Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa
File:                     3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (raw, json)
Hash identifier:          9FI6xrUmyIDtdYUTIVth+tn1sleSPgc7MLrTjmuupW8=
Subject key identifier:   9C:54:6C:7F:6F:14:58:B6:E7:DD:00:83:CF:80:C1:43:7B:D9:5A:44
Certificate issuer:       /CN=586C54F03B92F22D9291776AE79350296DB382C8
Certificate serial:       7D54288540B48E99C6C38CEB83DBC58B301B4D8C
Authority key identifier: 58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa
Signing time:             Sun 03 May 2026 02:43:40 +0000
ROA not before:           Sun 03 May 2026 02:38:40 +0000
ROA not after:            Sun 02 May 2027 02:43:40 +0000
asID:                     149898
IP address blocks:        103.190.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl
                          rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:54:28:85:40:b4:8e:99:c6:c3:8c:eb:83:db:c5:8b:30:1b:4d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586C54F03B92F22D9291776AE79350296DB382C8
        Validity
            Not Before: May  3 02:38:40 2026 GMT
            Not After : May  2 02:43:40 2027 GMT
        Subject: CN=9C546C7F6F1458B6E7DD0083CF80C1437BD95A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bc:b3:2b:67:54:e8:b5:27:68:12:28:e2:66:
                    0c:9e:4c:da:bb:c0:86:3a:9b:4f:6a:4c:41:7c:3d:
                    c0:ec:bc:c5:9d:70:40:5a:01:49:55:11:81:94:8a:
                    52:11:c9:fc:18:5a:dc:d6:c1:c3:a0:eb:db:25:71:
                    16:3e:42:b6:28:0b:a9:4a:22:64:dc:80:30:1c:65:
                    ee:4b:ae:b4:17:2e:b9:3e:46:e0:f5:2e:09:d7:e8:
                    c6:3b:4d:63:b1:48:92:ac:f5:c9:8c:13:26:d4:62:
                    03:0b:7e:7d:d9:b7:a9:51:dc:6f:84:8f:d1:7b:08:
                    47:7b:7f:05:68:97:9d:7a:94:ea:fb:d6:63:22:4d:
                    ee:36:70:da:11:f7:3d:9e:88:2d:6c:72:a9:5a:6c:
                    0f:1c:24:30:57:67:5b:8b:ba:4d:5f:29:fc:b8:26:
                    bd:ce:ed:3c:ca:60:0c:42:cb:ad:fe:cb:21:fb:ad:
                    e8:ac:63:58:91:ff:5d:74:7a:04:b1:8a:15:a8:4f:
                    fe:d8:9c:19:f4:c8:d3:3f:2a:68:b2:55:c9:14:21:
                    7e:ec:4f:78:7a:2b:29:36:9c:eb:92:1b:de:2d:ac:
                    62:e5:27:e4:e4:c2:87:83:d4:f0:84:fa:e6:30:2e:
                    aa:4e:f4:27:4a:2c:4e:68:97:aa:8d:46:de:b9:15:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:54:6C:7F:6F:14:58:B6:E7:DD:00:83:CF:80:C1:43:7B:D9:5A:44
            X509v3 Authority Key Identifier:
                keyid:58:6C:54:F0:3B:92:F2:2D:92:91:77:6A:E7:93:50:29:6D:B3:82:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/586C54F03B92F22D9291776AE79350296DB382C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/586C54F03B92F22D9291776AE79350296DB382C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:67:6f:3a:6c:46:d6:67:d4:96:9d:f4:84:47:b0:82:0d:fa:
         6b:e4:91:60:d9:e4:64:9e:24:39:2c:5f:f0:c5:66:8b:b7:0b:
         a1:f9:69:30:be:11:c5:80:4a:7a:9c:ef:bb:c7:03:5f:c6:a9:
         93:92:05:09:c1:10:6d:1d:18:fb:de:57:2f:76:c7:5e:60:fb:
         89:51:2f:33:cf:de:34:22:7d:78:57:fb:3f:0c:e5:7d:d3:ee:
         93:2a:5a:d2:fe:a4:66:d3:90:9c:86:b4:00:7e:60:0b:8b:1f:
         94:4a:4d:62:6d:fc:c1:85:2a:a2:9b:25:0d:db:e2:2c:fc:13:
         1d:de:4f:3d:73:ed:c7:da:b6:72:74:e9:43:da:43:7e:45:69:
         e8:ec:26:14:88:d6:57:d0:49:61:f4:e1:2c:6b:c8:0c:32:3f:
         43:a8:ab:4a:a1:a5:99:9d:cf:20:69:4d:8e:01:9f:ad:91:29:
         0d:e4:53:86:58:a7:18:16:ef:66:5f:f0:a3:57:03:0f:37:a4:
         92:0d:71:07:36:3a:d3:cb:b8:5e:b5:28:b1:f5:4f:9c:ed:ca:
         60:47:55:84:45:13:18:c4:6d:e8:c7:e5:35:13:98:2a:fe:b6:
         39:6e:22:15:bd:d9:0d:1a:38:7b:a1:8c:75:50:d2:64:99:ca:
         4a:ae:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:12 2026 by rpki-client