Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa
File:                     3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (raw, json)
Hash identifier:          GsH7B+XyAawDhvDqUFn24fkcJE7vhqfxiJ0QGis3RmA=
Subject key identifier:   A0:88:CE:1C:92:A9:C4:4C:6F:A0:CE:4B:7B:FB:1B:6D:4A:FC:5B:05
Certificate issuer:       /CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
Certificate serial:       4F32AA597D5CAA3E0EAD3E794CA3B11CF074FF00
Authority key identifier: 14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa
Signing time:             Sun 03 May 2026 03:02:08 +0000
ROA not before:           Sun 03 May 2026 02:57:08 +0000
ROA not after:            Sun 02 May 2027 03:02:08 +0000
asID:                     149707
IP address blocks:        103.186.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl
                          rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:32:aa:59:7d:5c:aa:3e:0e:ad:3e:79:4c:a3:b1:1c:f0:74:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A
        Validity
            Not Before: May  3 02:57:08 2026 GMT
            Not After : May  2 03:02:08 2027 GMT
        Subject: CN=A088CE1C92A9C44C6FA0CE4B7BFB1B6D4AFC5B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:21:be:9e:06:8e:80:20:84:f5:d0:fc:52:
                    1e:34:97:a1:6c:9b:6d:c9:b9:18:5c:49:f0:08:b7:
                    23:d2:0b:4f:53:4b:c7:da:c7:5f:05:74:4e:5b:d0:
                    a7:68:c6:6a:52:02:0c:ab:16:a0:26:5c:ff:4f:c8:
                    3f:7d:c9:68:b9:25:3d:2d:f8:d7:63:17:96:3c:6e:
                    d1:1c:6c:ee:6e:c2:6f:a1:dd:21:c8:5b:83:bf:76:
                    dc:de:13:00:56:67:6f:f3:b3:11:c8:31:06:16:59:
                    23:c0:bb:92:dd:6e:0d:1b:a5:b2:a1:c7:fb:37:06:
                    da:ba:30:0e:06:43:c4:95:03:74:b5:cc:ef:0d:ad:
                    ef:38:3a:cf:4c:44:b8:69:ed:cc:2a:e4:ef:24:d1:
                    95:3f:37:ab:8b:22:85:cb:c8:c3:81:6b:5a:78:49:
                    6a:85:47:8a:20:0c:7a:8a:99:87:37:7a:a0:22:7d:
                    cf:9c:df:fa:58:c9:c0:a5:38:e9:46:e2:cf:e4:1b:
                    8d:cb:9f:71:d6:b4:bb:76:83:e5:59:36:e6:c7:a2:
                    73:ef:1f:45:24:92:c0:9b:1e:12:17:eb:6a:12:fd:
                    4c:ae:e0:35:ba:e9:8e:55:e2:27:25:94:c7:41:45:
                    24:e4:2b:97:6c:6c:9c:94:73:1f:0f:13:e0:12:71:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:88:CE:1C:92:A9:C4:4C:6F:A0:CE:4B:7B:FB:1B:6D:4A:FC:5B:05
            X509v3 Authority Key Identifier:
                keyid:14:83:AD:C9:7A:CA:45:EE:C6:AB:EC:76:11:9F:13:21:C6:7E:4E:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1483ADC97ACA45EEC6ABEC76119F1321C67E4E1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4c:e2:80:35:8f:c6:ca:bd:19:0e:da:cf:d1:aa:ee:f0:81:
         22:b0:72:7e:59:3c:d1:5e:1e:af:a2:90:9b:e3:b0:d3:de:07:
         65:4a:17:2a:82:1e:d5:42:af:16:2e:0e:77:3c:84:5a:47:3a:
         98:a8:27:ef:f0:46:d0:a3:5a:77:51:dd:83:ee:b5:33:b2:94:
         1b:72:e6:27:26:3b:53:09:60:81:8f:1d:88:e9:5b:94:c0:cf:
         76:a0:fe:b1:5a:d2:5f:4e:73:fe:05:79:c9:36:fb:6b:f2:10:
         ac:9e:04:d6:95:09:ae:dc:33:18:10:4e:e0:2b:d8:1b:73:3f:
         4c:e7:fe:51:47:86:54:e7:40:58:88:c5:96:98:e7:6c:13:53:
         8e:a2:8a:b8:9b:a4:01:1b:75:48:88:4f:cb:c9:9b:1a:d2:2d:
         d1:a1:41:2f:9a:68:da:49:8b:5a:e8:24:33:9a:d1:33:27:aa:
         4f:9c:f6:fc:a0:01:5e:f2:fb:8d:3e:a5:cb:5c:a8:3e:c7:85:
         7c:c3:50:53:7a:2f:f8:e3:7f:f2:e5:d0:fe:c8:27:34:7b:3a:
         0f:17:f2:d2:83:ac:c5:b0:81:74:be:1e:8d:01:93:69:94:ae:
         65:84:f1:0c:04:05:ae:c5:c6:b8:01:ee:17:44:fe:fd:aa:84:
         e3:ba:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:23 2026 by rpki-client