Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
File:                     3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (raw, json)
Hash identifier:          fnDhoiL+V7XHrTgcb34geX86ATfCep/ePS+vjKoYts4=
Subject key identifier:   CF:E6:88:86:07:02:C8:F0:DB:60:83:AE:60:6E:87:63:28:16:1E:6F
Certificate issuer:       /CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27
Certificate serial:       531A2E9A435CEF3B89B5C7639A7F26A636FAF3A8
Authority key identifier: B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
Signing time:             Sun 03 May 2026 03:10:42 +0000
ROA not before:           Sun 03 May 2026 03:05:42 +0000
ROA not after:            Sun 02 May 2027 03:10:42 +0000
asID:                     149706
IP address blocks:        103.186.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl
                          rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1a:2e:9a:43:5c:ef:3b:89:b5:c7:63:9a:7f:26:a6:36:fa:f3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27
        Validity
            Not Before: May  3 03:05:42 2026 GMT
            Not After : May  2 03:10:42 2027 GMT
        Subject: CN=CFE688860702C8F0DB6083AE606E876328161E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:1a:97:18:38:f0:b1:24:44:0c:c8:fd:46:
                    97:cb:fd:83:e8:63:8a:5e:31:82:69:9b:bd:5f:d5:
                    3d:96:a3:f5:73:50:30:c4:e0:a0:99:40:56:82:f9:
                    bc:fa:f3:34:d1:8a:b7:c5:70:d3:c4:3d:95:3d:ab:
                    c9:c8:f6:73:62:6d:22:64:42:a5:d3:f5:4e:9c:83:
                    e8:f6:21:40:9a:80:5f:7d:a3:40:05:1f:8c:d5:08:
                    b5:32:37:47:ee:c1:65:8a:80:0a:4c:9f:8e:f3:27:
                    1d:5a:0a:eb:18:80:54:15:17:42:5c:c8:d6:d3:8a:
                    4e:b4:9c:49:43:6b:1e:5f:df:a4:6d:b8:85:11:cf:
                    01:6a:a7:47:a7:ec:3b:be:8f:19:c1:a7:77:bf:2a:
                    4c:55:df:f3:fe:41:29:f8:d8:46:b6:39:a1:28:89:
                    d8:4d:c6:aa:b5:a9:e8:09:9b:23:06:90:1f:b6:b6:
                    54:06:8e:3f:9b:75:f8:7e:87:a2:51:91:9b:e9:05:
                    81:9b:6f:00:38:6f:c4:08:0b:0f:96:03:86:95:ab:
                    41:00:39:64:b7:45:e6:0e:61:1a:a7:3a:da:6e:fc:
                    39:4b:df:9b:fa:d2:a7:e8:50:e9:ac:40:55:98:7b:
                    6a:17:b3:56:62:53:fd:7a:68:c5:ed:6d:c4:e1:be:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E6:88:86:07:02:C8:F0:DB:60:83:AE:60:6E:87:63:28:16:1E:6F
            X509v3 Authority Key Identifier:
                keyid:B9:A5:C7:ED:38:66:D3:CA:D2:44:DA:B3:64:D5:DE:AB:01:B4:1B:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9A5C7ED3866D3CAD244DAB364D5DEAB01B41B27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:90:3c:bd:8b:6c:b1:c1:2f:6e:cd:b0:ef:b3:07:99:15:79:
         b8:8b:02:76:15:5a:cd:a9:9b:b1:73:b0:cc:e7:30:d4:fa:88:
         3c:5c:d3:e3:68:5e:5e:ad:ea:64:6a:cc:10:18:f0:ef:a9:e7:
         a4:95:17:1b:16:5a:d0:b4:3a:bf:bf:8d:f6:03:28:70:98:16:
         15:14:78:04:3c:7b:19:3f:67:3e:8b:79:47:ad:2c:f8:38:79:
         3a:04:3c:fd:6d:0b:2d:ff:23:a9:4a:70:5a:87:07:79:4e:9b:
         42:86:3b:dc:4a:1a:5d:60:60:7d:6e:09:df:a5:55:5b:a3:ff:
         3e:ed:6f:72:2d:fd:cf:b2:df:33:0a:8c:5b:4d:82:53:cd:b1:
         0b:50:86:54:a5:7c:cb:e9:66:75:3e:93:30:79:ac:af:47:d8:
         2b:f4:fb:0a:f6:71:06:19:e1:71:d1:fd:61:46:91:b3:16:34:
         98:8f:6a:d6:d4:e5:95:bc:76:f0:5f:8f:cb:3e:ba:42:9c:62:
         92:e4:df:23:bf:f6:ed:a1:4c:41:3b:ff:9d:1a:4d:19:c8:9f:
         67:f9:12:2b:9a:a9:27:9d:9f:e5:d6:06:84:32:b5:49:db:3f:
         d8:3b:ef:69:6a:db:8e:7b:7a:9d:98:4f:5a:94:3e:bb:54:12:
         20:53:d2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:04:11 2026 by rpki-client