Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa
File:                     3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (raw, json)
Hash identifier:          4XDkg051W8n8V41hi/l03/yAasU7b+3VGGYDYDWaT7A=
Subject key identifier:   4C:D5:D6:15:79:6B:2B:44:EA:26:1A:46:B7:DF:7A:0C:83:12:33:E7
Certificate issuer:       /CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Certificate serial:       24C5B69DA90608C41C7CBCC65C7E27C58946A9CE
Authority key identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa
Signing time:             Sun 03 May 2026 02:13:22 +0000
ROA not before:           Sun 03 May 2026 02:08:22 +0000
ROA not after:            Sun 02 May 2027 02:13:22 +0000
asID:                     139381
IP address blocks:        103.184.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
                          rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c5:b6:9d:a9:06:08:c4:1c:7c:bc:c6:5c:7e:27:c5:89:46:a9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
        Validity
            Not Before: May  3 02:08:22 2026 GMT
            Not After : May  2 02:13:22 2027 GMT
        Subject: CN=4CD5D615796B2B44EA261A46B7DF7A0C831233E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:78:70:24:10:5c:fa:ba:6b:29:83:34:cd:
                    5b:ce:e6:49:94:35:f0:d9:19:54:c3:8d:30:aa:ac:
                    01:98:4e:bc:73:14:f5:8c:05:8c:02:41:d4:4d:49:
                    1e:b0:d7:7a:32:cb:32:d1:11:f3:21:fa:42:22:48:
                    27:e7:16:2e:0f:58:c7:69:97:cb:f7:7c:dd:bf:7a:
                    af:26:82:93:47:2b:7a:77:c1:28:a8:e9:16:09:b0:
                    55:05:e8:4e:cf:96:2a:c9:3c:0a:95:65:1a:2e:53:
                    6b:1a:45:b6:a9:cc:4c:fb:26:02:af:a8:78:55:7a:
                    63:f5:5b:a0:5c:1d:c2:55:a0:1a:13:94:da:df:40:
                    c3:a1:f5:90:40:87:33:a0:15:3d:29:2b:24:61:ce:
                    6f:2b:d7:5b:ea:2a:3a:46:d8:63:6f:41:64:61:c9:
                    c3:e8:25:b7:cc:46:d3:c0:3b:04:f9:9e:6b:fb:05:
                    2a:e4:46:6c:bc:2c:aa:c0:08:b8:5f:92:eb:c9:ce:
                    f2:79:73:ae:0e:f8:a8:fd:53:84:0c:6d:27:2b:66:
                    30:b9:8d:ae:fc:f4:e5:ff:45:c6:e2:78:4c:0d:e3:
                    77:77:0b:b8:0e:a6:c9:04:73:03:ce:0c:d2:e0:76:
                    d3:89:28:e8:02:8e:51:11:ba:15:12:2b:b9:8b:8c:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D5:D6:15:79:6B:2B:44:EA:26:1A:46:B7:DF:7A:0C:83:12:33:E7
            X509v3 Authority Key Identifier:
                keyid:92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:82:bf:22:9f:db:a1:7c:96:3b:21:a3:2b:64:42:b4:64:95:
         5a:d7:74:99:57:d5:33:00:8a:3d:ae:ac:f3:ef:f2:6d:0a:e9:
         32:2a:44:29:10:0f:05:8c:dc:03:2b:71:45:06:ef:60:98:22:
         75:6a:6b:44:b3:63:a3:aa:cd:81:a6:47:ec:27:da:38:1c:a7:
         75:ca:33:e8:a5:f6:7e:6a:4a:40:ca:d7:bf:a7:ce:f9:75:67:
         2d:bd:62:99:a9:4e:39:c5:3a:cd:cb:49:3f:d8:bf:5f:3d:5d:
         b3:c5:76:0d:26:7d:f2:4a:03:26:87:85:0d:1d:87:47:ca:c8:
         f0:88:a1:b5:86:de:8f:63:12:64:7c:1d:ab:57:6d:0f:8d:14:
         36:d9:19:22:a4:15:67:d1:30:87:3b:dc:1a:6b:06:fc:9c:9a:
         d4:80:b3:07:91:99:a5:27:c9:0b:c8:3e:f7:ff:8b:da:81:d6:
         22:89:e4:b8:07:bf:7d:63:ef:72:b3:8f:67:a5:7d:c6:4f:c7:
         65:1a:ed:cf:0b:64:19:9a:d6:f4:9a:ea:68:fb:1e:95:c7:d0:
         e2:b7:f3:65:99:76:50:b4:9f:bc:bd:58:6c:77:b9:cd:48:d9:
         80:79:ca:c1:64:a4:00:51:03:98:17:c9:6c:1c:48:ae:29:fc:
         e9:67:b1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:54 2026 by rpki-client