Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa
File:                     3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (raw, json)
Hash identifier:          1KOQAKv6O99pd7ry74vlSf/BC5MqWkjxGtXhI66S9EE=
Subject key identifier:   0C:00:80:CE:B6:23:FF:7A:CF:51:06:64:0F:28:C3:F8:F4:E4:DA:7D
Certificate issuer:       /CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
Certificate serial:       21C20421604FE4DDB15D99846F93173744CCBE80
Authority key identifier: 5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa
Signing time:             Sun 03 May 2026 02:52:50 +0000
ROA not before:           Sun 03 May 2026 02:47:50 +0000
ROA not after:            Sun 02 May 2027 02:52:50 +0000
asID:                     149697
IP address blocks:        103.186.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl
                          rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c2:04:21:60:4f:e4:dd:b1:5d:99:84:6f:93:17:37:44:cc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1F8B81BA95848FA51896E095DB7A4292097EFA
        Validity
            Not Before: May  3 02:47:50 2026 GMT
            Not After : May  2 02:52:50 2027 GMT
        Subject: CN=0C0080CEB623FF7ACF5106640F28C3F8F4E4DA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f3:00:7a:e1:38:23:ba:a6:50:ad:57:e1:56:
                    20:84:33:10:45:d0:36:f8:82:0c:a7:cf:20:23:9f:
                    f9:9e:0f:29:c6:27:2f:e9:64:83:8a:fa:e0:00:3c:
                    82:ec:f9:92:67:f3:55:96:1f:7f:83:69:96:f7:93:
                    c3:32:fe:d6:72:65:fb:a7:7e:72:6b:fa:e4:9f:81:
                    7a:af:e6:ef:51:18:d9:dc:57:a9:42:37:21:09:4a:
                    c3:45:e5:4f:7b:0d:bb:95:c5:98:1c:05:0c:23:4a:
                    7c:88:b0:51:dc:77:77:eb:d6:74:62:68:9c:b3:d5:
                    76:30:84:df:33:e4:89:4a:ad:3f:62:41:ba:aa:59:
                    ec:11:dd:bb:0a:78:3b:e5:7e:fe:d7:c6:b2:8f:df:
                    f1:af:69:a2:77:a0:55:f2:b2:c7:99:4f:5c:e2:f7:
                    43:01:15:13:31:b5:45:59:7b:47:4b:13:2c:a1:63:
                    2c:f4:3e:5b:ba:18:72:f5:0d:9c:a6:89:ef:c8:10:
                    b4:b9:48:9e:34:cc:30:05:fb:1d:0e:54:19:ea:8d:
                    d2:c8:74:18:f3:a2:55:ab:65:e8:b2:57:26:0d:18:
                    04:a7:3c:6a:39:9f:cf:25:11:5e:83:f3:2e:09:e5:
                    7a:d3:c1:5e:c8:8d:3c:f5:6e:08:e2:2c:e8:17:d1:
                    7d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:80:CE:B6:23:FF:7A:CF:51:06:64:0F:28:C3:F8:F4:E4:DA:7D
            X509v3 Authority Key Identifier:
                keyid:5C:1F:8B:81:BA:95:84:8F:A5:18:96:E0:95:DB:7A:42:92:09:7E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/5C1F8B81BA95848FA51896E095DB7A4292097EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C1F8B81BA95848FA51896E095DB7A4292097EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:78:0b:45:24:78:19:49:94:38:bc:b5:75:7b:aa:8a:9e:
         52:aa:aa:58:e9:5e:29:1a:58:70:3a:11:18:53:13:3a:32:ca:
         30:2b:d3:a4:bc:81:31:bd:77:95:dd:1d:ef:58:4c:15:c2:e2:
         94:13:99:f3:c2:6a:e3:0a:00:8b:6d:92:4e:7a:87:ec:66:78:
         46:47:d2:4b:2a:db:ee:45:df:a3:55:24:93:c0:26:c4:1f:b1:
         c2:15:88:27:f1:fa:bd:ec:2e:53:1a:a3:7c:a0:46:a2:66:71:
         31:37:ac:56:b4:7b:46:54:f4:a7:46:1b:b8:14:1e:40:04:dc:
         ee:aa:45:c4:7e:ed:cc:1d:12:c8:06:95:9f:a2:0b:ec:f5:ea:
         bb:c0:81:0c:64:18:d8:21:5c:0b:45:5f:c9:a2:de:86:7a:d7:
         ee:58:ac:9e:dd:48:4c:f8:38:b9:f5:e6:fb:d5:59:b8:b1:b3:
         87:07:a6:bf:3f:b1:24:2f:de:c0:79:5f:7e:9e:80:63:26:ff:
         53:e5:cc:59:27:32:69:7e:c1:34:ef:d4:8c:cc:77:26:37:21:
         9a:b7:59:c8:d5:f6:a6:1a:f1:aa:0a:db:16:39:fd:b2:b3:ba:
         80:3f:7f:07:8d:05:c1:fd:41:8a:07:2c:11:f6:24:7f:46:13:
         03:ce:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:28 2026 by rpki-client