Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa
File:                     3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (raw, json)
Hash identifier:          02NTkzqK/LTvvPzyGLCIQvFXPCqfEGOd/i/Q/MdPoH8=
Subject key identifier:   FF:7A:10:99:7F:57:18:B9:65:51:19:8D:C5:73:20:08:9F:C6:79:D7
Certificate issuer:       /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial:       5AC7ED612454F64C76BCF94FFF03FF113F80146F
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa
Signing time:             Sun 03 May 2026 02:43:40 +0000
ROA not before:           Sun 03 May 2026 02:38:40 +0000
ROA not after:            Sun 02 May 2027 02:43:40 +0000
asID:                     149898
IP address blocks:        103.190.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
                          rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c7:ed:61:24:54:f6:4c:76:bc:f9:4f:ff:03:ff:11:3f:80:14:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
        Validity
            Not Before: May  3 02:38:40 2026 GMT
            Not After : May  2 02:43:40 2027 GMT
        Subject: CN=FF7A10997F5718B96551198DC57320089FC679D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ad:01:f5:b4:b9:64:1f:51:81:de:bc:2c:52:
                    6b:76:a1:4e:87:9c:0f:ac:c6:39:e8:6d:bf:c4:97:
                    e7:ce:0c:5a:95:bb:a4:2d:c0:5d:d7:06:b6:e7:19:
                    1b:bb:72:26:97:f3:ba:c1:82:35:83:c1:28:85:20:
                    82:71:39:98:b7:25:6f:18:8b:ba:c8:57:62:35:61:
                    8f:98:90:fb:1f:91:92:1b:1b:e9:a2:9a:4f:a4:37:
                    da:08:47:6a:e0:c1:5a:75:e6:aa:a1:9f:dc:50:f4:
                    a5:cf:92:b0:22:a7:dc:16:11:40:8d:f4:e7:f4:f9:
                    47:5d:bd:3c:18:c3:37:7f:15:1c:09:4c:e4:59:5e:
                    ee:fa:29:b5:95:f7:1d:c9:f2:e8:a4:2b:4f:07:8c:
                    b7:17:65:2c:be:bd:d2:7d:c6:d4:f2:be:52:98:eb:
                    5d:0b:a4:7a:86:d9:6f:93:e6:c4:d8:14:0f:2e:dd:
                    14:b6:02:78:55:3e:5a:57:d0:4f:ee:02:95:38:0b:
                    57:21:31:1f:e5:40:bd:16:3b:28:62:9f:9f:d3:4f:
                    2a:98:65:dc:b8:05:c0:aa:fc:96:39:41:f9:76:d7:
                    a0:80:f9:74:7e:51:e5:1e:a9:52:dd:9c:ab:d7:6f:
                    c9:82:75:e1:d3:7b:10:2e:a4:83:f7:f2:8a:12:6e:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:7A:10:99:7F:57:18:B9:65:51:19:8D:C5:73:20:08:9F:C6:79:D7
            X509v3 Authority Key Identifier:
                keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:c6:b2:ed:d3:25:ca:2c:4f:66:17:a6:59:dd:de:b5:16:bb:
         74:5e:2e:04:35:ff:11:51:8c:f0:65:4c:f7:16:15:c5:ba:fa:
         a5:39:5c:a5:34:89:0a:03:a8:cf:91:a6:19:77:58:94:2e:7b:
         53:1a:99:8c:af:18:32:97:ca:41:ba:58:ef:db:ce:91:a0:5d:
         7c:ee:af:b4:86:4f:9b:2b:30:0c:5c:ed:54:d9:86:45:a4:12:
         56:99:a2:f3:99:22:fe:21:ac:e8:08:26:13:78:13:22:a8:9c:
         0c:15:3a:b9:ee:ff:1e:50:f0:31:5d:e5:30:18:9c:bb:69:5d:
         ff:cd:f3:ce:1a:ad:1b:60:71:3d:1b:a9:d0:bd:ba:ae:61:f6:
         7b:31:9e:46:f1:14:54:b4:0b:94:23:3b:a4:73:1e:0a:fc:52:
         81:29:75:cb:cf:85:28:aa:92:53:59:da:5c:67:ab:eb:3d:19:
         0c:44:bf:35:46:91:c2:48:cd:f0:06:f5:21:1f:e5:e5:c7:0d:
         a9:b2:73:f6:f7:fa:db:1b:d7:b8:59:c5:00:ba:07:42:d3:80:
         41:95:51:10:01:b7:65:e6:9e:ec:71:46:a4:16:4c:14:03:83:
         b0:7b:86:09:e7:51:61:81:e7:20:7f:9e:c3:fc:63:99:84:44:
         c4:9b:8d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:58:21 2026 by rpki-client