Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa
File:                     3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          KN9wGn1zXozmZ3RfAUGCtuXPuU4nroC30cpkr7J9mHQ=
Subject key identifier:   F6:F5:18:E1:E1:7A:27:E8:F5:B1:4A:26:CB:B7:64:0A:BB:B0:66:48
Certificate issuer:       /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Certificate serial:       722E09271E5A55DAFCC4CD9F5B28896BA02BCF0F
Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa
Signing time:             Sun 03 May 2026 02:49:06 +0000
ROA not before:           Sun 03 May 2026 02:44:06 +0000
ROA not after:            Sun 02 May 2027 02:49:06 +0000
asID:                     150552
IP address blocks:        103.86.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
                          rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:09:27:1e:5a:55:da:fc:c4:cd:9f:5b:28:89:6b:a0:2b:cf:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
        Validity
            Not Before: May  3 02:44:06 2026 GMT
            Not After : May  2 02:49:06 2027 GMT
        Subject: CN=F6F518E1E17A27E8F5B14A26CBB7640ABBB06648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:6d:6f:d6:00:c8:0b:c2:3e:38:3d:f1:fc:
                    c1:4e:bb:13:bf:e5:b1:eb:5b:57:a0:67:b1:d0:72:
                    76:23:f9:f2:ed:59:09:2a:0b:90:b5:b2:75:ea:5b:
                    4e:ac:d6:6b:4f:67:f7:34:90:52:fd:8a:9b:73:87:
                    df:8a:74:72:dd:43:1d:0b:80:c3:26:f8:55:10:2d:
                    97:21:32:9f:21:9e:3d:fd:5a:de:a7:ae:eb:4c:df:
                    57:fb:7b:14:84:67:ca:e4:28:2a:f0:03:9e:a4:9b:
                    4a:7b:c1:ba:18:41:9a:f5:1d:c7:94:f5:05:4c:ee:
                    72:58:49:38:76:92:fe:83:76:4b:ac:9a:ac:60:d5:
                    9f:39:a8:c9:05:43:dc:8a:d7:c6:b3:2c:34:de:dd:
                    31:d3:e9:90:ee:26:64:8e:7e:5a:97:01:ac:b1:c5:
                    2e:75:0e:e5:3c:0e:47:4d:d3:bc:07:6e:e2:b2:f4:
                    0c:ad:00:5a:35:bc:1f:40:fc:d3:17:aa:7f:7b:03:
                    f1:26:c5:bd:71:61:02:ac:79:01:a9:4e:6f:5b:94:
                    bb:12:f3:0b:44:c5:a6:78:4d:c8:ab:45:20:68:d2:
                    5a:44:de:5f:14:1e:ee:98:17:bc:19:d6:1f:ef:64:
                    64:bf:6c:f5:2c:4d:77:77:7a:0e:7d:61:42:4e:98:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F5:18:E1:E1:7A:27:E8:F5:B1:4A:26:CB:B7:64:0A:BB:B0:66:48
            X509v3 Authority Key Identifier:
                keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:32:e7:94:ff:1f:a0:c8:24:37:25:a1:be:fa:d1:af:5c:09:
         69:94:be:6d:96:a2:93:d8:09:f1:5d:d2:f8:01:8f:b7:c9:3f:
         aa:0b:78:f7:e6:1f:f0:b8:e4:34:70:67:ad:dc:14:42:2f:b3:
         f8:a0:a2:08:6e:18:08:ec:a5:52:c4:60:ed:1a:25:b2:a8:a8:
         30:13:47:7b:02:11:6a:d6:9d:5e:31:72:8c:09:66:8f:24:66:
         97:c4:d8:ee:01:b5:66:26:de:00:ba:37:d8:d7:2f:32:9d:95:
         ab:55:e1:4b:60:26:cf:69:b3:3a:26:83:8b:89:7f:b5:8e:16:
         bc:ff:31:3b:b1:3f:3b:26:de:be:a0:4a:32:19:8a:d1:cc:30:
         7d:ee:ba:1c:8e:9c:7c:d2:24:79:de:4f:bf:2d:6e:f4:b9:83:
         e6:d9:a2:b2:3b:88:6e:95:58:b0:b4:5b:2d:00:11:02:ce:1a:
         41:1a:ce:b5:80:c7:0e:65:db:be:c3:eb:22:a1:ec:ea:c1:3a:
         85:ce:3d:8f:f8:53:d8:dd:c9:7e:15:68:71:ac:6b:08:97:38:
         b5:26:0c:64:43:44:c5:48:38:1e:52:89:47:59:a0:40:36:e9:
         7a:d4:4e:18:a6:97:7b:80:be:53:e5:f2:82:97:d8:40:1a:1f:
         f3:36:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:40 2026 by rpki-client