Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa
File:                     3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa (raw, json)
Hash identifier:          SF6wFvB92++pgvhJiz3ViTnExdueiHmwDxFQcyeOg9g=
Subject key identifier:   91:18:8C:1D:44:88:17:5C:1D:BD:D4:CF:63:E5:17:08:EC:B7:C1:6D
Certificate issuer:       /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial:       1AC7EB5E0B8152470362549DBA13E1EB36322DC6
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa
Signing time:             Wed 23 Sep 2026 04:02:14 +0000
ROA not before:           Wed 23 Sep 2026 03:57:14 +0000
ROA not after:            Wed 22 Sep 2027 04:02:14 +0000
asID:                     154217
IP address blocks:        103.186.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
                          rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 06:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c7:eb:5e:0b:81:52:47:03:62:54:9d:ba:13:e1:eb:36:32:2d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
        Validity
            Not Before: Sep 23 03:57:14 2026 GMT
            Not After : Sep 22 04:02:14 2027 GMT
        Subject: CN=91188C1D4488175C1DBDD4CF63E51708ECB7C16D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:85:3c:02:75:8f:16:10:18:2b:ea:63:1b:
                    ac:47:42:65:c1:73:53:22:4b:af:a8:0b:81:4e:05:
                    f3:76:3d:8f:c1:29:84:5b:f4:2a:5a:74:40:1a:db:
                    17:67:8b:da:4d:ec:4d:4e:13:6c:c6:91:40:9c:21:
                    5e:34:73:c8:95:44:e7:cb:23:da:f7:ab:eb:bb:e9:
                    42:43:97:89:c8:d1:d9:be:14:6a:76:f6:48:52:e5:
                    99:e5:74:ab:4d:7c:28:61:66:f7:88:a9:3c:3a:bf:
                    21:0f:64:d3:3f:41:b4:05:73:63:cb:95:95:45:66:
                    4d:61:3e:5a:5d:06:c0:63:af:3e:40:fb:35:60:48:
                    d2:b2:d4:66:ad:81:74:e6:0b:21:85:9b:f8:3e:a4:
                    bd:50:e9:ce:b4:eb:39:dd:3d:24:23:cd:47:37:53:
                    be:15:93:ba:68:ad:8a:0e:e6:e9:69:8f:ba:b9:ea:
                    6e:93:d2:5c:ce:d9:0a:b8:ea:dd:a1:79:27:f4:f2:
                    55:6b:16:f8:e2:dd:7f:29:52:17:17:30:d5:bb:97:
                    a6:2e:09:9f:18:c6:56:fe:f3:b2:33:70:98:10:48:
                    0c:1a:d4:c9:53:5d:ca:d6:87:44:94:c7:e5:68:c2:
                    64:bc:8f:cb:76:7a:f3:25:df:61:c9:1e:7f:51:40:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:18:8C:1D:44:88:17:5C:1D:BD:D4:CF:63:E5:17:08:EC:B7:C1:6D
            X509v3 Authority Key Identifier:
                keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32342d3234203d3e20313534323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a1:82:51:66:1e:90:f1:eb:21:11:92:1b:c7:85:65:35:8a:
         ba:75:ba:fc:6e:53:e4:1f:a0:75:ad:91:15:9a:f7:46:22:0c:
         3b:ef:a4:18:a2:11:6e:36:81:88:bf:4a:3c:6e:87:0b:00:05:
         1d:1f:78:64:e2:39:5a:d7:55:dc:00:a0:94:ac:ed:fa:e4:02:
         4e:6c:0c:a3:10:66:18:dd:ea:70:0a:f3:f9:42:cc:82:b6:1e:
         48:b4:70:0c:84:90:dd:0b:63:3f:e8:5e:64:3b:0c:93:61:65:
         96:50:81:0f:68:5c:48:03:bd:dd:e7:b3:0a:25:3e:d4:ad:d9:
         8d:54:b2:c4:22:93:6b:a3:af:d4:9b:dd:25:af:0b:4f:31:62:
         b6:40:16:54:ea:6e:b8:80:c8:2e:a8:5c:54:c1:70:34:d8:58:
         5c:85:82:1a:f5:c8:46:cd:ff:ff:9d:c3:83:4f:67:c3:0e:57:
         bf:31:7a:2f:b8:a7:4f:25:58:e8:38:ad:c7:25:24:48:aa:47:
         a8:1b:32:f4:8d:96:dd:5d:9c:ba:c8:ac:aa:ec:bd:8e:33:82:
         2b:a7:62:fb:16:aa:7a:86:d1:ab:57:26:7e:9b:a5:b6:3a:2a:
         82:d4:08:8b:f1:e3:c1:a2:73:fe:b8:b0:5c:95:47:62:0a:72:
         4c:ac:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:36:32 2026 by rpki-client