Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa
File:                     3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa (raw, json)
Hash identifier:          ZsJ/jB1I6GIvE0h8Rn6eqplhxHo0cL9KOhuXdGF4spA=
Subject key identifier:   04:21:72:D8:31:C8:39:85:CE:E6:B9:3C:93:C6:72:75:D3:01:D8:91
Certificate issuer:       /CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
Certificate serial:       4ABECFF7461E9C0D3BE6C1C986BBEA766A960E5D
Authority key identifier: 1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa
Signing time:             Sun 03 May 2026 03:08:26 +0000
ROA not before:           Sun 03 May 2026 03:03:26 +0000
ROA not after:            Sun 02 May 2027 03:08:26 +0000
asID:                     149704
IP address blocks:        103.186.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl
                          rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:be:cf:f7:46:1e:9c:0d:3b:e6:c1:c9:86:bb:ea:76:6a:96:0e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA610CFADD727ADAA74FA9BFE8DDFAF27302467
        Validity
            Not Before: May  3 03:03:26 2026 GMT
            Not After : May  2 03:08:26 2027 GMT
        Subject: CN=042172D831C83985CEE6B93C93C67275D301D891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:34:6b:65:89:f6:1b:15:5d:1d:14:5f:31:f4:
                    e7:07:76:f8:35:0a:cb:2e:3b:6d:ff:9d:24:e2:fb:
                    2e:7c:d0:70:89:a1:37:3e:bc:ca:9c:03:78:19:41:
                    c0:ad:64:a5:38:95:d0:0a:fb:55:51:0b:96:ce:68:
                    ed:6c:2f:2d:df:a0:9f:3f:dd:d2:88:91:2d:5b:9f:
                    0a:65:23:a4:0a:8c:e6:7a:f6:66:28:df:6f:5d:cf:
                    df:36:5d:e4:56:56:6c:0b:17:19:3c:0d:dc:fb:8d:
                    ea:7d:3b:78:00:bf:78:19:4b:a7:e1:f1:30:c7:3f:
                    14:d0:45:50:e8:50:31:bf:a9:18:8d:e6:ac:89:33:
                    a5:61:91:fd:a8:9e:fa:fa:8d:b9:4f:52:7a:86:e8:
                    d6:24:63:f3:50:a3:d2:d5:88:8b:e0:a2:56:38:03:
                    64:70:04:13:32:3a:42:09:e4:8e:97:97:9a:cd:72:
                    da:a0:06:0c:ae:7c:4a:e0:88:64:2a:48:2c:b8:1b:
                    7e:ef:74:5c:0b:ac:f3:ae:e8:87:05:66:53:aa:be:
                    4f:89:57:6a:f8:d7:f6:0f:17:18:a6:31:ae:e6:36:
                    a6:aa:29:ae:16:1e:72:8a:eb:fa:19:81:9b:f4:bd:
                    83:ec:de:c6:01:71:b7:56:0e:1c:f0:1b:5e:ac:9b:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:21:72:D8:31:C8:39:85:CE:E6:B9:3C:93:C6:72:75:D3:01:D8:91
            X509v3 Authority Key Identifier:
                keyid:1E:A6:10:CF:AD:D7:27:AD:AA:74:FA:9B:FE:8D:DF:AF:27:30:24:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1EA610CFADD727ADAA74FA9BFE8DDFAF27302467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d10eddcd-7d38-4765-aa26-7e457670423c/0/3130332e3138362e35382e302f32342d3234203d3e20313439373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:55:7f:46:7e:32:d8:3f:16:9a:e5:3f:08:be:4a:2c:1d:
         90:37:e7:99:0e:ed:0f:b1:01:d1:05:32:43:19:3e:ca:b4:d0:
         40:dc:ec:01:73:16:3f:fe:2c:ff:2e:5e:97:f0:df:ea:23:ff:
         70:1c:c2:5e:c5:06:0d:99:c7:88:34:4c:3d:2d:44:ad:b1:1a:
         7a:87:d7:22:ce:6c:c1:a6:35:5b:29:31:6a:8b:66:b5:a2:55:
         47:c5:93:7c:e3:a1:5a:52:1c:55:46:b6:3c:10:78:cc:67:04:
         35:fb:87:a3:e5:df:7e:25:2b:f1:9c:a3:fd:8a:bd:06:3f:3c:
         56:60:e6:29:b3:c2:d6:02:60:9e:d4:5c:6a:d7:cf:18:85:94:
         8d:99:da:1a:79:7f:10:e2:54:42:a1:f3:bd:0a:e3:6c:2c:d4:
         0a:b7:ee:8d:f2:a1:aa:e1:28:b4:9a:ce:e7:ab:ba:e2:b8:9a:
         86:1f:77:d8:05:b6:b9:74:34:fe:0c:97:79:5f:32:34:65:a8:
         27:d0:94:81:db:38:95:53:67:5b:5b:ff:b9:d2:85:84:0a:f5:
         cd:26:00:0e:c0:db:5f:06:5c:c6:e1:f3:7a:b9:6d:97:af:01:
         b9:ce:c7:55:d4:28:e7:69:f9:67:e8:3e:d4:54:62:f8:39:69:
         97:f9:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:22 2026 by rpki-client