Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa
File:                     3130332e3139352e39302e302f32332d3234203d3e203538343034.roa (raw, json)
Hash identifier:          aimG/5iSSxrYFvvsJNL1+RlZjQ7m0YXtfPl/xnj5GxE=
Subject key identifier:   8E:88:3E:E9:98:4F:18:5D:1E:30:B1:5C:4A:1B:8A:9D:14:44:A8:5E
Certificate issuer:       /CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
Certificate serial:       16F899F1CF58FB4627A25DEA2D73924AD73C5C2D
Authority key identifier: 5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa
Signing time:             Sun 03 May 2026 03:18:38 +0000
ROA not before:           Sun 03 May 2026 03:13:38 +0000
ROA not after:            Sun 02 May 2027 03:18:38 +0000
asID:                     58404
IP address blocks:        103.195.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl
                          rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f8:99:f1:cf:58:fb:46:27:a2:5d:ea:2d:73:92:4a:d7:3c:5c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C51364B5C5C5CCC9BF024780ED2318ACE469B78
        Validity
            Not Before: May  3 03:13:38 2026 GMT
            Not After : May  2 03:18:38 2027 GMT
        Subject: CN=8E883EE9984F185D1E30B15C4A1B8A9D1444A85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:aa:26:b0:ad:21:ea:86:34:a7:07:34:1b:
                    3e:47:91:f8:86:07:f8:fb:05:47:1b:d9:2c:57:66:
                    27:fa:35:0c:be:99:0a:af:86:7d:ad:50:eb:6f:bd:
                    a4:ac:9d:76:fb:7d:eb:b2:cb:4e:19:26:5b:b7:0b:
                    44:8b:5b:00:84:07:e1:26:ed:f4:cc:6b:a5:13:10:
                    fe:ee:8e:f2:62:70:24:6c:36:66:4f:37:a5:58:52:
                    1b:e5:0c:9a:40:fe:9f:25:9d:54:cb:06:90:31:dd:
                    51:a0:b2:e8:c1:b9:e7:be:f3:0e:d6:16:b9:18:f9:
                    ab:fe:64:a1:65:46:00:3b:cc:07:66:b8:12:bd:4c:
                    fe:61:cb:d6:ea:6b:7d:c9:6b:9e:7f:72:9d:8a:f3:
                    d3:a9:c4:9a:dd:43:c3:66:3d:20:9c:5e:ef:5d:75:
                    a2:da:2e:7a:f4:da:c9:e8:b9:0c:9b:bb:c4:6d:a3:
                    71:aa:36:0c:8a:3c:6b:ed:36:24:8b:8c:18:8b:f9:
                    3c:34:0c:b1:75:43:7a:f9:83:e7:17:a4:97:3c:7f:
                    c4:1a:a5:3f:d5:ef:01:f8:2b:22:e6:8c:b3:2c:79:
                    03:2e:d1:22:ab:28:b6:d0:6e:98:06:0d:71:bf:10:
                    55:bb:18:d7:07:9f:6c:3a:fc:7c:35:80:f5:18:c4:
                    22:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:3E:E9:98:4F:18:5D:1E:30:B1:5C:4A:1B:8A:9D:14:44:A8:5E
            X509v3 Authority Key Identifier:
                keyid:5C:51:36:4B:5C:5C:5C:CC:9B:F0:24:78:0E:D2:31:8A:CE:46:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5C51364B5C5C5CCC9BF024780ED2318ACE469B78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f98f19c3-e4e1-41a1-aaf0-d613aca4930c/0/3130332e3139352e39302e302f32332d3234203d3e203538343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:2a:44:7b:77:ad:b8:ee:49:48:35:0d:2c:11:86:45:49:d2:
         b4:12:0e:bf:2b:94:d7:ce:dc:c8:51:db:ee:eb:96:8a:ab:53:
         94:ee:d1:f8:5b:db:3d:4f:6b:ed:e1:51:7c:e9:a4:3d:4f:d8:
         de:0a:d0:72:2c:1a:e2:42:49:84:7f:39:a8:83:69:9e:3a:aa:
         66:92:15:c5:c3:b0:5b:78:57:63:66:19:c9:98:b0:a2:a9:31:
         9f:4c:f9:ee:57:53:54:00:9f:95:29:6a:86:1c:f6:8e:3a:fe:
         14:ad:e3:14:18:5b:0a:82:da:b4:b4:8a:f5:d1:3a:74:59:13:
         33:2a:55:89:fd:37:85:55:93:cc:77:0f:16:cb:0d:f6:2a:c7:
         37:66:fd:11:49:77:74:ed:1e:3a:dd:79:65:46:e1:8a:1b:8f:
         28:69:0d:eb:45:53:fa:12:b6:3f:18:2f:cc:b4:52:46:03:b0:
         2e:6d:d4:89:f0:91:ea:55:a1:30:b6:73:06:a4:b8:d2:8c:ff:
         60:eb:5c:cb:60:eb:8e:54:fd:81:2a:26:87:06:f6:57:45:c2:
         c1:99:e7:c6:3b:eb:75:e3:ba:73:96:98:e6:73:a0:f2:91:20:
         2c:fc:97:86:e2:df:b0:97:c3:65:53:60:2a:b1:e8:8c:58:8d:
         11:22:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:07 2026 by rpki-client