Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          UCk7jZXoYpkruvt2DJTp+VmnK7nRGUUGdqtR+jvlIkg=
Subject key identifier:   6B:05:88:5D:8E:74:8E:0D:E9:65:AC:3D:3B:62:A4:68:D4:79:7D:18
Certificate issuer:       /CN=F13BE7CA84D3EB2777A356EB3599153EB6750BBF
Certificate serial:       7A412AFCA0D4F6B127A46CCF9C4BA468C83BD0F3
Authority key identifier: F1:3B:E7:CA:84:D3:EB:27:77:A3:56:EB:35:99:15:3E:B6:75:0B:BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa
Signing time:             Sun 03 May 2026 02:32:38 +0000
ROA not before:           Sun 03 May 2026 02:27:38 +0000
ROA not after:            Sun 02 May 2027 02:32:38 +0000
asID:                     149365
IP address blocks:        103.180.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.crl
                          rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:2a:fc:a0:d4:f6:b1:27:a4:6c:cf:9c:4b:a4:68:c8:3b:d0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F13BE7CA84D3EB2777A356EB3599153EB6750BBF
        Validity
            Not Before: May  3 02:27:38 2026 GMT
            Not After : May  2 02:32:38 2027 GMT
        Subject: CN=6B05885D8E748E0DE965AC3D3B62A468D4797D18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:4f:0b:10:91:60:d6:ed:01:64:84:ec:b0:
                    73:34:07:1d:ff:d5:c2:ee:10:da:5f:ca:d5:91:f5:
                    7a:c6:d6:b2:48:d4:3e:99:80:34:88:97:6b:06:d1:
                    d1:3d:11:5b:31:1a:b4:ee:27:0e:ea:55:bb:34:6e:
                    cd:82:03:b4:50:a6:03:a5:52:08:bb:b5:a3:7c:78:
                    d9:3d:74:ce:ff:b4:0b:be:53:05:4e:2c:07:2e:42:
                    f3:cd:bb:6b:01:db:c2:19:b6:98:aa:66:3c:63:fc:
                    b3:b4:b7:7a:2e:a7:67:34:59:80:c7:9a:1a:52:0e:
                    8c:5a:90:92:b2:ad:d6:1b:aa:27:c0:b6:01:32:ff:
                    e5:f5:f2:6d:26:19:fb:6a:0f:f8:49:58:20:1c:bb:
                    c7:44:0a:56:1d:bb:57:57:52:88:d2:22:87:7d:d0:
                    4a:fe:ce:3f:e5:1a:d1:5e:be:7f:5b:a1:68:09:f1:
                    a8:3f:6f:7c:f6:51:68:dd:42:06:03:93:bb:cc:7b:
                    c9:20:ed:21:3d:82:b3:40:cb:f4:ef:69:5b:01:a3:
                    12:01:d3:c4:0f:ab:ee:15:c6:23:fc:0e:0f:e5:bc:
                    96:02:a9:00:96:50:f4:14:59:a0:70:aa:02:65:d4:
                    46:02:94:8d:c8:35:4d:ea:60:69:db:da:f8:99:4d:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:88:5D:8E:74:8E:0D:E9:65:AC:3D:3B:62:A4:68:D4:79:7D:18
            X509v3 Authority Key Identifier:
                keyid:F1:3B:E7:CA:84:D3:EB:27:77:A3:56:EB:35:99:15:3E:B6:75:0B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136362e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:93:6d:80:7d:67:a9:62:08:0b:26:62:b3:97:c4:85:95:
         8a:3a:10:6c:52:fc:3b:15:d1:a2:ed:0a:7a:02:5b:e0:ab:67:
         97:61:df:a6:c4:2b:61:f3:59:b1:90:0b:8e:1a:34:45:2b:fb:
         a5:e4:05:f3:fa:b7:ac:56:45:0f:26:92:57:05:3a:66:af:11:
         21:f2:1c:f3:7d:26:6c:e2:8a:b9:bc:71:0d:91:d0:85:03:c4:
         98:4f:15:f9:43:c6:34:b2:14:47:ba:3b:29:a8:1d:55:0e:d6:
         23:bb:9c:41:ab:21:f1:5f:70:f5:79:7a:4a:2c:18:2e:17:9f:
         3f:b4:41:da:ac:74:89:b1:5e:43:b1:a6:67:54:40:66:0b:09:
         4f:87:34:02:d1:d2:ca:58:c0:43:5c:4d:81:ba:80:66:7c:81:
         75:ad:de:c9:75:96:3c:19:58:31:9e:93:7b:43:83:5d:24:f6:
         5f:5d:d5:94:51:ab:7a:18:d3:04:4b:10:6f:21:4c:0a:49:20:
         46:26:7f:63:b3:1a:1c:52:17:4b:11:ea:40:64:ae:35:8a:85:
         18:53:02:21:d7:14:b6:2c:4e:0f:04:79:1f:9b:99:1f:63:11:
         80:8a:cc:b2:9f:a4:cd:06:7e:23:92:64:87:42:3a:85:f1:76:
         91:12:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:26 2026 by rpki-client