Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa
File:                     3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa (raw, json)
Hash identifier:          ySzed5uDLDabSH9SesSAtowh1c9UjHu8DGpoOUcm2mA=
Subject key identifier:   64:EA:90:84:68:F1:AC:9C:38:BB:FD:76:89:2A:6A:3F:E6:96:3E:05
Certificate issuer:       /CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
Certificate serial:       67C68266772D9FCF8552D84E378A924030AF2384
Authority key identifier: 01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa
Signing time:             Sun 03 May 2026 03:10:11 +0000
ROA not before:           Sun 03 May 2026 03:05:11 +0000
ROA not after:            Sun 02 May 2027 03:10:11 +0000
asID:                     150551
IP address blocks:        103.190.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl
                          rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:c6:82:66:77:2d:9f:cf:85:52:d8:4e:37:8a:92:40:30:af:23:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0
        Validity
            Not Before: May  3 03:05:11 2026 GMT
            Not After : May  2 03:10:11 2027 GMT
        Subject: CN=64EA908468F1AC9C38BBFD76892A6A3FE6963E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:dd:1c:d4:37:3c:42:fe:8f:39:43:ba:b3:
                    68:ce:b3:47:40:bf:16:f1:29:3f:94:d4:ca:9d:00:
                    ea:e2:47:28:c0:1a:e4:68:4e:19:db:80:55:87:65:
                    6f:de:21:78:bc:81:a8:39:71:bb:f3:a1:2f:54:6b:
                    9d:22:41:cc:41:0a:25:75:21:32:56:66:17:eb:ae:
                    af:6c:ed:9a:89:58:3b:b1:2e:a7:1b:25:34:91:3d:
                    dc:0c:7e:77:83:3d:8d:0c:e2:0f:b7:80:04:b0:1e:
                    3e:01:57:e2:b1:22:6c:23:a8:f3:b9:ea:69:47:7a:
                    e9:37:31:64:b0:06:98:34:91:ae:7d:30:dc:8d:45:
                    e9:8a:47:75:6d:0b:9f:d8:b6:c5:b1:50:d3:94:b4:
                    3b:4b:30:ad:1b:f7:43:de:81:7b:f5:86:49:8f:b5:
                    06:4d:7b:dd:c2:65:ca:b6:c3:96:8a:8c:9f:0c:73:
                    ac:ef:03:fa:75:c3:ac:64:80:ea:f4:b6:06:d4:e0:
                    4d:54:76:a0:dd:3f:44:21:3b:6c:ed:0e:26:8d:dc:
                    10:0d:f2:fa:26:3f:6d:7c:83:b1:4c:12:76:78:af:
                    8a:41:70:cc:07:cd:ef:91:50:f8:29:73:a5:f1:bd:
                    19:a2:a7:74:b3:12:b5:44:24:c5:f9:93:a1:b9:72:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:90:84:68:F1:AC:9C:38:BB:FD:76:89:2A:6A:3F:E6:96:3E:05
            X509v3 Authority Key Identifier:
                keyid:01:F3:FD:C8:60:81:CF:E1:B3:4E:89:CC:89:FD:13:E3:FC:55:20:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/01F3FDC86081CFE1B34E89CC89FD13E3FC5520A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d798091e-c1ae-4049-96d2-c4ce37fdc35b/0/3130332e3139302e39342e302f32342d3234203d3e20313530353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:6c:08:5a:a8:9b:d4:a5:eb:b1:22:9c:ee:b6:07:88:a0:09:
         e4:5a:7d:c3:06:ce:f9:01:d5:b0:4c:37:44:6e:5f:33:e1:72:
         91:c8:e6:0f:d5:71:96:86:a0:65:d1:c6:40:95:1d:c5:cd:9b:
         85:8d:3c:35:57:91:e2:3b:2b:1a:12:d5:9c:c2:9e:79:17:f4:
         18:cf:d0:41:3d:26:d1:da:40:04:b9:47:7e:5c:6b:e0:49:8b:
         ac:0b:b2:cc:2d:01:90:43:5a:a1:b6:d3:0a:00:ed:bf:fa:ff:
         35:26:6c:6c:a0:cc:2d:d2:c5:e2:09:f7:db:a4:4c:57:21:01:
         f6:b5:f5:27:c1:11:21:d2:a4:02:0e:d0:b8:ac:e0:39:1a:84:
         39:d7:be:9d:b1:18:36:4f:a6:47:f6:8f:f1:a0:92:26:d8:f5:
         3b:ec:03:5d:f8:90:df:37:a1:9b:e5:e5:29:66:8f:d4:44:9c:
         44:fb:26:a4:72:3d:22:8f:2f:13:1b:3a:56:5f:91:45:72:14:
         54:84:47:a1:dc:c3:c9:e4:9d:25:bd:0a:01:33:15:28:fd:f1:
         97:bd:06:8e:10:17:bb:0d:16:c7:f4:3d:cd:1e:1e:bc:19:a3:
         6b:e8:ec:aa:25:de:86:c2:81:4b:10:1d:c9:b0:90:b2:49:66:
         6d:4e:33:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:32 2026 by rpki-client