Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
File:                     3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa (raw, json)
Hash identifier:          lli6DgdKqwmEkLtB+BG1rU9nYBqGkyyXfGUHRRk2kyY=
Subject key identifier:   A2:F2:D9:31:9B:74:02:B8:C5:E6:3D:FD:CD:01:58:36:AD:27:92:F6
Certificate issuer:       /CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8
Certificate serial:       10657975B243C62914AEB4FFB2B681A1FB4DB65A
Authority key identifier: 8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa
Signing time:             Sun 03 May 2026 02:10:34 +0000
ROA not before:           Sun 03 May 2026 02:05:34 +0000
ROA not after:            Sun 02 May 2027 02:10:34 +0000
asID:                     138131
IP address blocks:        103.180.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl
                          rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:65:79:75:b2:43:c6:29:14:ae:b4:ff:b2:b6:81:a1:fb:4d:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EA8EC991253F0665F4149D5FE42C3F8CF2255D8
        Validity
            Not Before: May  3 02:05:34 2026 GMT
            Not After : May  2 02:10:34 2027 GMT
        Subject: CN=A2F2D9319B7402B8C5E63DFDCD015836AD2792F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:18:7d:ec:98:df:ab:a4:f4:fb:25:05:ff:73:
                    57:cf:5c:6f:cf:b8:45:bf:2d:7d:39:c6:f0:01:85:
                    f6:f1:5e:07:82:3d:59:95:cc:c5:5d:39:7e:71:fe:
                    24:87:0d:36:0b:67:57:29:1d:5c:f6:dc:b1:a9:34:
                    c5:9f:15:00:d4:4b:2a:cd:84:fb:2d:11:2d:15:40:
                    e7:53:68:23:b9:be:29:f9:ed:06:d2:ff:f2:98:5e:
                    18:81:ae:31:57:9b:25:96:cc:51:96:cf:88:69:69:
                    b0:8b:a4:26:1d:b5:bf:ee:83:5c:22:ee:8b:9e:71:
                    ac:d9:5e:04:8f:8c:25:24:5b:6b:6c:38:bc:00:13:
                    3b:78:e9:32:3c:02:3a:d9:13:5b:22:b0:ec:3a:d0:
                    44:57:bf:0e:5d:f2:cf:40:33:2b:37:3a:07:0d:83:
                    2e:2f:bd:0f:26:cb:6a:96:7b:c7:0e:59:03:94:7c:
                    ca:4e:d3:00:bc:e1:b4:c3:4c:29:85:23:38:d3:bc:
                    a7:22:d0:5c:c9:4c:42:37:bd:a6:66:f3:5c:08:b3:
                    35:ab:77:fc:87:99:e9:24:1c:46:97:e3:b9:8e:9c:
                    54:2a:32:6f:05:61:f2:44:df:4a:8a:12:f6:82:8e:
                    3b:51:15:e5:ab:d1:21:4b:3c:75:7f:84:90:41:01:
                    ff:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:D9:31:9B:74:02:B8:C5:E6:3D:FD:CD:01:58:36:AD:27:92:F6
            X509v3 Authority Key Identifier:
                keyid:8E:A8:EC:99:12:53:F0:66:5F:41:49:D5:FE:42:C3:F8:CF:22:55:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8EA8EC991253F0665F4149D5FE42C3F8CF2255D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/03908782-4520-45b4-99ed-193e51df51c3/0/3130332e3138302e3136342e302f32332d3233203d3e20313338313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:12:ea:43:f7:a6:68:0d:20:dd:20:23:b7:3e:27:9f:c8:
         23:e6:ff:fd:c9:12:60:46:54:b0:a2:0b:7e:69:09:c7:d7:a2:
         21:24:dd:40:06:06:0e:ae:24:30:72:f2:55:01:81:43:76:0a:
         eb:62:61:e1:05:8e:e6:47:74:c9:61:89:83:b5:5d:04:3c:4c:
         53:fe:0b:87:f4:8a:db:5b:3b:be:8f:3c:3f:01:5f:0f:aa:44:
         ee:ce:f3:0d:cb:f4:d6:35:33:ac:4f:9f:ad:61:19:dd:69:e3:
         15:73:c7:fb:08:7b:2a:84:9a:8e:1a:58:a9:1f:01:4c:80:18:
         f9:82:e3:79:c0:25:a4:aa:92:e8:2b:36:41:51:ce:67:99:71:
         38:bf:6e:af:81:07:8d:14:02:ab:c0:3c:05:98:20:f0:66:72:
         a2:95:5f:30:7c:4b:cd:29:ed:ad:7e:c2:37:75:0f:78:02:a9:
         26:9d:bf:fa:b3:1c:0a:f8:c5:5f:bc:d3:6d:f4:00:4c:05:e1:
         7a:86:33:5a:60:3e:06:93:70:ad:c6:1c:f8:4d:b1:3a:9f:a2:
         7a:e7:63:72:ab:5b:f1:a8:64:28:8f:54:a2:09:42:a3:79:7c:
         dd:94:98:af:47:3e:42:24:0f:7c:16:01:a3:32:f9:65:d4:36:
         39:69:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:49:21 2026 by rpki-client