:f3:8d:0f:44:f4:b1:70:06:fc:c9:66:a4:
         3c:ba:93:9d:10:0e:14:9e:72:58:11:0d:5c:0a:2a:00:c6:ca:
         0f:4a:53:23:fd:f8:1b:e2:bf:0c:c1:80:58:3c:fd:a2:89:0e:
         fb:05:1f:af:65:d7:ac:aa:79:24:90:b1:21:11:d6:2e:25:95:
         e8:c2:62:9c:fa:d7:f9:f8:c8:4d:ae:3c:3a:03:38:96:d1:9d:
         01:6f:c1:7d:8a:b7:52:3f:d8:87:b5:40:53:7e:0b:82:70:31:
         88:d3:c1:04:f4:18:86:e3:62:92:1b:50:91:06:e2:72:61:9d:
         87:1d:63:64:d7:4a:4b:09:bf:d7:be:d9:f6:5d:72:18:4e:8d:
         22:7f:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:59 2026 by rpki-client