Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa
File:                     3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa (raw, json)
Hash identifier:          UuNBQfu/W2xG5QH9528nkcryc9rKbacdNqSPH3ls1PA=
Subject key identifier:   99:C2:B8:0E:BB:D7:78:8F:BC:21:9C:12:DD:9E:80:CA:5F:CF:A9:91
Certificate issuer:       /CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9
Certificate serial:       5C7A0FC6C6DDFF03DC36809A93690B5C4830DF85
Authority key identifier: 3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa
Signing time:             Sun 03 May 2026 02:34:56 +0000
ROA not before:           Sun 03 May 2026 02:29:56 +0000
ROA not after:            Sun 02 May 2027 02:34:56 +0000
asID:                     150986
IP address blocks:        103.193.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl
                          rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7a:0f:c6:c6:dd:ff:03:dc:36:80:9a:93:69:0b:5c:48:30:df:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE5A09F80C22C04D77F30DEDF26B908BE7777F9
        Validity
            Not Before: May  3 02:29:56 2026 GMT
            Not After : May  2 02:34:56 2027 GMT
        Subject: CN=99C2B80EBBD7788FBC219C12DD9E80CA5FCFA991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:16:4a:87:8c:10:a9:d7:28:bc:23:71:58:
                    40:20:aa:c7:45:9b:f4:df:06:26:cb:ca:36:31:2f:
                    cc:83:29:40:08:fb:22:74:2b:cb:48:08:0d:3c:7d:
                    07:d1:e7:50:7b:fc:bf:9c:ec:d8:b0:20:d1:b2:3c:
                    fa:c9:1a:e5:f4:a8:9f:3e:b4:a6:9f:7d:b0:ef:43:
                    0a:20:06:2c:1a:e6:d9:f6:7b:f0:ed:24:6e:8d:c1:
                    40:2f:55:57:6c:6c:93:ba:5d:af:b0:68:81:e1:f5:
                    ca:95:c4:5a:81:d7:a9:c2:e2:77:16:29:91:73:0c:
                    3b:c1:43:0b:7f:ec:d1:54:07:ee:df:c3:04:62:23:
                    b2:f4:a7:26:76:01:b9:3f:7c:e9:12:0c:73:64:cf:
                    1c:b8:f3:29:af:85:70:8a:66:c9:bf:5c:7a:3e:80:
                    c5:ea:fc:69:51:83:92:42:16:6a:16:77:32:7c:ec:
                    6a:d2:45:4e:ea:6c:6c:2d:32:df:ab:19:80:c9:bc:
                    f9:62:a6:97:84:42:7e:8a:0a:4b:a2:59:b6:47:c3:
                    79:98:7c:72:68:e0:c3:79:42:8b:7f:f0:b3:48:3e:
                    7d:0d:58:d3:27:f3:3b:db:49:8b:c4:fb:7c:b7:1d:
                    79:49:f9:d1:3d:79:ca:91:82:30:39:dd:67:bf:f9:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:B8:0E:BB:D7:78:8F:BC:21:9C:12:DD:9E:80:CA:5F:CF:A9:91
            X509v3 Authority Key Identifier:
                keyid:3F:E5:A0:9F:80:C2:2C:04:D7:7F:30:DE:DF:26:B9:08:BE:77:77:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3FE5A09F80C22C04D77F30DEDF26B908BE7777F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59157ced-e82c-4334-903a-cccbbe9cfe89/0/3130332e3139332e3134362e302f32342d3234203d3e20313530393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:5e:5c:8d:b6:c6:7f:41:df:3e:33:a4:a0:7a:fb:8c:eb:
         72:57:3d:3a:8a:fa:56:6d:45:12:35:12:2b:a6:92:fd:39:f9:
         f0:48:37:34:e7:89:fb:67:4e:2f:97:02:95:da:d0:30:b5:af:
         b3:73:63:90:67:06:cd:b8:c0:8a:b5:62:62:ae:1c:58:41:5a:
         bb:3a:20:6b:70:cc:6c:5a:d7:46:66:b4:45:f9:ba:af:57:6d:
         ad:7e:3d:21:f5:64:55:05:03:ca:c8:2a:09:e6:e3:25:86:ca:
         47:58:1f:0b:0e:9c:4c:ee:a8:9f:ce:31:fb:9a:5d:ab:d3:68:
         82:75:0d:bd:51:42:b8:e6:50:40:91:dc:20:5f:3d:8a:7a:09:
         95:97:7c:02:1f:8f:ff:4d:7b:29:72:06:7a:80:37:5e:c1:d3:
         ea:8a:01:dd:69:52:ea:71:c4:3e:c1:f0:8e:b4:ae:64:78:31:
         91:cc:83:34:1d:0d:6e:7f:c5:8f:97:dd:ee:92:b7:b4:be:dc:
         ce:3d:df:1a:f6:bc:b7:5c:a3:c4:3c:2a:d6:a3:e4:3a:b6:c6:
         b3:7a:da:9d:2c:1b:85:fd:66:fb:92:22:0d:e6:74:a9:2b:7e:
         24:82:a5:54:cf:bf:60:30:62:ab:70:4b:ed:23:09:81:43:41:
         f6:b6:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:42 2026 by rpki-client