Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa
File:                     3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa (raw, json)
Hash identifier:          GypeOWXaZk/hIkKcj8p9VzDp/KvisMSO2917iwkOduU=
Subject key identifier:   98:F4:A6:C9:56:7F:1B:E4:00:1B:7A:04:92:0C:8F:78:14:CA:62:D4
Certificate issuer:       /CN=518CB795450041B0537FB0312901D771579DCEC4
Certificate serial:       729639E3E99A88D0F4CC919093CA4B191A738902
Authority key identifier: 51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa
Signing time:             Sun 03 May 2026 03:01:42 +0000
ROA not before:           Sun 03 May 2026 02:56:42 +0000
ROA not after:            Sun 02 May 2027 03:01:42 +0000
asID:                     150185
IP address blocks:        103.193.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl
                          rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:39:e3:e9:9a:88:d0:f4:cc:91:90:93:ca:4b:19:1a:73:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=518CB795450041B0537FB0312901D771579DCEC4
        Validity
            Not Before: May  3 02:56:42 2026 GMT
            Not After : May  2 03:01:42 2027 GMT
        Subject: CN=98F4A6C9567F1BE4001B7A04920C8F7814CA62D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:5a:73:e0:fa:f8:05:81:93:d5:54:f5:bb:
                    bc:b2:4c:de:82:dc:bf:e1:f0:8f:98:e2:4e:54:ed:
                    8e:1b:72:53:0c:e9:ff:d3:de:37:ba:f8:59:bb:ad:
                    78:bc:75:8e:98:53:11:39:e9:46:93:ab:e5:e4:00:
                    1d:5b:64:50:be:80:c1:35:8c:f2:cc:30:87:39:a3:
                    ce:da:3e:b3:b6:93:ae:ed:b1:f7:84:37:f8:14:3a:
                    56:18:48:8e:f1:a9:7a:58:2a:b7:02:29:bf:1d:ac:
                    e5:1f:32:8a:2b:ee:1b:1c:8e:03:73:5b:df:d9:46:
                    96:42:5f:dc:53:27:53:e4:f0:8a:df:6b:22:b0:53:
                    95:2e:2a:bf:94:48:bb:25:b2:25:7e:9c:f8:11:85:
                    51:92:fd:53:f1:96:8f:77:0d:fd:87:02:39:00:9b:
                    af:d8:62:42:b5:2e:bc:f0:b0:a0:42:79:c7:1f:6e:
                    d8:55:64:8e:62:44:4c:7a:ec:f9:55:ac:74:b2:62:
                    55:c6:06:fc:4c:d3:ec:74:f0:91:3e:ca:bc:cc:e1:
                    31:59:f9:76:b0:3c:fb:8b:e6:3d:c8:fd:b3:7f:05:
                    a1:71:58:3f:ce:b8:de:cd:b8:a3:9e:76:67:8b:fe:
                    5e:2c:5f:da:c8:75:9b:4b:d8:ad:12:c6:08:c3:86:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:A6:C9:56:7F:1B:E4:00:1B:7A:04:92:0C:8F:78:14:CA:62:D4
            X509v3 Authority Key Identifier:
                keyid:51:8C:B7:95:45:00:41:B0:53:7F:B0:31:29:01:D7:71:57:9D:CE:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/518CB795450041B0537FB0312901D771579DCEC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/518CB795450041B0537FB0312901D771579DCEC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136362e302f32342d3234203d3e20313530313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ea:a8:28:1a:12:30:93:8c:53:02:35:20:25:54:e5:74:f6:
         f2:bb:54:7f:15:55:47:44:5b:7a:f8:29:d1:b6:2a:fe:8b:06:
         db:bc:b4:84:96:26:ba:8d:ef:dd:bc:76:f4:aa:68:0e:93:90:
         46:fc:f7:b8:3e:0a:1b:05:fa:d3:42:a7:27:99:05:02:bb:1d:
         21:d9:a7:4f:d1:d4:df:dc:b9:6c:05:83:34:80:4a:43:9d:f5:
         cd:cc:29:dc:99:dd:f3:6b:8c:06:16:ba:3b:de:2e:e3:d7:c4:
         d9:3e:f4:f8:95:ca:ae:f4:96:34:83:23:cc:80:df:9d:f1:21:
         11:99:cf:17:c1:24:13:ed:f0:df:54:78:15:9b:79:4d:84:22:
         86:5b:84:de:df:53:07:26:13:ab:64:43:3e:77:34:a4:cf:79:
         af:53:ed:cf:9f:66:87:52:e2:6c:50:4e:5e:2f:11:dd:df:6b:
         b7:02:63:cf:9b:c5:29:85:23:bb:43:2d:8f:b9:49:a9:6a:4c:
         10:f6:40:21:bb:26:06:2c:50:b5:89:fb:6e:ef:05:9f:f4:8c:
         2e:3e:8b:05:a5:89:c8:91:14:35:b2:e3:4d:d3:40:f5:12:8b:
         5b:dc:d5:3e:99:cb:d0:9f:c1:4a:8c:cd:39:c4:8b:ab:f6:78:
         fe:0f:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:18:11 2026 by rpki-client