Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa
File:                     3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa (raw, json)
Hash identifier:          0SKGtnqhjPRa1mtjwBX9w2vC6HvZzxTKz3FtFPwDTT0=
Subject key identifier:   FB:D6:4B:09:F9:2C:F7:B9:27:39:90:92:17:59:A5:FC:8D:64:A4:87
Certificate issuer:       /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Certificate serial:       220A77AA625DB0F28A9C178E7E303E6B319A1317
Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa
Signing time:             Sun 03 May 2026 03:15:41 +0000
ROA not before:           Sun 03 May 2026 03:10:41 +0000
ROA not after:            Sun 02 May 2027 03:15:41 +0000
asID:                     149752
IP address blocks:        103.189.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
                          rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0a:77:aa:62:5d:b0:f2:8a:9c:17:8e:7e:30:3e:6b:31:9a:13:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
        Validity
            Not Before: May  3 03:10:41 2026 GMT
            Not After : May  2 03:15:41 2027 GMT
        Subject: CN=FBD64B09F92CF7B9273990921759A5FC8D64A487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:d6:9e:c8:63:3e:15:00:b2:3b:c8:0a:b2:
                    3d:2d:78:c6:a1:04:d0:6b:10:30:5e:17:14:2e:d2:
                    00:25:e9:ec:e5:3b:b7:48:07:5e:21:13:6f:f2:66:
                    6c:44:95:79:57:6d:0a:8f:1b:1a:fd:c0:c9:4d:68:
                    1f:f2:43:be:ce:ec:83:25:0e:2f:1b:75:f4:c6:e0:
                    f5:73:92:e0:ef:08:fc:cc:e7:c0:5c:cb:14:cd:80:
                    01:79:87:fe:4b:2f:60:15:e8:5f:cb:b7:14:fb:83:
                    c9:d9:39:a4:c2:ee:a2:f5:a9:15:5d:0a:4a:43:e9:
                    5e:f0:a4:41:76:23:d8:c0:c5:2f:f6:34:bc:69:20:
                    fe:17:74:27:10:50:72:1b:6a:65:9d:24:5a:88:fc:
                    da:90:6b:c4:e2:c3:23:d1:a7:eb:f2:dc:45:01:25:
                    3c:f5:2c:6d:07:1c:63:78:4a:0d:6d:d7:a5:0d:86:
                    5e:27:d9:11:ea:89:e0:a3:85:e3:b0:85:ed:b4:43:
                    1b:87:34:1d:80:5e:e0:dd:a8:64:6f:a3:9a:a0:0e:
                    f7:09:fb:e1:d7:26:62:89:10:fe:26:5b:37:42:ae:
                    03:04:d1:21:39:c1:d6:3a:7c:bd:0f:06:8b:e9:f3:
                    f4:c9:bb:ea:11:5c:aa:99:31:65:be:21:ec:0a:3e:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D6:4B:09:F9:2C:F7:B9:27:39:90:92:17:59:A5:FC:8D:64:A4:87
            X509v3 Authority Key Identifier:
                keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133382e302f32342d3234203d3e20313439373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:50:db:b4:26:57:ba:1c:f8:b3:8c:75:22:b8:51:8b:59:3b:
         ad:ab:fc:4d:dd:1f:61:3a:fd:8e:dc:96:a6:fa:07:07:a9:b0:
         52:44:91:d0:5b:07:5f:af:d3:f8:9d:80:e5:17:72:b6:f0:88:
         0c:77:0d:b4:54:e9:00:11:62:32:16:9f:ae:ec:ab:a3:de:7b:
         0c:d8:00:76:e1:80:ac:06:5a:8d:67:6b:f0:3a:72:ce:4d:28:
         b7:e1:a6:b6:77:77:d8:ed:09:9d:55:b5:f6:98:d6:28:9e:26:
         a0:b3:93:a4:07:2a:9d:81:88:3f:93:41:3c:0d:c0:5c:db:d4:
         cb:43:0d:43:ab:f8:9c:1a:a0:1d:21:a1:3f:aa:c2:26:90:7b:
         79:93:7d:18:f4:82:78:d8:2f:8a:1d:b2:1e:e2:1e:a1:07:95:
         92:f1:2f:8b:ea:b6:4c:53:06:4c:21:1b:c6:c0:a4:f8:cd:d1:
         4d:8f:91:7a:05:bb:d7:8a:f7:77:a9:ce:4a:a8:23:16:8c:2c:
         bc:27:42:60:42:a2:ce:fc:25:16:5f:d2:ea:25:03:4f:9a:de:
         fe:f2:92:cf:b7:76:1a:7c:9e:48:38:84:43:ee:48:a9:1c:f8:
         60:28:3f:5a:e0:10:c0:ab:a7:db:08:3d:bd:f0:1d:60:8b:bd:
         9f:c4:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:48 2026 by rpki-client