Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
File:                     3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (raw, json)
Hash identifier:          /UiS0/YqAJP6vBXmUjstv/RqhsN7l6a5S8YjTvqIQ1U=
Subject key identifier:   31:83:E9:92:6D:7E:40:68:F2:7F:74:FB:99:F3:78:19:86:A4:7E:DB
Certificate issuer:       /CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
Certificate serial:       3BB79809592328D94252BCCF3BD7C69B25278258
Authority key identifier: 6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa
Signing time:             Sun 03 May 2026 02:44:16 +0000
ROA not before:           Sun 03 May 2026 02:39:16 +0000
ROA not after:            Sun 02 May 2027 02:44:16 +0000
asID:                     150526
IP address blocks:        103.149.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl
                          rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b7:98:09:59:23:28:d9:42:52:bc:cf:3b:d7:c6:9b:25:27:82:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D25B0844A51EFC1F9C953A3D40868AAD2196824
        Validity
            Not Before: May  3 02:39:16 2026 GMT
            Not After : May  2 02:44:16 2027 GMT
        Subject: CN=3183E9926D7E4068F27F74FB99F3781986A47EDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:3c:d7:ef:05:bc:fc:f9:27:e5:e5:a4:1f:
                    1e:35:1e:7b:9a:91:2d:6b:90:f6:7b:31:50:a7:54:
                    75:c6:7d:e2:73:9f:03:cc:6e:de:23:aa:d0:1c:11:
                    72:d5:7d:80:8b:11:17:df:a8:60:b2:bd:f2:0e:b0:
                    9d:e8:da:87:bb:bc:8e:e0:6b:dd:b5:f8:7e:69:09:
                    12:3f:ed:0a:2d:8d:e4:8e:d9:6e:54:83:0d:63:5f:
                    a9:14:86:c9:bc:78:c5:52:21:b9:ac:a8:79:21:22:
                    bb:be:d6:23:0c:9e:50:b3:b3:7b:9e:5f:cf:15:2c:
                    c5:f8:6c:42:a1:e3:0a:01:7e:5a:9e:85:1e:d8:d8:
                    70:d6:9b:0b:c8:8d:99:f2:25:36:91:20:0e:9f:35:
                    1e:ea:f8:80:43:fd:c5:67:ab:93:27:7b:e0:48:41:
                    4e:9a:9e:0d:c5:22:e1:7d:ae:e1:c9:8e:83:00:7a:
                    d4:c6:7d:fb:58:e6:bf:50:d2:78:04:c8:91:fb:01:
                    9c:23:27:84:8e:54:53:8e:71:21:06:64:76:70:0d:
                    29:94:4d:a6:f0:8b:bb:7b:28:83:c5:27:22:47:c0:
                    66:f8:a9:1e:ed:3f:2e:cd:0b:04:5e:b4:4d:39:d5:
                    4d:7a:2a:04:27:9e:d1:2f:5d:e1:d4:94:70:18:cd:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:E9:92:6D:7E:40:68:F2:7F:74:FB:99:F3:78:19:86:A4:7E:DB
            X509v3 Authority Key Identifier:
                keyid:6D:25:B0:84:4A:51:EF:C1:F9:C9:53:A3:D4:08:68:AA:D2:19:68:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/6D25B0844A51EFC1F9C953A3D40868AAD2196824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D25B0844A51EFC1F9C953A3D40868AAD2196824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:c2:ec:47:81:42:cb:3c:26:ca:ea:39:26:db:66:b7:34:
         36:83:9f:23:d6:fa:38:71:52:51:98:6f:ab:7d:6b:4e:ec:5d:
         2a:48:ff:15:25:6a:ea:7a:50:79:1e:15:f2:0a:74:b8:af:69:
         b8:0c:15:e0:bf:51:cd:fc:f1:7c:6f:8c:1c:62:ad:3c:c2:30:
         44:b0:c0:6b:17:d8:dc:ee:f8:42:87:c1:ed:12:08:8b:6d:81:
         ea:71:fc:66:a5:11:e8:59:53:40:6e:f3:40:48:df:4e:81:56:
         b9:fc:f3:41:02:3c:d8:0e:54:2f:7b:01:0b:53:11:4a:fa:cd:
         ae:64:b9:36:0b:5d:f1:37:77:91:7e:ae:cb:7d:3f:d1:0d:e5:
         2d:28:27:09:00:bb:1a:29:06:0b:5d:83:38:b4:b8:b2:c7:67:
         26:81:29:74:d6:1a:e9:d7:d4:9b:17:78:1d:fb:94:fc:99:38:
         fc:f8:f0:70:2c:35:b9:1b:39:31:42:bd:e7:6e:3a:8e:63:dd:
         4a:f0:04:d5:ae:ad:2f:f6:69:3c:dd:76:a1:8a:55:98:fe:3b:
         cb:4c:8a:33:25:d4:29:bd:a8:cd:14:f6:fe:92:b4:c0:c2:d9:
         f7:88:c1:72:ef:a8:70:3a:6b:33:6f:4a:c4:c9:d4:27:d5:66:
         ec:a5:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:29 2026 by rpki-client