Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
File:                     3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa (raw, json)
Hash identifier:          f/dM7QAxBhLE+nmzvOko9oggYTcGzBvx5hlqw5xdlCY=
Subject key identifier:   5B:D9:8E:30:5D:24:53:54:F0:4D:68:80:30:69:D3:3E:F0:C4:88:2B
Certificate issuer:       /CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
Certificate serial:       2508D7DF2031FD0E6DA3D07513310DD6546776A9
Authority key identifier: 69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa
Signing time:             Sun 03 May 2026 03:15:40 +0000
ROA not before:           Sun 03 May 2026 03:10:40 +0000
ROA not after:            Sun 02 May 2027 03:15:40 +0000
asID:                     149752
IP address blocks:        103.189.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl
                          rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:08:d7:df:20:31:fd:0e:6d:a3:d0:75:13:31:0d:d6:54:67:76:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693FC41C1FECC7FA2564E9000BCE3D653A85CDA5
        Validity
            Not Before: May  3 03:10:40 2026 GMT
            Not After : May  2 03:15:40 2027 GMT
        Subject: CN=5BD98E305D245354F04D68803069D33EF0C4882B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:8a:32:e5:21:cf:c1:dd:c0:4c:14:24:fc:
                    ab:3d:81:f4:87:9b:89:54:ea:2b:db:4f:47:e0:e1:
                    9b:eb:0c:bd:17:ba:f0:d7:ce:24:67:91:ac:93:e8:
                    f3:63:11:e2:00:c7:57:c6:6d:92:a1:a2:23:9f:b8:
                    ae:54:21:e1:80:d8:9a:94:11:33:50:5c:6e:99:ab:
                    7e:f9:69:93:09:74:81:ab:5f:d5:03:02:47:2b:0c:
                    fe:8c:c5:ae:68:2c:21:13:61:19:af:2e:9a:71:8b:
                    04:e9:13:80:92:0d:35:70:22:5b:53:4f:56:6d:b8:
                    70:f7:7d:c0:bf:3a:b1:a1:05:ea:e4:be:b0:28:b8:
                    3c:a5:fc:31:0c:80:06:f6:eb:73:10:32:a5:26:2f:
                    c8:63:19:fd:7d:17:b6:f1:5d:29:bd:9c:0b:0e:ad:
                    a9:34:19:35:a2:f9:7b:ba:52:89:36:50:df:07:38:
                    5d:0e:5f:cc:3f:21:50:3b:53:a9:6b:f4:3a:64:f9:
                    97:1b:85:32:68:25:cf:5e:fe:ef:9a:86:3e:76:50:
                    04:3f:bc:00:2c:9e:1d:7b:0a:0b:19:05:58:c1:4f:
                    25:91:74:5f:4f:74:a1:02:fd:ea:e5:22:63:1f:bb:
                    eb:d4:23:41:4b:3f:8b:b7:fb:f2:e5:73:ff:58:59:
                    b5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D9:8E:30:5D:24:53:54:F0:4D:68:80:30:69:D3:3E:F0:C4:88:2B
            X509v3 Authority Key Identifier:
                keyid:69:3F:C4:1C:1F:EC:C7:FA:25:64:E9:00:0B:CE:3D:65:3A:85:CD:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/693FC41C1FECC7FA2564E9000BCE3D653A85CDA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec6b597c-9547-4c1e-ac87-3a434a300a67/0/3130332e3138392e3133392e302f32342d3234203d3e20313439373532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:b1:de:f0:d1:a9:a7:16:fb:3f:a4:8a:dc:d3:75:a9:00:
         b6:ea:98:44:4a:eb:2e:a3:92:83:b9:5e:3c:74:c1:dd:1d:31:
         27:d7:87:45:5f:35:76:1e:a1:d7:70:c6:fa:27:57:24:69:4c:
         5b:de:77:dc:df:d4:f3:0e:8b:dd:49:f2:20:75:b5:a9:f4:23:
         79:90:ce:ce:cc:0f:57:89:d0:e4:30:a5:73:e5:6a:a8:77:31:
         51:d5:92:3c:bd:58:cc:0f:f6:7d:8e:f6:2d:50:a0:04:b8:52:
         6c:6a:f0:15:64:61:3e:5b:09:3e:69:a8:42:65:12:fd:7d:54:
         25:73:a3:8f:5e:b0:e3:c9:ae:3a:e7:9a:6d:a9:66:00:40:ef:
         0a:0b:35:1c:83:cd:99:a5:09:aa:58:f1:97:ef:b0:32:f8:91:
         69:7d:31:64:91:2a:99:01:a2:df:97:04:7a:08:d7:85:29:c0:
         06:8e:9d:3f:e2:a6:24:9f:72:06:28:a4:1a:7e:41:a0:f6:ca:
         e3:5d:0d:d7:2b:d3:2e:bd:9f:61:88:a1:39:a5:07:72:20:0d:
         1d:62:43:a6:46:06:cb:c0:9f:25:5f:eb:98:fe:82:af:cc:b6:
         5c:c6:12:a9:70:e5:49:f1:4d:91:82:82:bb:10:72:8b:f5:99:
         4f:b9:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:44 2026 by rpki-client