Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa
File:                     3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (raw, json)
Hash identifier:          6bUEU/g2qE4eAxx1xLeHn2NWPyG7RA0NRzuQx5ize0g=
Subject key identifier:   A3:88:20:3A:32:3E:A7:FC:09:F4:7B:55:39:B5:A5:1B:94:79:D3:A1
Certificate issuer:       /CN=4D98C36AE414DE2AFABA625C601188337044CEB5
Certificate serial:       6CFBDEBB440F9029CC221770A0C1590FC2AE5436
Authority key identifier: 4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa
Signing time:             Sun 03 May 2026 03:09:42 +0000
ROA not before:           Sun 03 May 2026 03:04:42 +0000
ROA not after:            Sun 02 May 2027 03:09:42 +0000
asID:                     149887
IP address blocks:        103.186.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl
                          rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fb:de:bb:44:0f:90:29:cc:22:17:70:a0:c1:59:0f:c2:ae:54:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D98C36AE414DE2AFABA625C601188337044CEB5
        Validity
            Not Before: May  3 03:04:42 2026 GMT
            Not After : May  2 03:09:42 2027 GMT
        Subject: CN=A388203A323EA7FC09F47B5539B5A51B9479D3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:ea:1c:c4:e0:8e:b6:b6:86:a9:4b:5b:9f:
                    29:23:b0:33:f7:e4:9b:61:75:f8:a1:5a:bf:dd:7a:
                    be:fb:d1:70:26:d5:9c:7b:96:f3:95:11:26:34:48:
                    74:23:3e:bd:45:50:e8:ae:fd:52:52:81:c1:54:cc:
                    5f:b8:51:49:85:b4:7a:95:b2:81:e9:e2:d5:09:1f:
                    89:ed:33:ed:16:64:f5:5e:d0:4d:c8:c3:32:55:cd:
                    7a:ae:38:e7:3c:a9:50:a6:be:e1:96:9d:f7:d3:c1:
                    84:b8:31:54:db:5a:9a:1b:39:59:89:29:49:d4:07:
                    ed:b8:86:90:2e:a9:de:89:e7:20:16:da:25:3d:f9:
                    e7:b2:9b:ac:7e:48:58:a3:bb:27:2d:91:15:ba:c8:
                    4e:4b:45:1d:44:83:ed:b7:c7:b2:7a:93:d3:c7:39:
                    31:e0:bb:3c:51:17:8e:06:f0:63:a8:3f:33:83:ae:
                    c1:01:a0:8b:79:60:5d:85:f7:b8:e0:5a:cb:de:55:
                    87:5c:ea:d3:8c:2d:2d:5a:2b:53:18:1a:65:3f:0e:
                    c6:a8:f5:6b:c8:da:9a:b6:05:58:05:ef:54:f3:1f:
                    fa:78:68:63:46:c4:77:6a:2f:af:57:b9:6b:c8:55:
                    3e:a9:16:68:92:ce:f0:46:49:d3:f5:ca:a6:02:84:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:88:20:3A:32:3E:A7:FC:09:F4:7B:55:39:B5:A5:1B:94:79:D3:A1
            X509v3 Authority Key Identifier:
                keyid:4D:98:C3:6A:E4:14:DE:2A:FA:BA:62:5C:60:11:88:33:70:44:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/4D98C36AE414DE2AFABA625C601188337044CEB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4D98C36AE414DE2AFABA625C601188337044CEB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/3130332e3138362e322e302f32342d3234203d3e20313439383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:e2:be:6b:60:16:4a:66:26:5b:4c:98:01:b1:f4:b7:d8:
         16:7f:52:bb:5d:df:4b:52:2c:d6:58:fe:af:6b:93:b4:c2:11:
         0d:12:fd:dc:a7:a7:b2:f9:35:e4:b3:a1:50:22:86:41:2c:e0:
         61:8e:98:2d:39:62:b9:17:62:cb:9c:3b:6f:e9:8c:eb:fb:70:
         75:89:69:0b:60:ea:65:27:3c:54:40:7a:a4:c4:18:bd:63:83:
         74:bb:8a:3c:79:41:98:06:42:b6:7f:8f:05:f0:a6:f5:dc:f5:
         f9:b0:cc:3d:ca:48:f8:b5:32:c0:b8:96:e4:b9:6a:16:68:f0:
         58:c6:82:58:6b:cf:07:25:b4:da:85:db:69:95:47:63:47:ed:
         a9:b4:59:ce:bc:2c:19:c4:ef:37:fb:95:a4:d0:ba:a5:33:74:
         a3:a4:68:a1:2d:8b:b9:6f:fd:cb:aa:05:2f:25:ad:2a:ab:6e:
         c3:72:09:97:3e:5b:9a:f0:51:e4:47:5e:e9:d1:4f:3f:7d:b7:
         0e:56:45:c9:5f:76:87:b0:78:20:b6:01:1a:d4:22:77:58:0e:
         38:02:84:6b:8d:81:b4:47:1d:01:97:40:4e:3f:2d:b7:d7:ad:
         49:c5:f5:03:42:e3:cd:ce:26:ac:11:23:e2:27:60:44:ab:2b:
         c0:81:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:12 2026 by rpki-client