Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
File:                     3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier:          jccZCiZqanCMuer6DeJWWqbD0FyYnO8bjfTBGy1Zc5I=
Subject key identifier:   3F:62:5B:C8:EF:99:80:1B:87:13:03:42:E7:FE:82:2F:A5:65:27:55
Certificate issuer:       /CN=BACDD9DBC696965384EE99739EB6991320966120
Certificate serial:       12F06653DE6A6E1ACEEFB16F8DB5165D56D5DD34
Authority key identifier: BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
Signing time:             Sun 03 May 2026 03:16:26 +0000
ROA not before:           Sun 03 May 2026 03:11:26 +0000
ROA not after:            Sun 02 May 2027 03:16:26 +0000
asID:                     149696
IP address blocks:        103.186.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl
                          rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f0:66:53:de:6a:6e:1a:ce:ef:b1:6f:8d:b5:16:5d:56:d5:dd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BACDD9DBC696965384EE99739EB6991320966120
        Validity
            Not Before: May  3 03:11:26 2026 GMT
            Not After : May  2 03:16:26 2027 GMT
        Subject: CN=3F625BC8EF99801B87130342E7FE822FA5652755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:8f:75:4d:34:d7:de:4a:9f:d3:a9:45:8c:
                    68:1a:ae:79:dd:4b:e6:cb:fd:77:9b:d8:29:90:9c:
                    02:fd:72:82:6a:f0:c0:58:fe:5c:4d:12:5e:59:1a:
                    15:b8:74:b9:22:0e:10:77:27:a7:d9:85:d7:b0:de:
                    ac:be:42:ee:d6:af:d1:2c:25:18:a0:16:10:8f:05:
                    7f:eb:d4:b0:28:e2:b6:04:7f:ed:6f:5d:23:00:d3:
                    4b:3c:78:12:2a:89:5c:50:29:8c:81:d8:d0:17:9e:
                    70:90:90:8d:14:64:a4:85:79:ac:5a:0f:b2:c5:66:
                    83:31:88:d0:37:58:6f:39:72:42:3a:b3:19:c5:3a:
                    6d:d9:d4:23:d3:62:bb:2e:ae:c1:26:0b:cc:9e:c5:
                    40:f9:22:ae:6c:a4:28:7a:93:82:e9:de:27:aa:25:
                    d4:b3:ae:1d:f7:5a:d8:65:56:93:74:e5:e5:c4:d5:
                    e1:ac:5b:cc:f5:17:1b:58:a2:aa:63:30:a1:9f:3c:
                    d6:30:4a:0e:71:8c:8c:de:e2:75:f0:fe:e7:4c:c5:
                    ae:d0:05:12:aa:c7:7b:49:79:5b:03:66:f9:a8:12:
                    01:e1:ac:7d:22:2e:e0:34:e4:c4:79:4d:78:6f:92:
                    a3:9f:be:00:96:a9:7c:ad:5f:c6:42:01:36:1c:90:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:62:5B:C8:EF:99:80:1B:87:13:03:42:E7:FE:82:2F:A5:65:27:55
            X509v3 Authority Key Identifier:
                keyid:BA:CD:D9:DB:C6:96:96:53:84:EE:99:73:9E:B6:99:13:20:96:61:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/BACDD9DBC696965384EE99739EB6991320966120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BACDD9DBC696965384EE99739EB6991320966120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:65:35:b4:17:1e:fd:98:97:60:c8:5f:56:32:4e:80:02:
         4b:7a:9d:61:fe:71:f4:06:14:52:7e:9d:73:32:ec:12:f5:92:
         c2:c8:a1:a6:a5:ca:83:01:42:0f:6c:74:a3:ed:56:d9:9c:29:
         24:58:76:7d:b5:51:79:c3:84:dc:58:2b:c6:19:2d:ce:c7:81:
         eb:62:b4:ed:6f:7e:3a:76:a6:56:49:18:fe:97:0c:e3:aa:57:
         39:2a:2b:3b:0f:03:b2:96:13:9a:58:10:2b:d7:1e:2a:2d:2a:
         46:10:55:27:3a:d0:56:b3:fb:ea:15:f2:c7:ac:88:32:35:20:
         3b:f5:40:61:0e:c2:e6:d8:fe:f9:9a:b0:9c:3c:c9:74:aa:d0:
         42:01:37:ae:7d:49:2d:0c:63:52:b7:5a:f9:51:51:ba:6d:78:
         d1:d8:81:1e:d5:cb:9a:02:48:8f:2d:49:f5:5a:87:2a:8a:9f:
         3a:b1:1c:5a:8e:e7:0c:a4:c6:69:16:9f:59:e2:80:36:9d:21:
         e6:77:83:b8:f4:01:8b:a5:06:6e:d4:01:84:a9:a8:b1:91:61:
         71:b2:a6:b8:54:86:ea:40:21:3b:88:a6:26:86:86:9d:97:bc:
         39:19:1c:3f:60:73:34:e7:c9:5f:b4:e2:3b:03:20:e4:52:cf:
         8d:2c:bd:d5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEvBmU95qbhrO77FvjbUWXVbV3TQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFDREQ5REJDNjk2OTY1Mzg0RUU5OTczOUVCNjk5MTMy
MDk2NjEyMDAeFw0yNjA1MDMwMzExMjZaFw0yNzA1MDIwMzE2MjZaMDMxMTAvBgNV
BAMTKDNGNjI1QkM4RUY5OTgwMUI4NzEzMDM0MkU3RkU4MjJGQTU2NTI3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4o91TTTX3kqf06lFjGgarnnd
S+bL/Xeb2CmQnAL9coJq8MBY/lxNEl5ZGhW4dLkiDhB3J6fZhdew3qy+Qu7Wr9Es
JRigFhCPBX/r1LAo4rYEf+1vXSMA00s8eBIqiVxQKYyB2NAXnnCQkI0UZKSFeaxa
D7LFZoMxiNA3WG85ckI6sxnFOm3Z1CPTYrsursEmC8yexUD5Iq5spCh6k4Lp3ieq
JdSzrh33WthlVpN05eXE1eGsW8z1FxtYoqpjMKGfPNYwSg5xjIze4nXw/udMxa7Q
BRKqx3tJeVsDZvmoEgHhrH0iLuA05MR5TXhvkqOfvgCWqXytX8ZCATYckEHhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUP2JbyO+ZgBuHEwNC5/6CL6VlJ1UwHwYDVR0j
BBgwFoAUus3Z28aWllOE7plznraZEyCWYSAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjA4NzIwODYtODA1Yy00MGFhLTg3YjEtYmViOGUxMzAyYzI2LzAvQkFDREQ5REJD
Njk2OTY1Mzg0RUU5OTczOUVCNjk5MTMyMDk2NjEyMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9CQUNERDlEQkM2OTY5NjUzODRFRTk5NzM5RUI2OTkxMzIwOTY2
MTIwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2YwODcyMDg2LTgwNWMtNDBhYS04
N2IxLWJlYjhlMTMwMmMyNi8wLzMxMzAzMzJlMzEzODM2MmUzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pjMA0GCSqG
SIb3DQEBCwUAA4IBAQA/y2U1tBce/ZiXYMhfVjJOgAJLep1h/nH0BhRSfp1zMuwS
9ZLCyKGmpcqDAUIPbHSj7VbZnCkkWHZ9tVF5w4TcWCvGGS3Ox4HrYrTtb346dqZW
SRj+lwzjqlc5Kis7DwOylhOaWBAr1x4qLSpGEFUnOtBWs/vqFfLHrIgyNSA79UBh
DsLm2P75mrCcPMl0qtBCATeufUktDGNSt1r5UVG6bXjR2IEe1cuaAkiPLUn1Wocq
ip86sRxajucMpMZpFp9Z4oA2nSHmd4O49AGLpQZu1AGEqaixkWFxsqa4VIbqQCE7
iKYmhoadl7w5GRw/YHM058lftOI7AyDkUs+NLL3V
-----END CERTIFICATE-----
Generated at Wed May 13 09:54:48 2026 by rpki-client