Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa
File:                     3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa (raw, json)
Hash identifier:          s8sSHcsNN0kxBivAZmbkAGceUR/4dbttEyt7Ds31ne0=
Subject key identifier:   15:08:0D:2E:E7:58:6C:7B:7A:C0:52:29:10:8B:56:70:C0:96:E3:3C
Certificate issuer:       /CN=E61B2C660E2F40C280D14E44F6309F6890476682
Certificate serial:       3D43FA27374BEB346E60C7B9265DE651B148735B
Authority key identifier: E6:1B:2C:66:0E:2F:40:C2:80:D1:4E:44:F6:30:9F:68:90:47:66:82
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa
Signing time:             Sun 03 May 2026 02:15:14 +0000
ROA not before:           Sun 03 May 2026 02:10:14 +0000
ROA not after:            Sun 02 May 2027 02:15:14 +0000
asID:                     149408
IP address blocks:        103.182.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.crl
                          rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:fa:27:37:4b:eb:34:6e:60:c7:b9:26:5d:e6:51:b1:48:73:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E61B2C660E2F40C280D14E44F6309F6890476682
        Validity
            Not Before: May  3 02:10:14 2026 GMT
            Not After : May  2 02:15:14 2027 GMT
        Subject: CN=15080D2EE7586C7B7AC05229108B5670C096E33C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:02:d6:2b:8c:93:f6:95:84:66:22:c9:79:d6:
                    3a:4a:86:85:ea:5b:a6:a3:d2:cd:0c:e7:7b:87:56:
                    07:35:7b:57:a2:77:63:6d:b4:de:46:88:2d:54:6f:
                    ab:25:c7:3a:13:4d:84:92:1b:d7:8b:c5:e8:de:f6:
                    d1:d9:3c:45:9c:ec:0b:05:ee:e1:99:a2:5f:46:6e:
                    22:27:8c:d8:e9:6a:8a:14:1c:89:11:93:dd:0d:c6:
                    92:be:53:c3:95:55:92:f1:59:1a:c7:69:d7:11:26:
                    0e:cd:39:88:b5:14:6f:e8:29:78:b5:53:53:c7:18:
                    31:7e:1a:03:09:21:25:c1:e4:cb:49:77:4c:0e:00:
                    af:0c:bb:91:2a:ba:76:3c:ca:33:18:31:37:6c:31:
                    d1:9a:2e:23:02:68:cd:19:35:d2:5b:2c:9c:63:4c:
                    05:c4:61:1f:ba:63:81:21:2e:bb:fa:9c:7d:23:1d:
                    62:f0:5d:62:22:9c:02:7f:6c:e2:a3:43:08:2f:90:
                    f1:eb:4e:7b:f4:37:b5:1a:c7:de:82:85:f0:da:26:
                    23:b9:b0:8a:9a:a5:0b:06:c2:bf:4c:99:47:5f:37:
                    d4:25:89:ca:5d:84:c4:83:b5:80:a9:81:8e:07:e3:
                    8d:7e:68:61:b9:ec:44:80:40:20:28:aa:4d:c0:48:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:08:0D:2E:E7:58:6C:7B:7A:C0:52:29:10:8B:56:70:C0:96:E3:3C
            X509v3 Authority Key Identifier:
                keyid:E6:1B:2C:66:0E:2F:40:C2:80:D1:4E:44:F6:30:9F:68:90:47:66:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/E61B2C660E2F40C280D14E44F6309F6890476682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E61B2C660E2F40C280D14E44F6309F6890476682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/167375f9-e8b5-4d94-80a8-35e02dd0f6f2/0/3130332e3138322e37322e302f32342d3234203d3e20313439343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:5c:bd:83:05:13:c0:ad:73:ca:a6:58:4b:11:71:45:31:7d:
         76:5b:75:44:44:28:cc:9f:e1:e3:f7:b7:ac:44:03:41:e4:33:
         f5:ee:d5:0e:24:dd:b5:08:15:a4:44:b4:7f:66:09:21:7f:88:
         6f:e2:e0:c9:6d:aa:ba:bb:ca:93:35:20:94:46:b4:a0:1a:7d:
         10:c3:79:ff:aa:af:f4:76:8a:0b:c6:f6:0b:74:90:68:4d:eb:
         7c:0d:d1:47:5b:57:ef:70:3e:ca:4d:54:07:64:46:83:18:b7:
         ff:6c:76:ff:3e:02:6c:ae:de:f6:2b:1f:db:56:74:e4:27:c0:
         60:1e:ff:2c:aa:64:df:09:a8:55:a0:4d:54:79:57:7f:dd:23:
         54:4c:e9:e5:19:b5:88:ab:5c:06:0c:7a:74:90:a2:8f:b0:3a:
         50:62:a3:a2:6e:94:ac:11:65:c8:99:22:f9:f2:39:3f:0e:6d:
         9d:e5:c7:d4:5c:67:65:8c:4e:91:58:84:13:73:50:dd:15:b3:
         bc:51:b8:d4:dd:bf:47:db:96:64:6c:28:33:ce:c6:71:a1:5a:
         44:bc:f7:bd:95:47:fe:fa:9d:f2:7b:1c:cc:cf:11:0f:77:cc:
         ed:e2:9e:e2:3a:90:46:c8:94:2c:5f:c0:0f:d4:9b:a4:12:53:
         e4:0c:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:11 2026 by rpki-client