Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
File:                     3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          AhYVMQlTuT7zbTcLfZGNm75C7shQlDWThwFiJD95reg=
Subject key identifier:   58:E0:47:81:8D:F5:A0:4D:73:69:E6:C4:2E:7E:A8:3B:E2:4F:A2:71
Certificate issuer:       /CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
Certificate serial:       73122CF1B01E5C82E2DD04A0D252A308B7DE1A89
Authority key identifier: 54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa
Signing time:             Sun 03 May 2026 02:49:06 +0000
ROA not before:           Sun 03 May 2026 02:44:06 +0000
ROA not after:            Sun 02 May 2027 02:49:06 +0000
asID:                     150552
IP address blocks:        103.86.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl
                          rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:38:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:12:2c:f1:b0:1e:5c:82:e2:dd:04:a0:d2:52:a3:08:b7:de:1a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540972006EC4D1CE0EDDC7DA11D1419F672816A7
        Validity
            Not Before: May  3 02:44:06 2026 GMT
            Not After : May  2 02:49:06 2027 GMT
        Subject: CN=58E047818DF5A04D7369E6C42E7EA83BE24FA271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:a2:b8:37:6d:08:53:ef:52:55:1a:6b:c9:
                    50:8f:46:a5:16:29:59:64:2f:48:2c:53:67:87:48:
                    fb:3a:e7:bb:52:51:ae:08:39:29:56:fc:99:1f:eb:
                    c1:6a:9a:4e:fd:cb:78:4d:df:b9:27:16:18:54:93:
                    d1:fb:f9:f4:96:44:1e:b9:46:42:37:f4:46:4c:da:
                    5e:7a:d5:32:64:f5:32:93:6d:80:ef:58:d0:8f:4d:
                    8e:f9:31:fa:35:af:6b:69:34:a9:f5:8d:aa:c6:a6:
                    61:7d:6b:2c:dd:4c:5c:b8:7e:48:8f:47:dd:a2:c2:
                    74:27:26:ed:b7:86:ab:c2:5a:87:2f:a5:a3:e6:d9:
                    9c:e3:1b:f5:16:bd:66:9a:cd:d4:9f:15:15:29:38:
                    52:de:5a:87:6b:b2:03:e1:ab:49:58:59:e7:4f:78:
                    e1:fb:dc:49:a0:a2:d6:0d:71:1d:cd:b1:28:91:83:
                    17:d8:d7:c8:33:47:4a:f4:f7:68:bf:e6:96:8d:cc:
                    46:12:1b:eb:d5:2c:87:d2:f8:e5:98:83:fa:f2:c3:
                    5b:37:b3:c3:d9:ac:e7:41:75:7e:cf:4d:1e:bf:fb:
                    e8:eb:e7:0b:3b:93:07:40:71:22:a2:7b:54:63:08:
                    b3:55:f2:cc:b5:6b:90:1b:61:68:cb:3c:46:a8:3e:
                    73:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:47:81:8D:F5:A0:4D:73:69:E6:C4:2E:7E:A8:3B:E2:4F:A2:71
            X509v3 Authority Key Identifier:
                keyid:54:09:72:00:6E:C4:D1:CE:0E:DD:C7:DA:11:D1:41:9F:67:28:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/540972006EC4D1CE0EDDC7DA11D1419F672816A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/540972006EC4D1CE0EDDC7DA11D1419F672816A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:c6:96:e1:a7:c1:90:83:90:f5:d7:dd:08:42:68:be:81:63:
         c9:8e:e3:2d:45:15:a3:3d:fc:f0:f0:56:f0:11:29:46:9b:61:
         d1:54:5f:da:ae:ac:3a:97:e8:df:1c:0f:e1:e8:cc:85:51:d6:
         ca:1d:2b:59:f6:74:8f:4d:94:a0:de:4f:42:e2:b9:07:9f:f4:
         36:b2:73:98:a6:df:8c:86:0b:4e:9d:29:45:9d:76:ee:fb:7e:
         e7:93:ee:3c:9a:db:45:11:3c:cc:29:67:62:9a:da:64:a3:51:
         8e:ec:40:25:e7:98:ed:42:04:c3:e2:20:bd:dc:3f:09:88:23:
         28:84:5f:be:75:3e:42:54:68:bd:30:f6:3d:e4:66:c9:a4:f5:
         7a:bc:0a:2c:91:8b:05:2d:a7:f4:48:1c:cc:08:bb:cc:e6:7d:
         24:ea:95:a2:b2:67:c8:da:43:a2:68:15:05:35:58:20:4a:c2:
         94:f2:ad:68:40:76:af:dc:66:72:00:ac:1c:a7:bf:f9:d3:82:
         3d:5a:a4:20:79:47:37:8c:6e:ef:b1:f3:02:68:dc:b1:6e:4d:
         a0:3d:c5:13:26:07:50:8c:39:82:c1:27:1e:78:7f:f5:2d:ee:
         3e:ab:9d:9e:63:9d:4b:be:80:3a:44:47:22:95:78:ae:85:6c:
         f1:1f:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:26 2026 by rpki-client