Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
File:                     3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (raw, json)
Hash identifier:          1w4JR+H10y3ISU68cZA0S9gj5TwIQFq6stHAsiX3hNo=
Subject key identifier:   16:AB:69:16:60:B4:1F:EE:E2:AD:A9:8A:4D:C6:DB:25:CA:8A:EA:24
Certificate issuer:       /CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745
Certificate serial:       1222ED021BE4C3DF8BDEF889B19EB4D9A7CE0D6D
Authority key identifier: CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
Signing time:             Sun 03 May 2026 02:11:11 +0000
ROA not before:           Sun 03 May 2026 02:06:11 +0000
ROA not after:            Sun 02 May 2027 02:11:11 +0000
asID:                     138083
IP address blocks:        103.130.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl
                          rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:22:ed:02:1b:e4:c3:df:8b:de:f8:89:b1:9e:b4:d9:a7:ce:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC45D911E8D409F5FEF2A15C8F82F0C68919C745
        Validity
            Not Before: May  3 02:06:11 2026 GMT
            Not After : May  2 02:11:11 2027 GMT
        Subject: CN=16AB691660B41FEEE2ADA98A4DC6DB25CA8AEA24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:10:82:1a:f2:78:5c:8b:d1:bb:62:82:e1:
                    2a:75:33:d4:d2:91:4d:1e:75:93:34:71:17:53:59:
                    e3:5e:cf:df:12:f8:e9:25:7e:6f:68:df:f5:40:a3:
                    dc:50:ac:e8:0b:91:e6:8d:bd:9c:78:52:a1:bc:8b:
                    9d:28:9a:00:3a:39:8b:8f:47:68:54:8b:9c:58:a1:
                    e3:14:6a:e6:83:02:11:03:59:94:07:d0:76:12:7e:
                    a6:20:42:6b:f1:2d:ab:a7:dc:66:e7:6c:14:c7:91:
                    10:b3:8d:ef:96:ee:0c:6c:26:8b:ba:bc:a0:35:a4:
                    97:0f:ef:8f:bc:e0:4f:93:f0:40:a9:c7:50:8d:dd:
                    a9:56:fc:98:36:79:7c:8e:dc:fd:41:dc:9d:7e:fd:
                    b5:bb:32:30:ed:f5:08:78:57:4d:98:fc:af:36:a4:
                    b1:31:93:b1:8b:48:74:be:0d:42:48:75:42:36:1b:
                    33:75:ce:ed:b9:e9:1c:34:d3:8d:3d:c8:f3:ed:eb:
                    f8:74:1a:41:63:72:02:b0:b8:7e:d8:3c:d9:99:88:
                    56:e5:7c:50:d6:2d:9e:d3:ee:5d:41:d3:4f:b2:61:
                    f3:d5:f6:26:41:02:09:47:4b:7b:a3:c3:67:c5:e5:
                    e7:d5:42:75:55:bc:af:cb:a1:6d:29:59:81:24:43:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:69:16:60:B4:1F:EE:E2:AD:A9:8A:4D:C6:DB:25:CA:8A:EA:24
            X509v3 Authority Key Identifier:
                keyid:CC:45:D9:11:E8:D4:09:F5:FE:F2:A1:5C:8F:82:F0:C6:89:19:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC45D911E8D409F5FEF2A15C8F82F0C68919C745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:97:d1:a6:f5:7a:23:7e:21:86:c9:25:5d:f3:88:6e:74:c1:
         75:fe:ab:90:7b:8b:ed:48:35:18:aa:ac:b5:02:2c:3e:21:29:
         ce:eb:56:6d:4c:12:72:8f:3b:50:59:eb:99:67:93:2d:b8:b4:
         72:cd:5c:69:4e:91:77:05:21:0d:f0:cb:9d:7f:07:3e:57:c2:
         9c:54:31:14:53:ca:78:af:b9:4a:89:02:68:e6:79:e8:ff:ec:
         15:21:1b:de:3d:9a:09:d1:4c:b9:ba:b9:51:44:5b:45:70:d3:
         23:e3:1e:1d:45:80:88:80:3f:9c:5f:75:e3:09:65:be:4b:4e:
         4a:3d:41:3c:67:53:85:ba:95:83:21:4b:e5:36:b7:26:90:fd:
         c4:22:4e:f0:ee:55:e1:52:bc:29:b9:47:1e:81:da:04:46:89:
         5e:d5:70:45:e9:f9:24:fe:76:52:83:3b:75:f2:6b:bf:b0:42:
         23:52:9d:b8:bd:e8:56:84:9f:13:e0:76:b4:f6:b8:39:4e:d3:
         20:82:a6:2e:5d:8c:a0:24:73:22:17:51:8f:35:2e:9b:cc:8d:
         c2:7a:af:38:88:0c:fb:9c:aa:f9:64:8a:df:38:42:3b:c2:ec:
         f6:d0:89:69:c2:a9:0a:73:e5:f9:0d:bf:31:ab:eb:6f:1f:46:
         e3:c4:fb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:52:06 2026 by rpki-client