Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa
File:                     3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa (raw, json)
Hash identifier:          ArWINNWiCoq7qYCWEDrQkzwtNUnQVElWRhRzX3xlhI8=
Subject key identifier:   96:65:71:72:96:86:75:8D:3C:5B:E2:86:0A:14:BE:F0:1B:8D:2B:22
Certificate issuer:       /CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
Certificate serial:       4390102414C9FE3F387D87CEBD59DF45ABACC41B
Authority key identifier: 65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa
Signing time:             Sun 03 May 2026 03:00:19 +0000
ROA not before:           Sun 03 May 2026 02:55:19 +0000
ROA not after:            Sun 02 May 2027 03:00:19 +0000
asID:                     150548
IP address blocks:        103.126.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl
                          rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:90:10:24:14:c9:fe:3f:38:7d:87:ce:bd:59:df:45:ab:ac:c4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B2322C56F44BF22F2FEC36B959F99E1D331066
        Validity
            Not Before: May  3 02:55:19 2026 GMT
            Not After : May  2 03:00:19 2027 GMT
        Subject: CN=966571729686758D3C5BE2860A14BEF01B8D2B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:57:a4:a3:4e:3c:24:b5:33:ff:33:dd:f0:4d:
                    92:e5:02:18:49:55:68:df:43:0b:69:38:64:6e:e6:
                    83:ef:a5:a8:d6:b1:ad:41:be:14:77:b7:a7:8e:04:
                    b7:21:6e:69:0a:0b:55:85:2f:55:df:f7:a1:64:e3:
                    be:81:02:da:e9:be:57:59:92:c9:1a:43:61:2f:a7:
                    9a:d7:d1:f7:55:ea:70:1c:33:a0:ae:62:d9:2d:a7:
                    6a:07:40:25:01:cf:18:b9:d8:74:41:7f:42:1d:f9:
                    3b:ba:6d:cd:c8:fd:d3:10:d8:98:0f:7d:35:97:4f:
                    2e:a9:58:78:20:9b:e4:1d:11:cc:e3:83:a2:57:ff:
                    d8:21:e0:1a:78:0f:87:d1:4a:3e:10:64:7f:e2:4e:
                    70:68:3c:3b:13:3b:3b:c0:bc:14:ab:ec:10:e8:31:
                    cf:3c:63:21:1c:a2:61:76:27:e7:89:4c:d7:b2:21:
                    0f:9e:54:c5:34:9f:d1:34:32:1d:df:51:25:d8:69:
                    00:6f:e2:0c:eb:af:26:4a:76:b2:f6:a6:d2:12:ef:
                    75:48:1c:40:b0:f7:de:14:e3:61:66:90:7c:9d:57:
                    76:69:eb:c9:f8:c5:ef:fc:4c:c8:e4:db:ca:1f:da:
                    e8:0a:c4:8e:86:2b:7e:38:39:7a:b6:e5:72:f0:9e:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:71:72:96:86:75:8D:3C:5B:E2:86:0A:14:BE:F0:1B:8D:2B:22
            X509v3 Authority Key Identifier:
                keyid:65:B2:32:2C:56:F4:4B:F2:2F:2F:EC:36:B9:59:F9:9E:1D:33:10:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/65B2322C56F44BF22F2FEC36B959F99E1D331066.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65B2322C56F44BF22F2FEC36B959F99E1D331066.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b193018e-718f-4757-a087-93ad77b81821/0/3130332e3132362e3139352e302f32342d3234203d3e20313530353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:f6:49:7b:b1:89:f5:44:ed:f5:f1:b8:db:64:41:f1:0e:
         aa:e4:3b:0c:08:ca:d5:66:93:fd:a5:91:2f:78:84:5f:f4:29:
         ac:88:6b:bf:d1:14:1f:2a:23:51:6c:21:04:09:f1:d6:44:a9:
         08:4d:5b:a6:34:31:19:37:c1:d8:90:92:c9:67:b4:d2:f3:08:
         5b:b8:ef:41:dd:97:98:48:07:3e:95:19:20:8c:58:57:18:b2:
         36:6b:ba:71:f3:86:ec:37:ec:3e:57:d3:24:31:9a:17:b7:b5:
         b8:50:fa:0d:11:1c:98:59:86:5c:ba:c2:b9:95:18:57:d7:e9:
         ac:c2:65:be:1c:9f:a8:7f:90:5a:d4:b7:fb:52:5e:71:45:ad:
         53:b8:50:e4:d8:d6:64:bd:ed:83:bd:db:17:d3:0f:56:bc:29:
         d7:8a:4f:8f:ed:2c:e9:23:ef:1f:67:54:63:2d:48:fe:26:dd:
         71:a8:74:17:8c:9e:38:1f:74:77:eb:11:a4:2e:a0:b2:9d:9f:
         5c:c7:56:35:d1:bb:5b:90:19:86:b4:2c:f0:56:5f:3d:59:17:
         47:4d:4d:7a:e8:dd:34:95:f2:15:b8:c4:75:4b:0c:79:98:a0:
         87:3f:c6:7a:c3:ef:c4:bb:48:83:92:40:3c:7a:91:ed:71:bb:
         f3:41:98:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:56:31 2026 by rpki-client