Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa
File:                     3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (raw, json)
Hash identifier:          oSOhD0LEwgsK8NYbK3kqSQGLarwok4BQsdg7QvLPPyk=
Subject key identifier:   3B:EE:79:ED:78:33:75:BC:DC:7A:38:54:0E:1E:11:2D:18:3C:8D:33
Certificate issuer:       /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial:       20EC9175A222F2AD220877AC99F841A45134CFA0
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa
Signing time:             Sun 03 May 2026 03:02:08 +0000
ROA not before:           Sun 03 May 2026 02:57:08 +0000
ROA not after:            Sun 02 May 2027 03:02:08 +0000
asID:                     149707
IP address blocks:        103.186.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
                          rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ec:91:75:a2:22:f2:ad:22:08:77:ac:99:f8:41:a4:51:34:cf:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
        Validity
            Not Before: May  3 02:57:08 2026 GMT
            Not After : May  2 03:02:08 2027 GMT
        Subject: CN=3BEE79ED783375BCDC7A38540E1E112D183C8D33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:2a:09:f9:8f:5a:fd:3a:09:50:d1:11:16:
                    fc:cd:fa:ec:ff:7a:ab:18:f9:e3:e6:82:03:c0:6f:
                    de:31:a6:cc:be:55:2c:06:90:84:c5:d2:c7:c4:1b:
                    cf:14:8b:fa:ca:c0:b7:62:93:aa:a2:b0:f8:5f:ea:
                    af:ac:a7:5e:c0:c7:68:8d:b3:09:36:8b:1f:d1:3f:
                    bf:f5:5a:b7:02:52:bb:6c:ec:a1:e1:eb:d7:5f:64:
                    4d:92:47:39:34:35:1a:e3:3a:6b:bd:7b:3a:2c:4e:
                    50:12:1b:7c:4d:55:47:7b:d2:a3:0e:24:61:2f:9e:
                    1c:eb:cd:ad:89:22:d2:37:8a:70:22:02:61:27:97:
                    51:9b:ee:27:16:d6:09:4f:58:09:45:37:0e:c0:45:
                    fc:90:34:a4:e5:e7:99:28:29:c1:5a:f9:38:ce:1a:
                    30:b3:95:4b:e6:58:b5:64:bc:a1:a9:4e:b0:f0:da:
                    a0:2a:6a:92:d8:03:e1:e6:d5:49:4b:14:d2:51:02:
                    e1:8c:53:0d:8a:ec:56:dd:00:e8:0f:f5:73:94:6b:
                    ca:ea:3d:c9:86:6d:61:85:37:a3:1c:c6:c4:68:86:
                    f9:6d:e8:20:88:96:5d:91:fa:25:78:51:0c:ba:1c:
                    e0:74:38:2c:26:08:12:7d:a6:ea:d2:bf:bb:c3:b4:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EE:79:ED:78:33:75:BC:DC:7A:38:54:0E:1E:11:2D:18:3C:8D:33
            X509v3 Authority Key Identifier:
                keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:03:f1:39:c6:1d:cc:8b:da:b1:a2:72:b7:ab:7d:46:59:39:
         df:03:d8:ae:68:46:cc:bb:57:1d:7a:83:c3:9c:83:67:4e:d9:
         2f:cf:3b:26:36:d6:cc:35:cf:e6:5e:2b:3f:c5:a9:ad:c7:53:
         85:a8:56:2e:a6:ec:6e:46:5d:06:1c:d7:aa:06:d8:cf:03:9e:
         1f:4c:63:68:22:b5:ae:db:56:6a:3d:ef:bf:ee:62:07:ab:eb:
         2e:40:31:94:6a:e2:30:d8:82:0f:de:4e:f3:c8:40:77:71:9b:
         76:a7:57:1e:a0:88:23:d1:2b:a7:23:52:29:26:7f:67:45:ed:
         60:be:b0:52:c4:aa:95:2d:fe:5d:89:17:ed:dd:25:94:3c:e9:
         61:99:22:7d:5e:a2:fd:29:ff:1f:ff:c4:1d:22:5a:aa:cc:fb:
         fe:39:fc:27:e4:fe:ac:a0:c9:19:43:fa:d1:04:75:95:26:f7:
         5e:74:eb:c6:e5:4e:60:46:9c:ac:42:ab:c6:a5:fb:74:49:ea:
         3d:03:72:e0:9a:b8:63:94:2c:d0:3a:3c:f0:34:be:a4:71:9e:
         bf:38:3b:c9:32:5e:7e:e8:a5:0b:a4:69:10:9f:93:de:2e:19:
         a8:5c:b1:70:b5:a2:3a:6d:d1:2e:72:1a:06:75:1c:29:a0:82:
         b2:e1:63:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:35 2026 by rpki-client