Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa
File:                     3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa (raw, json)
Hash identifier:          eGFMAqfyfCE+RtLMZU2D/zaIYmB6R1b/zXsZIUuxlEk=
Subject key identifier:   CA:C6:0A:5D:8F:5A:52:40:B9:C7:A5:85:34:D1:A6:AB:DC:9C:00:6C
Certificate issuer:       /CN=6B06F329693302AA52D4F4E344C4EBD4EE4F04E4
Certificate serial:       482C2C7C3CC655D0CFFBB4173D2963A77EE6BD53
Authority key identifier: 6B:06:F3:29:69:33:02:AA:52:D4:F4:E3:44:C4:EB:D4:EE:4F:04:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa
Signing time:             Sun 03 May 2026 02:47:21 +0000
ROA not before:           Sun 03 May 2026 02:42:21 +0000
ROA not after:            Sun 02 May 2027 02:47:21 +0000
asID:                     149754
IP address blocks:        103.189.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.crl
                          rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2c:2c:7c:3c:c6:55:d0:cf:fb:b4:17:3d:29:63:a7:7e:e6:bd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B06F329693302AA52D4F4E344C4EBD4EE4F04E4
        Validity
            Not Before: May  3 02:42:21 2026 GMT
            Not After : May  2 02:47:21 2027 GMT
        Subject: CN=CAC60A5D8F5A5240B9C7A58534D1A6ABDC9C006C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:0b:6e:2f:58:95:70:bd:51:14:bd:41:26:
                    d5:10:f4:8d:ff:0c:3a:d2:27:53:68:e8:6f:63:bc:
                    f9:15:73:f5:c7:a6:0e:7e:22:63:79:cc:a9:95:bc:
                    82:6c:dc:64:54:70:77:41:d9:8d:d0:8e:62:f5:5c:
                    41:dd:72:18:8c:04:bc:83:28:36:47:70:e5:48:da:
                    16:28:29:82:54:fe:85:5f:b9:5f:dc:a9:6a:4b:36:
                    73:90:22:f1:0d:3d:27:b4:a0:a2:79:e9:6f:2b:7a:
                    b0:ca:57:5b:7d:e5:34:b8:1f:d4:e1:ce:e1:05:53:
                    48:a6:fd:6f:a3:b8:29:25:ea:9e:44:65:51:02:23:
                    09:db:62:ef:86:22:fc:60:23:cb:2c:26:cd:4e:c2:
                    e8:46:f5:88:f7:cb:1e:b6:9a:9a:b4:84:31:fe:03:
                    fb:c2:36:eb:19:2d:db:29:27:8a:53:d1:48:24:4b:
                    a5:42:31:72:aa:c3:f3:0b:04:9c:d4:8d:5b:69:47:
                    8a:2f:24:71:7c:04:ef:eb:c4:61:ac:87:b3:3b:26:
                    04:30:de:f1:17:4b:f0:37:a9:1c:78:ad:10:c8:6d:
                    b4:e6:35:e0:ad:e3:3d:17:48:b8:00:43:5a:92:2a:
                    d6:28:19:8f:b0:c0:2e:10:dd:ae:67:68:95:5b:b8:
                    69:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C6:0A:5D:8F:5A:52:40:B9:C7:A5:85:34:D1:A6:AB:DC:9C:00:6C
            X509v3 Authority Key Identifier:
                keyid:6B:06:F3:29:69:33:02:AA:52:D4:F4:E3:44:C4:EB:D4:EE:4F:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6B06F329693302AA52D4F4E344C4EBD4EE4F04E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82f6c516-ef11-4c15-8b33-2eb10403043b/0/3130332e3138392e3136352e302f32342d3234203d3e20313439373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:42:ec:6f:15:89:fb:21:5c:f2:13:2a:72:41:c7:f4:6b:
         ec:f2:e0:93:56:4f:97:f6:cb:d5:67:eb:11:98:5d:bc:05:c6:
         1b:b5:bf:9d:66:c1:66:bc:e6:d3:36:77:53:2b:5c:68:50:3d:
         c0:d9:af:28:c1:01:e2:6e:98:3d:02:75:cd:2a:b6:1b:34:95:
         cc:d4:4a:c7:73:1e:3e:9c:af:21:0e:0f:d9:aa:5d:8b:bc:04:
         22:ab:8b:b5:be:8c:21:90:38:db:d8:f8:0b:83:bf:82:6a:27:
         33:af:fb:bc:fb:2c:d7:00:70:29:02:d1:3b:51:1f:88:8e:4e:
         31:f6:fe:69:1f:f9:9b:80:b1:af:62:86:1c:3b:c3:f3:87:72:
         7c:70:e6:5f:ff:3a:6c:40:35:3e:64:9e:02:75:49:b8:84:a5:
         eb:cb:73:01:29:a3:cb:11:4e:a5:3b:aa:e6:4d:a4:6d:67:bf:
         e9:21:67:cd:6a:24:ce:ea:f7:3a:93:1b:fe:7d:07:11:ee:e9:
         3f:c2:0b:1e:99:62:e3:5d:df:76:ae:f2:1a:5d:7c:e3:d4:44:
         b6:63:03:a3:a1:76:29:48:0d:ce:6f:eb:5f:16:36:f0:91:85:
         46:f5:18:15:2c:15:59:4c:4b:ed:8c:67:ca:f1:53:01:17:32:
         63:98:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:26 2026 by rpki-client