Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
File:                     3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (raw, json)
Hash identifier:          Avv7/9ccLlQ1aIPCfbfxFrVouBultgrgCwZuIM827ow=
Subject key identifier:   95:FA:44:B4:DA:D8:6E:AA:F5:1D:AB:5D:A4:3D:90:9E:82:AA:83:89
Certificate issuer:       /CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
Certificate serial:       6198DFDE5DF479AAB05CF9DC7E7C5E033511272E
Authority key identifier: A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
Signing time:             Sun 03 May 2026 03:06:15 +0000
ROA not before:           Sun 03 May 2026 03:01:15 +0000
ROA not after:            Sun 02 May 2027 03:06:15 +0000
asID:                     149721
IP address blocks:        103.186.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl
                          rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:df:de:5d:f4:79:aa:b0:5c:f9:dc:7e:7c:5e:03:35:11:27:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D60217388DCEE6897BDA5BC6D5190317CEC0EC
        Validity
            Not Before: May  3 03:01:15 2026 GMT
            Not After : May  2 03:06:15 2027 GMT
        Subject: CN=95FA44B4DAD86EAAF51DAB5DA43D909E82AA8389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:c6:9f:d4:1a:d5:f2:4d:29:eb:55:cd:10:
                    0f:b4:87:a4:89:d6:58:35:6e:c0:f6:69:3f:3c:00:
                    50:19:06:bb:78:d9:31:e4:ee:d2:0f:9c:47:e0:6b:
                    1c:81:3e:71:e9:5f:09:21:2f:df:7e:c5:d8:23:49:
                    52:ec:b3:5d:42:49:7c:13:4d:c6:20:cd:55:48:d5:
                    64:ed:59:05:fd:e6:79:0e:c6:6f:1e:99:ec:1b:e0:
                    af:8a:ea:49:89:bd:f2:90:2a:b3:6c:5f:fc:9a:3d:
                    68:8a:a7:52:b8:4b:c7:27:36:76:1c:7e:a7:7a:a0:
                    b2:4f:96:6b:c9:0b:42:2c:01:ef:dd:c4:0b:cf:5f:
                    7d:aa:66:8c:54:c6:d5:3b:60:ce:a1:28:18:04:29:
                    32:79:eb:6b:2c:81:c8:a3:68:19:11:38:1d:58:17:
                    b3:d6:d2:ea:b2:15:b4:b3:db:d6:90:9c:4b:01:75:
                    3b:dd:8a:09:7c:f6:46:af:ea:84:d8:ae:0d:ee:a3:
                    99:8c:d6:d3:dd:6c:fc:63:1a:fa:b1:29:6e:d5:aa:
                    95:82:62:d5:84:b2:aa:de:94:77:83:ef:bc:ea:59:
                    f2:27:50:58:69:95:2f:cc:4a:16:a9:9e:48:59:6c:
                    e9:7f:7e:ed:98:41:e1:eb:4e:b5:f5:e6:81:5b:09:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FA:44:B4:DA:D8:6E:AA:F5:1D:AB:5D:A4:3D:90:9E:82:AA:83:89
            X509v3 Authority Key Identifier:
                keyid:A8:D6:02:17:38:8D:CE:E6:89:7B:DA:5B:C6:D5:19:03:17:CE:C0:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A8D60217388DCEE6897BDA5BC6D5190317CEC0EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:aa:22:06:37:60:95:96:52:02:6a:83:9d:93:fc:ae:a9:06:
         9e:e5:a4:31:f2:a4:08:e2:fc:fb:fd:68:5f:ad:c9:a9:87:83:
         6d:6a:47:29:3b:bc:e9:3a:77:f1:74:57:c6:09:61:55:dd:17:
         b1:de:1d:55:04:0c:69:4d:0b:e2:17:a5:26:19:19:15:db:ea:
         d1:0c:85:7f:67:81:36:89:17:2c:57:26:e6:26:c1:1f:6a:e2:
         06:c5:c7:87:8a:22:bc:06:97:16:3f:68:3a:57:b5:6e:f1:59:
         af:d4:d9:65:67:64:a2:e9:b9:5e:0f:b5:2a:09:d2:56:6c:f7:
         f8:d0:2d:a8:b3:b8:fe:ee:38:32:3d:df:5b:9e:75:35:1f:90:
         02:25:3b:b0:47:4c:ed:9a:70:54:a2:a4:0e:97:25:c1:b2:d6:
         8d:9a:17:a4:9a:71:ac:43:56:66:2c:f8:5f:02:6b:80:87:e3:
         9a:46:e0:13:61:a2:65:70:51:a9:bd:a4:f2:30:3e:b8:8f:6c:
         3e:b1:cc:93:26:55:ee:37:42:f5:a4:dc:a5:9b:19:1f:04:65:
         0b:1f:24:ca:96:21:14:67:ea:23:de:ae:93:8b:c3:cd:27:d2:
         63:57:b6:38:20:f9:d9:31:0c:62:ae:1f:1f:28:e7:f3:55:93:
         28:59:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:46 2026 by rpki-client