Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa
File:                     3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa (raw, json)
Hash identifier:          mu8XBJ0C/UdHjFffaiRYLXyHpdMvYTXgCTRd/6Q8yEQ=
Subject key identifier:   AF:23:0F:29:F9:E9:48:FF:9B:BB:EC:CD:BA:79:24:12:BB:CF:BC:18
Certificate issuer:       /CN=38C91BA9AF338721219232C9918431499404172C
Certificate serial:       6194FF7F9B7D2589C5329130EA8742DBB2B1178D
Authority key identifier: 38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa
Signing time:             Sun 03 May 2026 03:13:38 +0000
ROA not before:           Sun 03 May 2026 03:08:38 +0000
ROA not after:            Sun 02 May 2027 03:13:38 +0000
asID:                     150462
IP address blocks:        103.46.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl
                          rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:ff:7f:9b:7d:25:89:c5:32:91:30:ea:87:42:db:b2:b1:17:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38C91BA9AF338721219232C9918431499404172C
        Validity
            Not Before: May  3 03:08:38 2026 GMT
            Not After : May  2 03:13:38 2027 GMT
        Subject: CN=AF230F29F9E948FF9BBBECCDBA792412BBCFBC18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d9:10:d1:60:1e:4f:8e:34:b6:cd:6e:c1:d3:
                    99:5e:7e:ba:fa:e5:81:58:ab:00:f2:11:4c:5b:56:
                    aa:a3:56:15:ec:50:68:e1:ce:23:ef:50:cd:5d:26:
                    72:61:29:30:43:17:b9:5d:2d:10:2a:73:57:86:23:
                    1e:c1:fb:f1:7e:66:94:03:1f:7f:58:38:75:c5:8d:
                    3e:9f:4e:34:bc:21:20:97:b2:aa:86:f4:b7:95:43:
                    a0:e8:4b:a6:a7:6a:be:bc:f1:66:7f:52:52:93:f4:
                    d4:21:17:9c:56:79:12:40:df:ca:45:d7:a9:14:8d:
                    88:9a:20:0e:74:da:08:82:d2:ca:55:55:ab:ce:5d:
                    33:9e:0a:02:19:e7:b5:5d:92:97:ef:f6:e6:b8:1a:
                    4c:a4:4c:c2:b3:65:62:5a:4c:a8:e9:92:ce:2b:a3:
                    20:f7:d3:66:a0:c3:14:29:d4:f9:99:6e:4a:b1:d0:
                    77:9f:40:5e:76:d1:17:d7:8f:bc:58:b9:0a:c8:52:
                    ee:71:b9:e5:d7:ee:15:fe:c3:e3:d4:4e:91:0c:c2:
                    1d:0f:42:6a:16:96:06:1b:90:99:9f:06:50:62:22:
                    fb:4e:d0:16:01:88:52:bf:88:f6:e6:f0:10:38:1e:
                    ef:99:0b:db:f6:d7:d4:00:0d:bb:87:22:a0:fd:2e:
                    2f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:0F:29:F9:E9:48:FF:9B:BB:EC:CD:BA:79:24:12:BB:CF:BC:18
            X509v3 Authority Key Identifier:
                keyid:38:C9:1B:A9:AF:33:87:21:21:92:32:C9:91:84:31:49:94:04:17:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/38C91BA9AF338721219232C9918431499404172C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/38C91BA9AF338721219232C9918431499404172C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e543241b-cfd1-4cbb-9219-c7a36237c148/0/3130332e34362e3138362e302f32342d3234203d3e20313530343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.46.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:47:f6:48:2d:a7:13:bc:6b:59:cb:8b:1c:ac:fc:44:67:6d:
         4f:47:35:b9:9d:42:23:ef:ac:77:4e:ce:28:b9:c8:d6:f2:f5:
         82:26:22:c6:78:09:97:a2:2d:02:c6:9b:9f:f2:97:c5:2b:2b:
         67:b4:63:51:11:72:49:7e:7a:3b:2d:af:18:d2:42:3b:4d:56:
         83:8f:0c:a3:4b:07:26:a1:3f:ea:99:7b:20:5e:ae:a6:67:62:
         48:96:95:10:66:bc:9a:21:fd:2a:7a:09:5a:d1:7f:57:1c:c3:
         43:3e:38:d9:28:2a:dd:65:59:46:c3:eb:0b:cc:ec:a7:61:a4:
         70:3a:e2:91:a1:50:6b:7b:8d:2b:09:99:60:c7:21:ff:c4:3e:
         ca:65:97:0a:56:df:dd:70:ed:ae:0c:37:85:de:66:f9:62:ab:
         40:7e:85:52:4d:96:f0:d7:65:92:16:cc:dd:6e:ab:34:45:04:
         d7:8d:b4:7e:3b:66:9c:18:2d:dc:3e:bb:8a:87:d8:0e:e2:33:
         cf:bc:74:6c:61:f6:a6:1d:c0:1f:72:b6:bd:0b:ec:9b:0e:4f:
         e8:79:84:13:8c:bb:fc:d9:69:1b:ca:a5:8d:0c:a4:72:65:52:
         2d:bd:a5:c7:29:5c:b0:9c:41:08:5a:1c:21:7f:35:46:39:48:
         bc:e0:a1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:28 2026 by rpki-client