Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa
File:                     3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (raw, json)
Hash identifier:          SYK3QYwE1Bkhg2g4VRE2icwWvyuVDU6csoYcYgAZP3U=
Subject key identifier:   2D:AF:1C:08:79:06:75:FD:EA:35:3B:59:C2:9C:7B:08:4F:53:51:0B
Certificate issuer:       /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Certificate serial:       5B9DBDDE7A52C521857D01ABBAC3FE379063BAE7
Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa
Signing time:             Sun 03 May 2026 02:52:51 +0000
ROA not before:           Sun 03 May 2026 02:47:51 +0000
ROA not after:            Sun 02 May 2027 02:52:51 +0000
asID:                     149697
IP address blocks:        103.186.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
                          rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:9d:bd:de:7a:52:c5:21:85:7d:01:ab:ba:c3:fe:37:90:63:ba:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
        Validity
            Not Before: May  3 02:47:51 2026 GMT
            Not After : May  2 02:52:51 2027 GMT
        Subject: CN=2DAF1C08790675FDEA353B59C29C7B084F53510B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:50:f6:1b:23:44:71:92:f7:9c:24:e5:2a:
                    25:cf:cf:cf:16:76:1b:5b:61:72:62:28:30:d6:e3:
                    99:1a:12:98:ff:3a:30:51:f0:9e:43:3e:32:67:64:
                    ef:c7:71:3e:0a:9b:a1:6d:fe:8e:df:78:38:fc:5c:
                    d6:9b:33:ad:ae:77:04:89:8a:b4:83:5a:ae:47:c2:
                    7e:73:21:cd:df:ac:7d:58:34:e4:27:db:05:09:ab:
                    e0:52:5c:d0:09:26:2e:20:40:2d:52:ae:66:46:6c:
                    07:8d:2e:4e:16:84:e6:05:a7:c5:1e:82:1c:b6:8b:
                    ac:b9:cb:fd:0c:f4:7d:89:25:84:14:48:15:17:60:
                    df:9b:c8:dc:ce:87:cc:ee:87:af:f1:7a:f1:88:59:
                    a9:81:35:77:eb:f6:2c:17:49:6b:28:9a:60:ac:94:
                    21:86:79:32:27:b6:b5:54:81:f9:fc:ed:34:16:d5:
                    18:b8:f8:c6:b9:5f:cd:48:ee:d6:ee:a4:e6:a7:65:
                    53:c7:81:2e:0b:3f:99:68:80:2d:26:d7:33:11:ad:
                    53:c3:ca:1b:c5:3d:07:a8:c1:bb:12:43:cf:61:49:
                    02:49:46:a3:13:d5:2a:80:fb:89:27:40:10:4c:f1:
                    1d:c7:01:d5:ab:5b:87:cb:ba:d3:0b:f6:59:c7:3c:
                    e8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AF:1C:08:79:06:75:FD:EA:35:3B:59:C2:9C:7B:08:4F:53:51:0B
            X509v3 Authority Key Identifier:
                keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:0c:71:10:71:91:52:0a:db:de:8a:92:a2:65:ba:e6:b6:63:
         69:78:2e:6d:5f:0f:0f:59:0c:1b:55:17:03:4c:0d:be:d8:7b:
         87:ae:f9:8e:48:7a:31:5e:67:95:d3:73:c4:93:51:ce:5f:85:
         aa:bc:58:48:a7:3e:6c:7f:01:78:6e:48:00:fd:ef:55:b9:a5:
         65:fd:62:76:0e:79:67:15:67:a4:33:7b:fc:9f:a6:7b:99:e1:
         f5:7a:60:2e:ce:71:9e:b2:c5:83:57:d4:05:ff:5c:95:e5:f5:
         3c:ae:8a:7f:b8:42:12:cc:e2:56:e4:f3:a6:7b:24:a7:d0:49:
         9b:cf:19:2b:4e:4f:c1:98:0b:9a:84:83:ae:7a:db:28:e1:81:
         b5:2f:e7:c6:69:ad:9c:89:5f:d8:d0:a7:f4:20:33:cc:55:7f:
         34:bb:bf:e6:47:80:df:dc:40:a7:56:68:66:a1:a5:02:ec:21:
         d3:1e:27:e6:27:9c:f7:91:a5:11:3e:07:fc:1a:06:a4:1e:54:
         91:79:33:44:29:39:43:2c:aa:3f:33:cb:7f:ba:9d:1e:7f:79:
         c1:00:2f:58:30:bf:5b:61:e3:d9:6a:3e:32:a1:4d:8b:1e:a2:
         a6:d2:ad:c5:c9:b6:2b:b6:b8:bb:e4:0e:b5:0a:a8:75:03:77:
         e7:e1:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:08 2026 by rpki-client