Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
File:                     3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (raw, json)
Hash identifier:          UeJxolbXL3BMQ04oIpha9WXgWRITl1oJXfXm7RSMha8=
Subject key identifier:   37:D4:88:56:F0:AB:3F:60:AE:FD:DA:C5:CC:60:AC:78:14:F5:8C:1A
Certificate issuer:       /CN=80810D47BA27B751C4A9441187D412B7B4FA5089
Certificate serial:       7B80D1BFB0F7B58EEB1E232857BCBDDC8F640E44
Authority key identifier: 80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
Signing time:             Sun 03 May 2026 02:22:25 +0000
ROA not before:           Sun 03 May 2026 02:17:25 +0000
ROA not after:            Sun 02 May 2027 02:22:25 +0000
asID:                     58817
IP address blocks:        103.18.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl
                          rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:80:d1:bf:b0:f7:b5:8e:eb:1e:23:28:57:bc:bd:dc:8f:64:0e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80810D47BA27B751C4A9441187D412B7B4FA5089
        Validity
            Not Before: May  3 02:17:25 2026 GMT
            Not After : May  2 02:22:25 2027 GMT
        Subject: CN=37D48856F0AB3F60AEFDDAC5CC60AC7814F58C1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:d4:34:e8:86:f3:dd:84:a5:64:0a:de:63:
                    cc:e2:38:e3:1c:e0:cf:21:b0:c0:bd:57:7c:e9:b3:
                    9c:b6:22:b3:7e:ea:b1:68:0a:e0:10:d9:5d:e7:8a:
                    4e:4b:19:b1:e1:e2:c2:26:ea:45:9a:9d:a5:0c:b1:
                    c7:57:d8:c3:ee:e9:46:68:06:b5:d9:ef:88:dd:f1:
                    3e:ff:b6:1c:cf:81:c0:d0:32:a6:d8:55:11:fa:e1:
                    7c:c0:9f:37:14:88:c5:60:0a:34:2f:ac:74:85:7f:
                    8d:02:4a:2a:99:ea:3f:89:f0:d8:ea:82:a4:25:c6:
                    68:8d:66:35:5d:17:a3:c2:7f:31:f3:8a:ff:33:81:
                    7a:50:7f:ab:71:d0:8e:7e:59:ae:60:70:eb:c8:fa:
                    48:3b:aa:41:a7:95:09:ce:d8:72:53:cc:2b:4b:5e:
                    65:ec:a0:e9:58:b0:1b:af:75:fa:73:14:46:c1:e4:
                    f8:10:73:e2:11:b1:0d:d3:a4:f5:33:6a:26:a4:b8:
                    73:4e:5d:9a:34:a6:94:16:10:11:69:de:4b:e5:5b:
                    87:7e:75:88:e1:2e:7a:c7:35:13:55:21:a2:b7:08:
                    d2:aa:61:7d:0a:09:fd:09:e6:19:f6:a6:38:e8:71:
                    b4:db:bf:b1:e8:1b:2c:8d:5f:e8:f1:6f:1b:05:f4:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:88:56:F0:AB:3F:60:AE:FD:DA:C5:CC:60:AC:78:14:F5:8C:1A
            X509v3 Authority Key Identifier:
                keyid:80:81:0D:47:BA:27:B7:51:C4:A9:44:11:87:D4:12:B7:B4:FA:50:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/80810D47BA27B751C4A9441187D412B7B4FA5089.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/80810D47BA27B751C4A9441187D412B7B4FA5089.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:2f:63:82:4f:d1:46:73:5e:fb:c0:f6:ee:5a:98:f1:ea:
         80:8d:f7:71:03:f8:a3:f4:6b:53:a1:71:55:ac:53:c1:b4:4a:
         37:38:47:af:7e:8e:f2:c6:8f:aa:d5:b6:85:ba:d0:df:84:df:
         c3:fe:50:7b:3b:4d:da:89:12:70:17:b5:37:fd:4b:fd:84:a0:
         32:ca:c4:4d:1c:20:9a:96:e1:0d:14:a4:e6:d2:15:f8:93:ba:
         66:ae:37:35:b3:89:e2:88:24:72:bc:d0:19:42:bb:df:7c:b4:
         0b:70:2d:50:ec:06:21:49:54:ab:87:58:fb:9c:a5:bb:ae:10:
         76:0e:11:8c:01:8b:58:d5:a7:01:41:0d:8c:68:05:c6:46:84:
         c6:06:48:86:36:c6:01:08:c9:e9:11:b3:b5:c7:01:82:3f:66:
         dc:9a:db:b2:92:ed:0e:91:2c:0d:f5:7b:5f:d1:13:72:7d:c0:
         60:8f:57:1e:de:9e:4b:9b:30:1c:b8:db:39:24:5e:34:cf:14:
         21:58:f6:ad:96:1b:74:74:ad:be:b2:0b:fc:31:a5:79:17:59:
         96:49:ae:1c:e9:99:06:c1:26:9d:f7:d2:a4:48:74:ab:f7:f4:
         83:99:57:38:21:69:b5:3d:88:a2:9f:b0:af:8b:db:c8:76:94:
         ee:11:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:41 2026 by rpki-client