Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
File:                     3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa (raw, json)
Hash identifier:          rp1e1zzn4/8hrijf1AXdkJbP5FeTjYw1wnI20jUxS/k=
Subject key identifier:   26:D6:84:43:BC:5A:B2:43:1E:8B:2E:AD:48:13:50:30:73:77:A1:16
Certificate issuer:       /CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
Certificate serial:       3A75860ABFB03146839305AFB4E7C43D6A4A7ACC
Authority key identifier: 93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa
Signing time:             Sun 03 May 2026 03:11:25 +0000
ROA not before:           Sun 03 May 2026 03:06:25 +0000
ROA not after:            Sun 02 May 2027 03:11:25 +0000
asID:                     149690
IP address blocks:        103.186.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl
                          rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:75:86:0a:bf:b0:31:46:83:93:05:af:b4:e7:c4:3d:6a:4a:7a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9370AF17CF894C561A727E816DE3B11D5D8AAD9C
        Validity
            Not Before: May  3 03:06:25 2026 GMT
            Not After : May  2 03:11:25 2027 GMT
        Subject: CN=26D68443BC5AB2431E8B2EAD481350307377A116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:b8:11:95:60:a0:d5:81:95:7c:27:53:63:
                    b3:0c:f5:7c:e9:3e:4e:a4:b3:f0:25:79:cd:a5:b9:
                    89:32:8b:bc:26:7e:aa:e7:09:65:47:41:99:5d:b9:
                    14:7e:d6:e2:bf:dc:ea:51:7b:2e:4a:74:87:32:68:
                    b4:c1:fb:3c:e5:c6:7f:66:71:19:b2:b9:b0:3d:75:
                    c1:20:18:08:a4:5d:7d:c2:e0:43:c7:a9:b7:2b:1e:
                    cf:ad:39:ff:a1:dc:a1:9a:e6:57:20:c5:94:9b:ee:
                    22:1c:64:23:67:85:25:8d:e4:c0:f3:c7:4b:50:09:
                    8f:33:54:c9:e3:68:bc:3a:dd:8a:4c:62:bf:03:de:
                    d7:94:59:87:8f:8e:ae:71:45:0b:c6:02:75:04:ee:
                    c8:e7:a2:e6:00:1f:64:05:a3:81:54:42:4a:47:d4:
                    71:31:5d:d0:7f:f0:7d:a6:a8:5d:e6:49:9f:f6:7c:
                    7f:81:a6:72:6b:54:7d:64:60:dd:fe:d8:0a:c9:fb:
                    56:04:e1:fc:59:31:6f:53:f0:1c:ce:c3:ef:e4:33:
                    11:16:53:42:24:10:dd:f6:cf:b9:ae:35:c8:ee:95:
                    53:c8:af:6d:df:a0:fe:f1:7a:34:dc:aa:87:d4:99:
                    e3:d4:19:78:6f:8f:a2:aa:01:2c:e1:f4:fb:41:b9:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D6:84:43:BC:5A:B2:43:1E:8B:2E:AD:48:13:50:30:73:77:A1:16
            X509v3 Authority Key Identifier:
                keyid:93:70:AF:17:CF:89:4C:56:1A:72:7E:81:6D:E3:B1:1D:5D:8A:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9370AF17CF894C561A727E816DE3B11D5D8AAD9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dce9f43d-08ba-4d02-8f38-74732f15cd8c/0/3130332e3138362e33322e302f32342d3234203d3e20313439363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:24:23:a0:7e:c6:18:eb:07:1f:47:b0:40:cf:c8:63:87:
         6e:95:4c:58:96:7f:e7:a7:c8:92:56:37:01:be:1a:ca:a6:0d:
         bd:27:53:d3:14:a7:b2:e6:4a:e7:67:ce:c4:f7:90:bc:7f:76:
         f1:0c:df:ea:b1:38:b5:74:b5:5b:d2:8d:12:2c:06:c4:c2:a7:
         5f:d2:7c:49:c6:2e:8c:f5:f6:47:dc:7d:fb:07:a2:d6:a0:d1:
         36:c2:5e:75:91:f0:6a:25:bf:7d:13:5e:7a:4b:8a:08:15:a5:
         2e:b3:78:72:42:ad:8e:71:63:30:ad:3e:0d:f5:97:eb:cc:f3:
         b0:b1:a8:9e:7a:04:6d:91:fc:a1:11:ff:f3:9b:b8:e9:a5:c6:
         b8:03:ae:68:56:0f:5b:5a:c8:e5:60:05:ac:af:76:00:84:42:
         0a:44:7f:60:ea:55:c6:0f:ad:a3:ff:bc:9c:6e:5f:6b:0d:22:
         e8:8d:81:47:61:d0:6e:4f:3d:73:e5:14:28:4f:90:fe:76:59:
         1b:33:87:0e:19:5b:3a:f3:3b:6d:d5:ce:f5:e9:95:77:47:81:
         bf:40:7c:0c:c2:0e:0b:e8:f5:28:f8:49:d8:b3:ac:22:0d:6f:
         70:01:bb:ed:b5:3d:b8:9d:dc:1d:e9:9a:48:73:3e:d6:bf:26:
         3c:eb:b5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:29 2026 by rpki-client