Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
File:                     3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa (raw, json)
Hash identifier:          ur7yrhWHiFsydqZ/PScY2ULnHYX291BUphgqfad6RC4=
Subject key identifier:   28:2A:0F:AA:17:DB:E2:D0:E1:E5:21:0E:8B:82:EC:02:F4:24:01:4F
Certificate issuer:       /CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
Certificate serial:       3AFFA5E7ACFB38257770F11975C608998ED65DE6
Authority key identifier: AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa
Signing time:             Sun 03 May 2026 03:05:18 +0000
ROA not before:           Sun 03 May 2026 03:00:18 +0000
ROA not after:            Sun 02 May 2027 03:05:18 +0000
asID:                     149693
IP address blocks:        103.186.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl
                          rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ff:a5:e7:ac:fb:38:25:77:70:f1:19:75:c6:08:99:8e:d6:5d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE03A0FB122D3B828822172D20A923BA84A5CB76
        Validity
            Not Before: May  3 03:00:18 2026 GMT
            Not After : May  2 03:05:18 2027 GMT
        Subject: CN=282A0FAA17DBE2D0E1E5210E8B82EC02F424014F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9d:fa:cd:67:7a:ed:b8:9b:69:32:f3:43:2e:
                    a6:4c:72:e1:74:bf:e5:c4:8d:b5:3e:e5:04:2c:a8:
                    ce:11:ba:86:57:14:25:21:f2:85:f8:35:95:35:eb:
                    fe:57:40:5c:30:c3:48:3f:16:fc:b5:f3:da:be:85:
                    3e:5e:0e:aa:88:30:50:56:bc:bb:2f:0e:8f:7c:4b:
                    76:21:49:d6:70:61:05:72:ad:a8:11:6e:de:ec:c2:
                    6e:68:e9:ac:b3:a5:cc:9a:83:e1:cc:8d:d9:bc:14:
                    b2:28:b5:25:80:cd:df:2b:42:d6:9e:71:d1:c1:d3:
                    4e:a5:bc:73:02:2e:6e:2b:3f:21:0f:93:a8:ca:57:
                    3c:82:cb:6a:9e:13:f6:69:4c:f3:49:40:00:63:ab:
                    ca:84:3e:18:2c:e3:21:7c:3d:32:f2:7a:e3:c4:3c:
                    32:d4:ca:36:e5:15:37:da:a0:09:d4:74:98:6b:92:
                    5d:c3:81:63:39:2d:e9:09:fa:8c:92:33:db:dd:f1:
                    64:2e:3c:80:72:3a:82:4e:cb:45:4b:43:2a:04:80:
                    6c:be:52:c3:1b:21:ff:73:d3:5b:3c:bd:63:89:fc:
                    55:b4:00:36:66:04:e6:8a:af:ec:95:16:c1:85:b0:
                    3a:36:c2:64:9a:87:93:69:22:dd:be:dd:9a:56:01:
                    82:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2A:0F:AA:17:DB:E2:D0:E1:E5:21:0E:8B:82:EC:02:F4:24:01:4F
            X509v3 Authority Key Identifier:
                keyid:AE:03:A0:FB:12:2D:3B:82:88:22:17:2D:20:A9:23:BA:84:A5:CB:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/AE03A0FB122D3B828822172D20A923BA84A5CB76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AE03A0FB122D3B828822172D20A923BA84A5CB76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c61e9de2-a4ec-47a2-9bb8-10821dda67f3/0/3130332e3138362e39372e302f32342d3234203d3e20313439363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:81:71:cf:95:90:37:f8:33:fb:85:2d:62:66:ea:07:29:
         d9:77:06:1e:f0:12:3f:61:c5:bf:81:11:df:45:8a:fd:fe:c7:
         f8:ba:4a:30:4e:9c:e6:79:06:8e:29:08:bf:92:7c:bf:94:c6:
         1c:e3:ca:76:d6:37:dc:29:db:2f:78:11:74:96:b4:ab:c4:ee:
         bb:c7:02:69:c3:88:e0:62:79:f5:f9:4f:97:0a:46:fd:0a:57:
         3a:c1:e9:4f:42:b5:cb:f7:88:24:1d:35:da:5a:24:e8:bb:a7:
         8e:d4:7a:34:1e:58:90:75:51:fe:7c:72:28:51:81:92:7c:84:
         ed:0a:45:d9:b5:11:1e:f4:97:66:57:5c:44:92:3f:01:12:dd:
         c9:2a:47:da:bb:94:34:71:e7:66:c6:16:2f:85:9c:3c:f4:26:
         b8:15:8b:ab:49:7b:fe:84:95:f4:5e:61:8e:80:0d:ea:d8:bd:
         90:00:1c:9d:5b:40:ba:f4:af:4a:ec:11:48:c2:7a:dc:df:71:
         2a:26:0c:ed:4c:ea:0f:00:d3:dc:71:50:2a:0c:d5:8d:0f:32:
         84:0c:a4:46:de:9f:a2:d7:cb:c5:53:c6:42:be:4d:71:d3:ff:
         0a:df:8b:19:13:de:f6:9c:5f:6f:08:8d:29:c4:0a:29:25:4b:
         99:5b:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:36 2026 by rpki-client