Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
File:                     3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (raw, json)
Hash identifier:          0BJPNvIKBQFSgToHUrV6asLY9+z375bbGV3qDBCnsE0=
Subject key identifier:   49:7F:31:E7:14:36:98:B2:7B:DE:EC:00:FE:A6:34:3E:66:6E:39:FB
Certificate issuer:       /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial:       0E28C2CE3C0CB4A9CFA9616BA22AC3B81B9D49BA
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
Signing time:             Sun 03 May 2026 02:43:39 +0000
ROA not before:           Sun 03 May 2026 02:38:39 +0000
ROA not after:            Sun 02 May 2027 02:43:39 +0000
asID:                     149898
IP address blocks:        103.190.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
                          rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:28:c2:ce:3c:0c:b4:a9:cf:a9:61:6b:a2:2a:c3:b8:1b:9d:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
        Validity
            Not Before: May  3 02:38:39 2026 GMT
            Not After : May  2 02:43:39 2027 GMT
        Subject: CN=497F31E7143698B27BDEEC00FEA6343E666E39FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:30:00:82:b6:14:69:aa:3b:bd:a9:1d:63:6d:
                    e2:61:bc:9a:9b:25:74:d7:ee:72:a0:5d:de:ea:d7:
                    97:cf:2a:46:e8:74:f6:d8:21:aa:21:4a:45:6d:44:
                    d5:9d:5e:5a:fd:8c:69:fc:86:f7:ae:12:33:9a:5c:
                    83:f9:6b:72:12:1d:cd:8b:bb:ae:b6:fa:59:53:8d:
                    33:1f:ce:cc:07:41:e4:39:90:be:81:6a:63:99:b5:
                    dd:fa:20:95:c3:cd:4e:88:99:37:54:a1:12:b8:91:
                    6c:43:b4:71:2a:6b:5c:d7:ec:a8:84:7b:96:97:2f:
                    f7:59:3a:2d:cf:3b:64:56:2b:76:66:d3:5a:97:82:
                    d7:0b:be:1a:7c:dd:7a:7a:fa:21:81:89:88:db:b9:
                    63:14:99:6a:1a:28:68:6e:94:ff:9e:d7:a6:a3:9d:
                    57:94:99:b7:92:e9:ef:37:73:6c:1a:bd:eb:bb:23:
                    37:7c:63:0c:11:55:c7:d6:18:ad:45:97:4c:5c:ca:
                    f6:0d:0b:c5:55:d7:7c:9f:05:7a:e9:69:ed:2e:75:
                    f5:a0:7f:f7:e6:ad:ac:c5:97:c6:d0:38:ee:03:6e:
                    52:3e:95:3e:46:0e:ae:99:e7:a4:21:71:72:4d:89:
                    ea:67:a4:ca:64:fa:32:b2:e1:68:eb:47:85:15:e6:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:31:E7:14:36:98:B2:7B:DE:EC:00:FE:A6:34:3E:66:6E:39:FB
            X509v3 Authority Key Identifier:
                keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:44:fb:68:7e:b1:0d:e5:35:3a:c7:77:8b:3d:82:5e:ec:aa:
         df:69:47:07:71:74:c4:b3:cc:cc:17:7e:90:7c:54:78:82:8f:
         f2:2d:83:a4:b8:6a:16:51:df:aa:6f:84:e0:eb:49:ef:72:c6:
         d8:7c:20:d9:aa:12:96:68:36:5c:29:92:7c:5c:7e:65:12:88:
         5a:09:80:ba:73:65:1f:3f:b4:69:47:6a:ac:8e:a9:f0:c1:56:
         0c:4e:a2:64:50:1e:1c:90:8b:20:d9:3d:64:b7:d7:a8:6b:94:
         fb:a0:77:8d:a7:8d:d6:8e:e5:99:54:90:1d:b8:ae:02:a5:b9:
         89:8c:c1:2d:f9:fe:21:62:23:58:64:4b:d7:ae:e0:c7:80:c5:
         f9:47:a5:aa:d7:c0:29:04:4b:ec:17:de:40:9a:b1:54:12:5e:
         45:38:2c:9f:55:43:96:d3:00:c9:3b:80:88:ae:bd:8b:2c:d7:
         aa:b9:eb:31:ed:e9:58:4e:c6:22:44:d7:23:c3:7d:b6:50:e2:
         56:b5:a0:9b:4e:bc:36:dc:d1:a7:ff:d9:40:4b:3a:2e:95:a5:
         ab:b0:e5:71:5a:f0:b1:29:81:e6:5e:06:04:7e:86:16:30:1f:
         19:b2:56:02:12:11:21:e9:e7:1b:42:6a:a1:05:45:bf:78:cc:
         ff:ac:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:04 2026 by rpki-client