Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa
File:                     3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (raw, json)
Hash identifier:          YUSL8MaAWMcSEFSDLAAA9feKMtSwIZRFYTLiujhrL28=
Subject key identifier:   1A:46:3F:E9:9B:CE:7B:D6:87:28:D9:E0:19:01:2A:C0:12:0B:B5:15
Certificate issuer:       /CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
Certificate serial:       5CAA66A5B17C3F8C7C3C6B13B3476F3B30F80D7A
Authority key identifier: C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa
Signing time:             Sun 03 May 2026 02:43:37 +0000
ROA not before:           Sun 03 May 2026 02:38:37 +0000
ROA not after:            Sun 02 May 2027 02:43:37 +0000
asID:                     149934
IP address blocks:        103.191.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl
                          rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:aa:66:a5:b1:7c:3f:8c:7c:3c:6b:13:b3:47:6f:3b:30:f8:0d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C706F90008D6293E5E35C7B17DD3B414EEB9A0A0
        Validity
            Not Before: May  3 02:38:37 2026 GMT
            Not After : May  2 02:43:37 2027 GMT
        Subject: CN=1A463FE99BCE7BD68728D9E019012AC0120BB515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:d9:87:1b:a2:40:c1:48:f0:48:31:62:59:
                    aa:de:68:7b:a8:19:26:c0:75:c9:6f:dd:5d:09:ea:
                    f6:42:a2:56:e2:e5:75:e1:d0:65:67:6d:d2:b7:18:
                    f8:5d:cf:bc:66:b8:43:57:33:66:8b:80:75:74:d4:
                    f1:eb:95:40:08:24:2c:49:4d:10:58:84:2f:0e:0d:
                    d0:be:7f:69:75:d6:46:99:70:6a:d7:be:4f:c7:c6:
                    4b:0e:c4:e3:c7:df:b9:8a:21:c4:fa:d5:62:8d:15:
                    37:36:65:92:64:99:32:ee:32:78:81:51:2f:39:7d:
                    68:2b:aa:55:e8:41:a3:34:12:5f:82:20:0d:47:5e:
                    65:b8:2b:d7:a4:5f:87:68:a6:e9:6d:e4:15:04:f9:
                    d8:57:d1:b8:e2:37:e9:09:9a:88:fe:0b:e7:62:2d:
                    b2:eb:9c:8c:2f:27:85:e1:76:c7:1b:01:57:16:e1:
                    ab:91:9c:ef:fc:43:67:3a:37:c3:fc:f7:2b:1e:2c:
                    27:e3:03:32:6c:fc:45:e5:5e:24:23:f4:ab:c1:5b:
                    54:7b:f4:bd:5d:8f:8a:82:69:f3:58:57:a6:a3:3f:
                    d0:ce:f6:71:0a:c1:11:ab:c7:62:41:2e:41:37:b9:
                    16:82:4c:25:99:1c:fc:2a:05:44:a1:ac:77:37:4c:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:46:3F:E9:9B:CE:7B:D6:87:28:D9:E0:19:01:2A:C0:12:0B:B5:15
            X509v3 Authority Key Identifier:
                keyid:C7:06:F9:00:08:D6:29:3E:5E:35:C7:B1:7D:D3:B4:14:EE:B9:A0:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C706F90008D6293E5E35C7B17DD3B414EEB9A0A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:42:f5:db:39:56:e7:1c:23:f8:7c:cc:29:b8:5a:54:27:
         2c:9e:13:ee:ca:5b:f0:84:62:c0:7f:c4:47:54:9a:27:14:8b:
         e1:70:6e:6a:e9:b0:01:ab:58:90:00:43:78:3f:4c:3f:61:06:
         1c:b4:b3:83:55:7b:f2:10:6d:46:a8:0f:26:27:4f:df:da:88:
         4c:19:aa:ab:4f:9c:e5:0a:25:55:ce:58:10:12:4e:be:66:5e:
         7a:29:76:5d:4a:8e:f5:46:aa:37:b7:84:7c:82:28:e5:dd:5a:
         ff:b2:c1:f3:06:eb:fd:21:4d:d8:84:48:87:ae:eb:83:89:fc:
         98:0f:92:75:6b:3f:f2:57:8e:fd:70:11:ed:e6:65:ec:74:7a:
         b6:df:44:02:8b:6c:0e:31:b7:ed:69:64:f4:12:0e:f8:bc:d9:
         02:b6:1b:d7:8c:e4:27:5a:32:bf:1f:96:13:e2:47:25:6e:07:
         46:e2:fd:f1:cd:0e:57:7b:3d:f3:46:d3:41:df:8a:28:0c:5c:
         f7:fa:1a:5f:26:62:32:66:c1:4f:01:5e:16:a7:9a:e0:c2:13:
         73:3a:31:2e:1e:65:f2:c1:4d:38:bc:df:87:c7:ca:a2:06:10:
         73:69:9d:66:f5:c3:e8:5f:a0:dd:de:76:27:44:e3:31:8a:4e:
         82:5b:0a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:22 2026 by rpki-client