Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa
File:                     3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (raw, json)
Hash identifier:          A1UPMpA/Hruv5HF5ZTfkwinBjJ7pR0VpCWP5yD8H86U=
Subject key identifier:   3F:65:45:5B:92:98:AD:A3:72:3D:B3:02:49:F6:98:5B:CC:88:DB:10
Certificate issuer:       /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial:       38E75786D3418CF001D8E98E01D5529C28560CD8
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa
Signing time:             Sun 03 May 2026 03:02:07 +0000
ROA not before:           Sun 03 May 2026 02:57:07 +0000
ROA not after:            Sun 02 May 2027 03:02:07 +0000
asID:                     149707
IP address blocks:        103.186.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
                          rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e7:57:86:d3:41:8c:f0:01:d8:e9:8e:01:d5:52:9c:28:56:0c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
        Validity
            Not Before: May  3 02:57:07 2026 GMT
            Not After : May  2 03:02:07 2027 GMT
        Subject: CN=3F65455B9298ADA3723DB30249F6985BCC88DB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:a2:7b:b0:9e:ae:d0:7e:8e:4f:be:eb:49:
                    43:9f:c4:14:68:62:4b:34:8d:87:86:48:c9:34:f8:
                    00:c2:21:7f:61:73:43:f4:c3:f1:e1:1d:17:4b:50:
                    0a:ef:ef:e5:64:39:28:86:f3:67:03:46:b1:f5:94:
                    3b:3d:eb:69:ca:5a:23:25:7b:04:95:5a:f1:da:45:
                    0e:0a:34:2f:93:38:0a:88:9f:9e:ad:09:36:9a:b9:
                    a6:5a:26:0f:6d:82:fa:bf:d1:8c:35:c8:93:a1:cc:
                    ce:bb:fc:22:dc:f3:7e:01:c0:2a:3d:2c:b5:a7:2d:
                    a0:eb:69:0f:ab:d0:84:88:94:a5:74:36:c1:eb:05:
                    ae:f8:90:e4:14:62:94:1b:51:f7:2c:c1:5a:51:e8:
                    b2:6f:d0:6f:4a:07:f3:50:5d:d8:1a:46:64:c6:74:
                    a4:05:7a:6b:e3:54:29:57:4a:8a:2a:1f:32:5a:df:
                    b0:22:43:4d:87:bc:7f:89:a8:96:56:ff:fc:a3:aa:
                    86:48:9b:24:a8:05:c2:da:f9:a2:7a:11:b5:1c:89:
                    17:2d:cb:8c:92:eb:a4:27:39:28:72:7f:ea:03:78:
                    fb:be:ae:e7:24:ba:e0:67:4e:74:05:e3:db:01:86:
                    a3:81:bb:2d:1c:ae:6c:e0:d9:aa:1a:43:80:ca:94:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:65:45:5B:92:98:AD:A3:72:3D:B3:02:49:F6:98:5B:CC:88:DB:10
            X509v3 Authority Key Identifier:
                keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:39:52:ae:5d:db:16:3c:04:3b:8d:e8:99:47:c3:0c:6c:12:
         f3:f9:5f:f7:da:9a:0f:73:03:30:3a:7d:38:06:0e:80:a9:0c:
         3e:4f:78:fc:d5:1f:f7:fa:97:8b:19:7e:88:0d:88:66:b9:7d:
         72:2b:40:14:ea:1d:75:7f:c8:d8:89:1f:e1:23:d3:4e:f4:0b:
         6c:1c:43:68:e7:82:93:b4:08:92:13:3a:e1:0c:43:07:30:d1:
         89:30:fc:e6:52:6b:58:48:03:9d:b7:9d:be:80:d5:54:8f:b3:
         9e:53:bd:80:81:dd:6d:fb:b7:ab:48:b5:3f:12:63:12:69:ff:
         18:3f:29:fa:3e:7a:c7:18:fc:ca:e6:ba:7d:3d:f9:70:a6:f1:
         1f:2b:cf:f0:c1:bc:4b:a6:e5:2a:85:d3:db:82:1c:69:23:88:
         6a:c7:aa:65:e8:54:89:e9:f3:e0:82:37:6e:3c:35:18:d9:2c:
         a6:e5:eb:52:04:55:fd:37:df:e2:33:b9:ea:81:f8:cf:04:7f:
         4a:da:92:e7:f3:42:1a:3e:3a:d8:12:e9:57:9a:6a:36:c2:b1:
         8c:62:b4:10:2b:26:9a:b6:0e:50:ad:53:c8:6e:a4:ff:f6:c0:
         f4:b5:4c:07:7f:82:84:b8:cf:89:c6:ec:a1:f9:85:e7:e9:af:
         8a:5e:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:15 2026 by rpki-client