Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
File:                     3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa (raw, json)
Hash identifier:          ON1gSG84QwnmMGmDUKoxl7b2DGJGtr4oSF5KUCcnJXU=
Subject key identifier:   FC:6D:DC:49:F4:93:F7:A6:17:AD:9D:0A:8F:B4:1D:65:E6:4B:A5:0A
Certificate issuer:       /CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C
Certificate serial:       5EBDB2EBBF5A9BE42C7E546B327C326A25CD65BD
Authority key identifier: 93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa
Signing time:             Sun 03 May 2026 03:17:38 +0000
ROA not before:           Sun 03 May 2026 03:12:38 +0000
ROA not after:            Sun 02 May 2027 03:17:38 +0000
asID:                     149914
IP address blocks:        103.191.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl
                          rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bd:b2:eb:bf:5a:9b:e4:2c:7e:54:6b:32:7c:32:6a:25:cd:65:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935F90BCD15DD07F7AAFDC21AE372B1FCF50717C
        Validity
            Not Before: May  3 03:12:38 2026 GMT
            Not After : May  2 03:17:38 2027 GMT
        Subject: CN=FC6DDC49F493F7A617AD9D0A8FB41D65E64BA50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:48:1b:ca:25:9a:dc:6c:52:ce:af:f9:6a:
                    4a:f1:0a:f7:73:03:b5:a7:24:2f:a8:b3:23:8d:a0:
                    e1:bd:b4:c8:b7:6b:3a:5f:01:4c:fa:7d:39:ae:40:
                    cb:55:7d:bb:54:d6:54:4a:76:0c:a6:72:0c:40:8a:
                    d8:a0:0d:f9:aa:db:e6:c1:84:35:4a:f2:c5:6c:9e:
                    54:d7:6d:c6:e8:64:2c:a6:cb:10:e7:9f:43:ef:ef:
                    71:35:0b:dd:48:d0:26:65:dd:07:05:9a:d4:d7:11:
                    85:c6:4c:c2:d1:0b:0f:5b:81:7c:22:87:69:bb:68:
                    8b:e8:09:6f:f4:99:e9:87:b7:a0:0c:ed:4a:a9:14:
                    73:6f:4f:f9:91:35:5c:ef:42:4e:e3:88:7e:dd:47:
                    06:88:74:e9:d3:d0:b4:74:65:02:05:8d:1a:3b:ef:
                    b9:c1:9b:ab:36:e4:66:3e:88:8e:e5:15:2e:dd:71:
                    f3:98:e0:58:5c:82:fe:c8:51:20:0b:78:7f:8d:67:
                    ce:20:4d:a9:2f:1a:14:2b:75:b5:d6:51:56:72:61:
                    93:03:39:32:30:b7:75:2a:73:00:cb:5f:fa:b5:d0:
                    10:8f:5a:39:39:b8:c0:33:21:9b:d5:fd:94:ad:01:
                    e2:f2:2c:fa:2b:c8:ba:8e:38:e3:cd:0b:88:f8:a4:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6D:DC:49:F4:93:F7:A6:17:AD:9D:0A:8F:B4:1D:65:E6:4B:A5:0A
            X509v3 Authority Key Identifier:
                keyid:93:5F:90:BC:D1:5D:D0:7F:7A:AF:DC:21:AE:37:2B:1F:CF:50:71:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/935F90BCD15DD07F7AAFDC21AE372B1FCF50717C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f40e1f20-b0cd-469b-9106-1ea000795f9f/0/3130332e3139312e37302e302f32342d3234203d3e20313439393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:ea:0c:98:4d:99:5f:1a:31:8d:4b:cb:fb:34:44:d7:0e:
         4b:de:42:dd:3d:ba:a3:7f:c4:fd:3e:82:e7:d6:0a:57:7d:63:
         42:28:80:e2:ca:0e:22:39:8b:7e:db:8a:8a:41:26:4d:0d:9a:
         52:c7:43:d5:4c:5b:a8:35:1b:2e:2b:19:e3:ea:16:7e:83:3f:
         00:48:ff:a2:a4:96:3f:26:60:67:fb:17:ad:12:98:12:cb:8b:
         ee:d1:43:9e:c9:39:6e:0d:6e:ab:91:53:a3:f8:8c:7b:53:7c:
         39:be:1e:54:c7:ca:9b:89:9d:70:ee:3c:a5:5f:99:68:70:f8:
         46:9e:92:59:ed:1e:e7:67:09:92:27:31:8d:41:d9:f8:63:b1:
         66:0b:e9:5c:83:47:cc:a6:13:42:dc:d7:5b:af:ab:19:31:32:
         3e:8b:ad:dd:74:26:8c:57:28:c6:f3:8a:b6:85:e8:b8:8c:1d:
         d4:79:b2:3b:05:cb:41:95:6e:8e:45:34:9b:ca:a1:ea:8a:1e:
         82:5e:ef:5e:45:38:ae:e1:c9:23:23:37:b6:cf:5a:72:ec:6b:
         7e:ee:e9:6f:65:d3:58:08:1b:96:21:15:91:5b:6f:49:ea:db:
         12:81:a1:ed:e7:93:c8:a5:a4:5f:f9:39:5f:4a:f3:b7:51:3a:
         9b:a8:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:17 2026 by rpki-client