Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
File:                     3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (raw, json)
Hash identifier:          tFodUbzYC2MyevsY+1U3r+nqHy3x7yy2dunKYq9vZuc=
Subject key identifier:   D6:46:9F:A3:90:B5:19:AA:03:A6:87:5D:94:A1:24:E6:22:AC:F1:FF
Certificate issuer:       /CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34
Certificate serial:       19E7F835F4E48F53BA3312CBC65167BECAE301B2
Authority key identifier: 2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
Signing time:             Sun 03 May 2026 02:52:48 +0000
ROA not before:           Sun 03 May 2026 02:47:48 +0000
ROA not after:            Sun 02 May 2027 02:52:48 +0000
asID:                     149716
IP address blocks:        103.186.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl
                          rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:f8:35:f4:e4:8f:53:ba:33:12:cb:c6:51:67:be:ca:e3:01:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D30C300587F6D81BE9B55443EA8EE94229FCF34
        Validity
            Not Before: May  3 02:47:48 2026 GMT
            Not After : May  2 02:52:48 2027 GMT
        Subject: CN=D6469FA390B519AA03A6875D94A124E622ACF1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:40:5f:df:df:4d:78:90:79:f9:d2:16:92:
                    2c:7a:b3:e0:6f:3f:dc:4b:a9:82:26:a8:ca:ca:e7:
                    77:ad:93:72:85:93:f0:25:22:52:2c:dc:99:3f:ea:
                    a1:94:1e:e0:9b:b3:de:69:11:f2:01:c4:85:bd:c6:
                    34:23:6c:14:cb:e0:0d:bd:9e:de:37:73:cc:32:1b:
                    5a:6b:2d:5a:8d:bc:42:0f:4b:ea:0c:c6:30:d7:53:
                    6e:db:6c:9a:1d:03:49:15:3f:1f:29:df:79:83:bf:
                    77:98:3f:4f:98:9a:24:ec:22:5d:31:9e:5b:e4:3b:
                    04:ce:26:aa:84:b8:0f:07:00:c3:fb:96:84:68:a8:
                    44:50:b1:d4:81:27:c7:a3:a4:fa:33:fd:fa:bb:2f:
                    76:eb:6a:30:f6:c0:90:6c:58:1d:df:c4:19:2e:f4:
                    db:1a:5a:bb:07:2e:02:8c:09:90:8f:4e:82:e0:6c:
                    6d:a7:28:e1:5b:af:a8:58:cc:ad:1b:ed:87:fd:85:
                    d7:75:a6:4e:aa:9e:3b:03:53:f4:b6:e6:dc:cf:3d:
                    50:cc:77:b1:1c:05:15:51:f0:a9:18:35:62:d1:80:
                    55:b8:fe:a0:38:dd:a2:89:2a:bb:b7:14:11:31:58:
                    8d:59:97:fa:f7:0a:0f:49:86:4a:c1:ec:fb:cb:a1:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:46:9F:A3:90:B5:19:AA:03:A6:87:5D:94:A1:24:E6:22:AC:F1:FF
            X509v3 Authority Key Identifier:
                keyid:2D:30:C3:00:58:7F:6D:81:BE:9B:55:44:3E:A8:EE:94:22:9F:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/2D30C300587F6D81BE9B55443EA8EE94229FCF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2D30C300587F6D81BE9B55443EA8EE94229FCF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:6d:e9:d5:54:59:1d:37:d5:c2:ad:e3:af:c6:82:11:2e:
         d9:4e:3f:c3:d6:3e:9a:84:22:a2:e2:01:5e:2b:01:83:98:65:
         61:e9:c9:77:fa:6d:82:51:5c:a8:2f:7f:7e:8b:83:04:b9:77:
         bf:12:9b:99:60:aa:4f:de:37:b9:97:9b:86:27:04:4f:8e:c5:
         60:17:a0:1c:f8:f0:6d:4e:a6:04:06:06:f9:54:8c:0b:26:a3:
         eb:fe:9b:3c:f6:e3:03:80:6c:20:c1:c2:55:a2:24:46:67:31:
         d9:e6:ca:bf:47:d0:61:78:04:16:9d:c6:b2:e9:fd:b7:69:da:
         a0:01:d2:1d:51:42:35:e5:5d:78:8a:c5:5e:2a:b4:0f:9b:61:
         ef:ea:81:ef:5b:0d:f7:ed:6c:15:68:15:1a:f3:1d:13:cf:65:
         a2:5c:89:3e:da:63:6d:b4:d8:f2:67:49:83:0f:96:e7:2c:b3:
         be:9b:08:f9:79:24:d9:de:57:a6:cc:f7:5b:c3:c1:78:48:1b:
         c6:62:cb:60:b7:14:8e:2b:ee:bc:9d:b9:44:cb:62:49:64:ae:
         95:c4:cd:0b:0d:4d:81:53:f6:56:41:3f:e8:9a:4a:c0:61:23:
         39:4b:d2:40:db:79:de:f2:4c:d5:ad:a6:b3:ae:4b:16:d0:8c:
         96:13:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:40 2026 by rpki-client