Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
File:                     3130332e3139302e302e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          2INetKIyYbbWVRJzq04gwfCzimGA1viA/2dx8yz7FAA=
Subject key identifier:   D6:FD:27:35:11:A4:69:1A:C2:E8:5F:75:77:55:8F:2B:B9:89:5E:C7
Certificate issuer:       /CN=09235F29310425E354121090269C1EB6089EB0B2
Certificate serial:       15031CC5C48E819BC7DC6F2686F778C3E94ABADE
Authority key identifier: 09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa
Signing time:             Sun 03 May 2026 02:57:15 +0000
ROA not before:           Sun 03 May 2026 02:52:15 +0000
ROA not after:            Sun 02 May 2027 02:57:15 +0000
asID:                     149890
IP address blocks:        103.190.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl
                          rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:03:1c:c5:c4:8e:81:9b:c7:dc:6f:26:86:f7:78:c3:e9:4a:ba:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09235F29310425E354121090269C1EB6089EB0B2
        Validity
            Not Before: May  3 02:52:15 2026 GMT
            Not After : May  2 02:57:15 2027 GMT
        Subject: CN=D6FD273511A4691AC2E85F7577558F2BB9895EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:08:69:ca:ed:3b:c6:51:21:d5:bd:0e:b9:
                    a2:71:9e:c4:bf:6c:fd:3a:9c:ef:bd:f2:b1:70:12:
                    58:93:60:9b:ea:d5:1e:05:44:71:05:85:26:ce:82:
                    54:6c:7e:03:a0:87:dd:63:1d:4d:c1:ae:90:7f:5b:
                    70:08:6b:47:e0:e7:f9:6e:1f:45:cb:7f:ab:f4:e1:
                    5c:40:d8:5e:01:77:4b:97:ff:31:72:d7:80:1e:72:
                    43:cc:ab:84:5e:d1:d2:5f:23:df:b8:04:13:bf:71:
                    9c:0c:e7:ca:39:12:87:ad:a6:70:70:40:0a:c7:c5:
                    75:41:57:83:70:75:e9:0d:bd:ec:c6:0e:fa:0a:fe:
                    7f:e9:dd:f1:99:e3:14:79:b5:14:ff:fa:09:87:46:
                    26:31:22:3d:f7:50:52:be:ba:5f:f3:64:30:84:82:
                    7b:76:59:51:f4:e0:4a:7d:3f:ef:92:0d:aa:50:59:
                    02:bb:45:d6:8c:a2:f5:7c:e2:53:ba:fa:dc:a8:d5:
                    aa:ee:a7:85:67:02:1e:c1:17:1a:95:e4:2f:8c:61:
                    d0:ea:bb:d1:91:e4:6b:b3:27:3f:8b:6a:0e:c3:12:
                    f8:c6:e1:c3:1a:ad:58:aa:6a:30:fe:dd:0a:05:ce:
                    2c:ec:b3:2b:56:22:67:56:60:89:0e:ec:da:f9:4e:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FD:27:35:11:A4:69:1A:C2:E8:5F:75:77:55:8F:2B:B9:89:5E:C7
            X509v3 Authority Key Identifier:
                keyid:09:23:5F:29:31:04:25:E3:54:12:10:90:26:9C:1E:B6:08:9E:B0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/09235F29310425E354121090269C1EB6089EB0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/09235F29310425E354121090269C1EB6089EB0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e302e302f32342d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:fc:a6:d8:63:72:c6:0b:24:e0:27:3b:13:a3:86:a2:5c:2b:
         3b:f2:05:ce:4e:38:51:be:8b:13:5b:5c:4b:7f:29:9e:54:b6:
         ca:ce:b2:9c:36:50:07:a3:4f:97:39:d8:49:43:fa:02:5c:e7:
         c9:8c:d1:5b:3d:4f:bd:a7:a5:04:b4:4f:e3:b0:9d:b1:97:b3:
         3a:86:10:86:e9:7a:27:3e:e1:fe:9e:f0:9c:ad:40:1b:00:95:
         cf:74:d2:e7:7f:1a:28:be:ff:60:6e:4b:e4:5d:12:2d:e4:35:
         84:55:29:bd:ba:9e:d1:e0:ed:56:91:36:88:7f:cb:36:27:03:
         69:41:b5:7c:ea:65:31:35:35:9d:2e:25:7c:42:54:d0:5f:ad:
         f4:32:ad:22:6f:56:75:f3:9b:36:40:74:a1:c0:e1:d1:ce:fa:
         b3:f9:ee:91:7d:31:35:69:2d:fd:30:8a:70:2f:e0:36:fc:b8:
         29:ad:69:6a:e0:99:d0:95:d2:65:6f:c2:db:81:94:cf:f7:13:
         78:bc:d8:2c:a2:c7:5c:63:25:60:69:e5:5b:d1:64:89:81:2e:
         18:5b:a5:d0:72:2d:db:41:bd:9a:80:c0:70:dd:f6:09:a8:cf:
         85:ad:f3:d3:88:c8:37:9e:2f:ea:b3:aa:6a:78:ea:64:11:59:
         9f:e4:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:06 2026 by rpki-client