Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
File:                     3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (raw, json)
Hash identifier:          Tk0zLG1Hphe7t1mTq1IIDbrzYp4b0d3efGQx1H0ipCc=
Subject key identifier:   1F:47:DE:6B:E9:87:DB:81:61:F7:D4:2D:45:61:01:33:0D:36:90:4C
Certificate issuer:       /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Certificate serial:       43C1D86302DCB4B3D03BB9C50847BE3B7B4CFD8D
Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa
Signing time:             Sun 03 May 2026 02:49:05 +0000
ROA not before:           Sun 03 May 2026 02:44:05 +0000
ROA not after:            Sun 02 May 2027 02:49:05 +0000
asID:                     150552
IP address blocks:        103.86.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
                          rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:d8:63:02:dc:b4:b3:d0:3b:b9:c5:08:47:be:3b:7b:4c:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
        Validity
            Not Before: May  3 02:44:05 2026 GMT
            Not After : May  2 02:49:05 2027 GMT
        Subject: CN=1F47DE6BE987DB8161F7D42D456101330D36904C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:2a:22:78:75:fb:09:a0:c6:31:99:63:93:
                    04:f8:41:e0:34:e2:0b:40:2e:37:82:5c:09:4a:db:
                    6d:d5:2a:fe:72:9c:de:4b:81:e9:41:d4:c3:96:75:
                    22:c5:b3:dd:46:8f:35:cb:fd:ea:e7:c0:f7:9b:53:
                    45:29:8c:1a:41:30:40:1b:08:e0:98:c1:61:61:a2:
                    a2:a7:ad:fb:c2:93:6f:08:61:43:6b:46:7c:ec:fa:
                    95:5b:12:11:68:15:dd:a5:8e:61:a1:21:69:83:2c:
                    4e:23:08:ad:61:e1:21:44:1e:bf:23:6e:ad:b5:80:
                    59:1c:90:5d:99:c8:5b:eb:e9:72:b8:e2:9e:77:14:
                    06:b0:0e:24:b0:6b:db:d8:c7:d6:76:97:88:79:d1:
                    cf:80:44:6a:e6:02:2b:77:64:9a:17:9d:6c:6f:7f:
                    15:cd:5e:ae:e7:c6:80:b8:5b:37:b1:02:39:71:c0:
                    4a:00:3c:e1:65:d9:16:e4:80:8f:b9:00:af:4f:91:
                    91:b6:b4:70:3b:c2:e6:e2:83:84:28:49:3f:73:71:
                    80:c9:ca:5e:4c:ab:22:dd:ef:b0:bc:57:6f:da:60:
                    cf:13:de:63:ba:32:37:35:dd:82:07:b3:45:40:96:
                    10:19:bd:da:8b:9a:85:e8:97:30:ab:ac:b0:80:7a:
                    e0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:DE:6B:E9:87:DB:81:61:F7:D4:2D:45:61:01:33:0D:36:90:4C
            X509v3 Authority Key Identifier:
                keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:4a:68:1b:b9:2b:dc:ae:b8:82:88:98:70:dd:98:af:68:e2:
         a8:11:87:14:4a:bb:9e:d2:7e:e3:9e:c5:a4:b3:55:ee:b9:dc:
         cb:da:31:2c:ea:5e:8d:cb:73:3e:d2:0d:c4:8a:66:bb:71:4e:
         ff:4d:58:af:92:f0:34:2f:bf:f6:1f:ed:d0:4c:7c:a6:55:00:
         76:d6:a5:4b:85:bb:e2:67:ae:40:2d:27:2b:92:0e:e6:e8:da:
         d8:a4:14:db:f3:4d:85:fa:83:4e:cd:2c:dc:98:69:e1:d3:6f:
         f9:0c:92:83:89:9b:33:dc:17:8e:f5:7e:15:29:35:5b:0c:96:
         fc:7f:ff:da:6f:e1:8a:7b:36:9e:c5:38:0e:b9:d7:27:a0:ff:
         ab:05:6d:14:a3:3a:1f:11:21:7e:97:ef:8d:7b:89:9d:24:4e:
         e8:1b:31:8a:97:09:c3:80:14:1f:fa:39:25:2a:2e:52:be:60:
         b5:54:da:52:58:56:4e:38:30:90:08:c1:5b:1a:58:82:90:5b:
         39:be:bb:11:8f:22:f7:fd:fd:04:db:97:54:34:ec:63:36:11:
         2a:18:78:b1:36:80:86:7b:2f:5f:bc:f5:b5:8b:cf:bf:1f:ab:
         62:c4:22:f8:60:51:3a:a9:e9:fb:30:7d:0b:5c:a3:e0:85:6e:
         e0:f3:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:44 2026 by rpki-client