Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa
File:                     3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (raw, json)
Hash identifier:          jSozWSD5sMiX02pWV0d7a17kun2jtCGklOnwsfoqAUs=
Subject key identifier:   28:9C:CC:0A:FD:68:66:47:E2:04:6E:11:4B:E0:F4:72:46:65:EF:E8
Certificate issuer:       /CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
Certificate serial:       65CC7AE50D84F3C98AE5FBBB8EC38DEC08DE425E
Authority key identifier: 19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa
Signing time:             Sun 03 May 2026 02:57:10 +0000
ROA not before:           Sun 03 May 2026 02:52:10 +0000
ROA not after:            Sun 02 May 2027 02:57:10 +0000
asID:                     138876
IP address blocks:        103.140.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl
                          rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cc:7a:e5:0d:84:f3:c9:8a:e5:fb:bb:8e:c3:8d:ec:08:de:42:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19045F868E09E8CC6E09639ABA7B1C1471E608E9
        Validity
            Not Before: May  3 02:52:10 2026 GMT
            Not After : May  2 02:57:10 2027 GMT
        Subject: CN=289CCC0AFD686647E2046E114BE0F4724665EFE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d9:41:f9:3d:68:00:04:8f:af:8f:38:9f:42:
                    31:10:1b:31:29:29:4d:04:4e:ed:d4:66:45:43:1a:
                    fc:49:c2:75:13:d0:a5:6c:1e:78:53:66:ff:da:6e:
                    d2:24:76:eb:fd:ef:0e:19:fb:86:65:75:b4:c0:6f:
                    29:56:cf:0b:02:8f:38:25:0e:a3:82:ff:7d:27:80:
                    ee:9a:1e:c3:d9:f9:9c:19:18:ff:5b:16:36:4e:9e:
                    08:32:98:41:e6:fd:4e:8c:7f:f4:8e:dc:5a:55:15:
                    94:51:22:ba:eb:7f:a9:2e:5c:4a:b7:49:5f:f0:ae:
                    d9:39:e5:e5:f5:39:cf:99:e3:00:f9:6f:9a:a1:28:
                    cd:29:1b:4a:38:58:0f:32:d3:46:3a:a2:13:b1:c3:
                    d0:05:4a:f0:0b:a3:66:c4:fe:b7:2f:71:e4:f7:5f:
                    3d:73:42:33:9c:08:c1:7e:0d:fc:43:0d:53:b2:8e:
                    57:6b:85:48:58:1c:86:94:29:de:f8:7f:dd:70:95:
                    50:87:63:ab:66:28:f5:f5:8e:84:b7:0f:ad:d3:78:
                    f9:26:1e:14:1d:8e:49:f8:e7:12:f6:93:73:d9:09:
                    9c:cf:8f:ca:b4:4c:f9:95:ae:88:02:db:2d:67:cc:
                    05:9d:e7:c2:9d:67:98:79:ae:be:cb:ed:0e:ef:b6:
                    83:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:CC:0A:FD:68:66:47:E2:04:6E:11:4B:E0:F4:72:46:65:EF:E8
            X509v3 Authority Key Identifier:
                keyid:19:04:5F:86:8E:09:E8:CC:6E:09:63:9A:BA:7B:1C:14:71:E6:08:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/19045F868E09E8CC6E09639ABA7B1C1471E608E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19045F868E09E8CC6E09639ABA7B1C1471E608E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:ca:49:55:d4:d5:8d:d1:2e:65:76:05:0c:7d:e1:e7:f4:
         1b:cd:0f:92:3b:5f:a1:94:c6:d8:e1:bc:ee:43:a5:97:fd:bf:
         86:4b:63:e4:1c:74:bf:73:d7:c5:71:54:a6:78:27:4b:3a:4f:
         da:ff:37:2e:2a:d3:ec:95:36:10:81:fc:55:1c:63:aa:35:02:
         48:de:a2:90:f4:1a:b4:4b:28:e0:53:87:b5:e4:3a:dd:6b:bc:
         34:20:6e:b1:75:2e:da:99:10:e8:ad:be:bf:93:e4:47:8b:88:
         59:b5:86:e6:13:75:95:c2:d5:18:f1:22:58:cc:b9:20:3d:40:
         69:f0:5d:c1:f0:30:9c:b5:39:8f:13:f2:cf:77:b9:17:b6:b8:
         c1:d4:10:bf:06:a2:4a:a2:db:2e:70:5e:4c:9f:56:c4:09:06:
         63:70:e2:c1:3a:4f:7a:9b:28:3d:54:9d:95:09:e2:ef:f5:d8:
         fe:0c:1f:08:64:dd:5b:2d:2d:15:56:07:54:b2:f7:05:3c:7a:
         da:a1:0e:1a:39:b3:4a:c5:5e:3e:22:4a:ee:ea:67:2a:77:bd:
         16:86:1b:28:7a:3b:b0:18:a0:ad:31:cb:99:85:ab:74:0b:e4:
         ff:f6:58:51:46:a0:02:6f:05:63:65:07:40:2a:1e:8a:62:d1:
         59:54:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:11 2026 by rpki-client