Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa
File:                     3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (raw, json)
Hash identifier:          BF0A/2Eh0yp8cyXoZ2hAxmpLhKE2MIjrP2QeGtvsEus=
Subject key identifier:   55:57:85:70:FE:4E:2D:2B:27:1C:15:C3:77:5A:62:5A:58:31:91:F9
Certificate issuer:       /CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
Certificate serial:       1E26F869AEF9877E60B4D46B32CA5A2F85468A82
Authority key identifier: 17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa
Signing time:             Sun 03 May 2026 02:24:43 +0000
ROA not before:           Sun 03 May 2026 02:19:43 +0000
ROA not after:            Sun 02 May 2027 02:24:43 +0000
asID:                     149912
IP address blocks:        103.189.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl
                          rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:26:f8:69:ae:f9:87:7e:60:b4:d4:6b:32:ca:5a:2f:85:46:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1758F264EA0874C8ACD538FCB61CE7DA903814EE
        Validity
            Not Before: May  3 02:19:43 2026 GMT
            Not After : May  2 02:24:43 2027 GMT
        Subject: CN=55578570FE4E2D2B271C15C3775A625A583191F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:93:80:41:d8:ed:ce:ea:32:79:08:c8:d7:
                    42:5c:f9:1e:a9:11:0d:45:ef:9c:2f:e4:88:f9:54:
                    08:db:75:26:e4:59:4f:bf:1b:9a:49:de:67:5d:ac:
                    6a:1b:0f:e5:66:9a:76:c2:77:1b:0f:02:79:e2:43:
                    b2:fd:32:b3:1a:2c:f8:f6:8f:ed:53:7a:55:69:f7:
                    48:ee:53:3d:15:5c:58:6a:cb:ba:1b:f1:05:fa:b9:
                    63:d7:9c:49:1a:db:d4:4e:1d:25:49:f9:f8:d9:d1:
                    b8:14:7c:0e:27:dd:b6:a6:f6:47:a1:5b:96:c4:98:
                    b3:20:c9:d3:94:17:54:29:9a:81:fe:59:cc:68:15:
                    a8:48:aa:41:c2:4d:96:2c:cb:b8:2a:84:f7:2a:d4:
                    27:0e:66:29:c6:96:4c:a0:b8:a4:7a:bc:8c:fd:ef:
                    54:58:e5:62:99:a2:06:c5:23:ed:ce:c2:32:3a:8f:
                    25:32:d3:00:b3:c6:29:20:b2:3a:5d:1c:59:11:ad:
                    74:ee:bd:58:96:9c:4d:02:0c:80:90:70:55:22:03:
                    22:8b:ae:db:41:97:c2:12:98:da:92:f7:21:b9:11:
                    2d:4e:39:13:7a:79:59:d2:c5:5a:45:0c:0f:09:96:
                    7c:0c:c6:00:a4:ef:a0:63:a9:bf:e8:7f:a9:0d:96:
                    29:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:57:85:70:FE:4E:2D:2B:27:1C:15:C3:77:5A:62:5A:58:31:91:F9
            X509v3 Authority Key Identifier:
                keyid:17:58:F2:64:EA:08:74:C8:AC:D5:38:FC:B6:1C:E7:DA:90:38:14:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/1758F264EA0874C8ACD538FCB61CE7DA903814EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1758F264EA0874C8ACD538FCB61CE7DA903814EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ed:ce:b7:c5:51:97:ff:a5:57:53:58:ca:36:36:10:39:57:
         29:95:d7:69:e8:aa:ae:43:a9:3f:7b:07:f0:8d:94:27:4e:53:
         7b:77:08:68:3c:bb:65:d1:1d:84:b8:31:47:c8:a7:19:3d:e2:
         01:36:49:95:bc:ae:8c:9e:2f:10:22:68:d7:98:ed:d9:38:70:
         63:da:ed:5c:a6:2a:62:08:1d:f1:8b:5d:b9:32:3f:58:3a:c2:
         c7:dc:75:1b:8a:f5:24:a8:a5:3e:d1:6c:a8:17:ce:0c:79:5c:
         73:8b:81:77:30:8c:40:5f:fb:7f:39:bb:69:93:fa:8a:b4:27:
         84:06:07:89:0c:1e:d2:4d:7d:c1:56:c8:3c:0a:a1:83:65:95:
         95:31:71:7c:38:05:15:57:ed:3c:a0:62:3d:70:db:16:b6:4b:
         ad:e6:92:07:21:d2:59:f9:7b:0d:70:db:43:51:d2:5e:52:fb:
         1d:a7:57:08:97:78:97:e2:9a:1f:d7:67:55:b4:75:e7:49:80:
         66:e9:ac:6d:2e:49:db:51:17:ef:c8:cf:38:17:9c:73:bf:08:
         25:90:54:db:97:0e:63:5d:7a:3d:a6:61:cf:31:f3:eb:b0:a4:
         dc:2e:f6:57:6d:16:e7:91:c5:9b:e4:f0:63:58:2f:47:b1:d6:
         5b:ad:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:25 2026 by rpki-client