Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
File:                     3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier:          L4o9uZCSJCtTiGzmDyncLujPwn9u+0cj/bmMr7mpke0=
Subject key identifier:   3B:29:95:8C:5C:14:F8:E7:A6:0A:53:39:A3:5F:62:E8:EB:C8:D6:03
Certificate issuer:       /CN=BACDD9DBC696965384EE99739EB6991320966120
Certificate serial:       66F936264B1A8E41082A9412F6F7E92845633075
Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa
Signing time:             Sun 03 May 2026 03:16:25 +0000
ROA not before:           Sun 03 May 2026 03:11:25 +0000
ROA not after:            Sun 02 May 2027 03:16:25 +0000
asID:                     149696
IP address blocks:        103.186.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
                          rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f9:36:26:4b:1a:8e:41:08:2a:94:12:f6:f7:e9:28:45:63:30:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120
        Validity
            Not Before: May  3 03:11:25 2026 GMT
            Not After : May  2 03:16:25 2027 GMT
        Subject: CN=3B29958C5C14F8E7A60A5339A35F62E8EBC8D603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:f4:f2:fe:b8:4f:bf:31:c4:62:76:49:be:
                    58:0c:b7:01:e8:40:12:8d:f7:a2:7f:3c:d8:48:21:
                    51:8a:2c:0e:7c:3d:4b:c8:a0:9f:49:fb:07:1b:2f:
                    f6:19:51:6b:03:1e:de:92:ec:ab:6b:62:05:96:af:
                    70:1f:66:12:84:36:bc:a7:27:22:9f:1e:a8:23:5f:
                    cb:67:72:e7:58:37:f3:f8:c8:88:7b:74:45:f9:1d:
                    77:58:2b:05:61:68:94:fa:e8:61:b1:cc:50:3f:41:
                    2d:c5:87:32:75:b6:b5:34:4c:88:d2:44:e8:81:3f:
                    c5:f3:33:f1:d0:d0:f0:bb:14:b3:c8:af:41:26:d4:
                    54:2d:e7:20:50:df:68:46:e3:16:54:e5:e4:0a:0f:
                    08:8f:12:37:7c:b8:77:bc:8e:46:ae:4f:8f:b3:aa:
                    e4:9a:f8:4d:25:87:b5:bc:71:9f:4f:02:d7:b0:da:
                    a3:08:45:bf:a2:ed:aa:86:bf:94:71:05:85:55:5e:
                    06:82:07:18:b0:f0:6d:b7:d3:30:f4:6c:ed:dc:58:
                    88:a2:cc:15:70:82:47:ff:3c:bb:8e:70:6d:14:a3:
                    47:b5:fa:70:a6:87:7c:8f:45:db:3a:c4:ac:60:11:
                    a7:8b:50:f8:c6:42:4a:cb:1d:42:d8:61:ea:6a:77:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:95:8C:5C:14:F8:E7:A6:0A:53:39:A3:5F:62:E8:EB:C8:D6:03
            X509v3 Authority Key Identifier:
                keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39382e302f32342d3234203d3e20313439363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:b1:c4:65:37:53:ac:57:7b:dd:dd:a6:b2:69:41:87:25:
         e0:2c:e9:2a:ab:93:11:f6:4a:d4:5b:e7:96:5f:2b:66:16:e8:
         d2:6a:be:2a:09:dc:c2:52:86:78:3f:c0:a8:b3:97:ce:c2:71:
         fc:8b:ec:e3:66:6e:bb:5e:e3:4e:d6:1a:4e:a8:f8:3e:4c:2f:
         22:ec:96:77:df:79:3a:fe:0e:c0:7c:5c:cb:5e:48:0c:5c:95:
         04:ec:07:9b:07:7d:64:c4:82:6a:8c:02:cb:2f:fc:83:d8:57:
         4c:fd:05:ed:33:3a:fa:e4:2a:f3:61:c9:5b:4c:c8:dd:8a:b4:
         a0:bd:20:c2:cc:e8:d2:8a:5b:e0:72:40:50:a7:92:00:4a:90:
         f7:4e:06:28:a7:bf:74:20:06:91:db:c2:e9:e6:6b:4e:fe:5d:
         98:9e:75:dc:56:19:a1:da:06:48:19:21:9a:ed:98:aa:2a:5f:
         55:d6:c4:41:2a:cb:d7:d5:ec:54:0d:c6:c1:6c:81:04:dd:df:
         b8:44:ed:65:58:6b:25:d5:dc:e7:bd:07:07:5a:91:3d:34:c2:
         6f:e7:7f:d4:c0:b8:3d:81:e5:98:5d:f1:0b:83:a6:cf:48:1b:
         d5:0f:72:5f:5c:4d:b0:f5:ee:5b:1e:4f:cc:1a:3e:37:1b:f0:
         5f:8f:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:48 2026 by rpki-client