Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa
File:                     3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (raw, json)
Hash identifier:          geMBt2/v9mDAfVwndEzecLfwDT1q5GpeHQvNLrPctqk=
Subject key identifier:   B4:30:41:E9:9E:6C:7C:5F:61:90:BD:D8:08:0B:6E:70:2E:63:0D:53
Certificate issuer:       /CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
Certificate serial:       4B4106A3698CDBAC278A441EF62947486EFC348F
Authority key identifier: FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa
Signing time:             Sun 03 May 2026 03:07:47 +0000
ROA not before:           Sun 03 May 2026 03:02:47 +0000
ROA not after:            Sun 02 May 2027 03:07:47 +0000
asID:                     149740
IP address blocks:        103.186.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl
                          rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:41:06:a3:69:8c:db:ac:27:8a:44:1e:f6:29:47:48:6e:fc:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD82EB0CDF26FC9F52BB482D255A26374FB297F2
        Validity
            Not Before: May  3 03:02:47 2026 GMT
            Not After : May  2 03:07:47 2027 GMT
        Subject: CN=B43041E99E6C7C5F6190BDD8080B6E702E630D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:eb:5f:5d:99:8f:fb:55:47:e7:91:cb:23:ef:
                    59:bc:4e:8e:72:38:41:8a:9b:df:fe:e4:5b:a0:5e:
                    6a:11:5a:79:cf:47:1f:7e:26:7e:cd:ed:df:3e:b6:
                    89:37:a2:4e:60:b0:5b:3a:27:67:e6:dd:33:fe:29:
                    a2:40:51:5d:a5:2d:dc:6a:32:c8:7a:b4:c7:ca:ce:
                    36:f4:02:01:7c:0c:bb:cd:bf:bf:3a:04:ab:44:d0:
                    cd:e5:66:c4:9e:79:35:3c:1e:f9:c0:bc:73:44:fd:
                    a6:f7:a4:9f:c1:74:b9:ed:81:41:7d:d3:08:4c:5e:
                    38:93:2f:b6:f5:27:dd:a7:0b:4d:61:2a:3b:37:d9:
                    ab:f8:c8:3c:00:5b:09:fb:17:d6:b0:a8:d3:13:e0:
                    0c:e8:7c:bd:da:da:f1:61:59:eb:3e:82:ea:cf:97:
                    df:c3:6c:16:39:ec:41:7a:3b:f3:b5:84:69:e0:80:
                    79:c5:ff:ef:af:74:96:dd:b0:4e:ec:47:07:07:38:
                    51:42:37:fc:2e:2f:d9:a3:62:b7:c8:f2:3b:09:fe:
                    8b:19:9a:03:ca:79:c7:4a:c7:c8:b3:ad:9f:79:47:
                    19:6f:da:e4:86:88:07:5d:78:81:21:91:49:68:1a:
                    52:ea:e0:eb:fe:38:ee:74:42:47:b9:f7:05:1a:79:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:30:41:E9:9E:6C:7C:5F:61:90:BD:D8:08:0B:6E:70:2E:63:0D:53
            X509v3 Authority Key Identifier:
                keyid:FD:82:EB:0C:DF:26:FC:9F:52:BB:48:2D:25:5A:26:37:4F:B2:97:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD82EB0CDF26FC9F52BB482D255A26374FB297F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:d0:e5:33:e9:3d:49:b5:89:9f:1b:36:7e:2e:56:0f:27:68:
         25:62:ca:29:cf:82:19:82:f4:87:54:92:dd:63:b8:6d:72:b2:
         d4:62:bb:bb:c2:5a:29:a1:90:4f:38:aa:5f:c0:53:7b:28:e2:
         99:67:e2:32:ed:68:c0:1d:4d:5a:84:dd:6c:8b:62:16:33:6f:
         b0:2c:38:5c:71:d8:4f:f9:77:cc:ba:ab:cd:fc:0e:04:d5:ef:
         78:2a:87:a9:20:0d:0a:ba:7f:8c:e3:13:c5:48:8f:9d:ec:d3:
         3b:46:05:a0:fd:31:fe:5d:97:c9:5c:f8:dd:0a:a3:ee:87:c8:
         46:a0:22:f1:de:02:7f:7d:39:6e:50:7d:93:f7:71:a9:b7:bd:
         ea:8f:47:46:fc:79:f4:8c:40:87:bb:cb:5f:6a:f8:b3:20:06:
         41:a5:55:b7:32:da:a6:59:e9:a1:d2:48:b6:83:94:3c:8b:93:
         c4:bc:78:05:ed:7a:7e:c9:23:dc:30:09:62:16:f8:c8:f0:4e:
         39:46:fb:6e:82:e7:d5:47:ab:74:72:de:e9:54:36:35:92:82:
         2a:0c:81:1f:be:9a:9a:73:68:6b:67:82:8a:5a:82:22:f8:30:
         8f:01:ee:6f:d0:ed:14:48:3c:fe:44:a7:c6:de:f6:6d:ad:59:
         36:10:17:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:48 2026 by rpki-client