Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          7UyJEJPWkgc1lkLhUJuF8XBFs03vwBiWhJbVsj3eTBw=
Subject key identifier:   BB:CB:1F:EF:D6:5D:5D:7B:68:3F:73:D0:6A:97:7A:14:93:BB:AC:5E
Certificate issuer:       /CN=F13BE7CA84D3EB2777A356EB3599153EB6750BBF
Certificate serial:       27B3BCC42213916805B043B0A87A3AD7837B0B89
Authority key identifier: F1:3B:E7:CA:84:D3:EB:27:77:A3:56:EB:35:99:15:3E:B6:75:0B:BF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
Signing time:             Sun 03 May 2026 02:32:38 +0000
ROA not before:           Sun 03 May 2026 02:27:38 +0000
ROA not after:            Sun 02 May 2027 02:32:38 +0000
asID:                     149365
IP address blocks:        103.180.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.crl
                          rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b3:bc:c4:22:13:91:68:05:b0:43:b0:a8:7a:3a:d7:83:7b:0b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F13BE7CA84D3EB2777A356EB3599153EB6750BBF
        Validity
            Not Before: May  3 02:27:38 2026 GMT
            Not After : May  2 02:32:38 2027 GMT
        Subject: CN=BBCB1FEFD65D5D7B683F73D06A977A1493BBAC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:25:bd:d7:db:04:1f:fe:08:d9:5c:fc:13:ff:
                    a2:09:03:ce:0c:09:ce:2f:53:d8:1a:ff:87:f0:ed:
                    6f:f9:4a:1a:d6:a1:46:12:59:05:79:91:89:02:b3:
                    3e:d5:35:dd:4e:38:8f:ea:3d:d3:a6:ea:87:e6:7d:
                    fe:47:36:0a:93:1f:49:a4:93:6b:5e:b7:37:65:0c:
                    95:fe:73:6f:60:c6:f9:d7:df:e0:f8:8e:6e:bd:93:
                    86:8a:9c:65:da:16:d1:2d:35:c7:31:21:1f:60:b7:
                    7c:5b:f2:20:4e:68:0f:6d:4b:dd:d2:b6:1e:78:20:
                    11:e9:0c:d1:76:e1:d7:71:db:1b:37:51:4a:50:2e:
                    1e:9d:b9:9d:5b:28:9a:35:b4:53:18:0c:81:55:02:
                    cd:1e:a8:38:92:82:a9:54:96:00:9a:4a:72:61:0f:
                    44:93:c4:f5:d7:fb:71:ba:e0:82:e6:e1:ad:9f:e0:
                    6d:79:a5:90:b9:86:44:cb:27:97:ab:f9:7a:8a:8e:
                    17:49:6b:cf:cd:ac:87:4f:6e:e0:59:2d:34:18:82:
                    18:15:45:31:8b:9a:9f:7f:60:96:bb:fb:6a:ff:7a:
                    5f:32:c8:8a:49:bc:a1:0d:a0:6a:d8:9d:18:31:9c:
                    0d:8e:81:16:df:90:d0:cd:11:d9:25:49:4f:e6:86:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:1F:EF:D6:5D:5D:7B:68:3F:73:D0:6A:97:7A:14:93:BB:AC:5E
            X509v3 Authority Key Identifier:
                keyid:F1:3B:E7:CA:84:D3:EB:27:77:A3:56:EB:35:99:15:3E:B6:75:0B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F13BE7CA84D3EB2777A356EB3599153EB6750BBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:34:79:8c:32:27:e1:b8:80:95:be:a4:2f:f2:a3:64:45:2f:
         11:01:e2:26:f4:ea:92:e6:10:42:a3:92:83:62:30:8b:e7:b2:
         26:57:e6:d5:89:ab:b1:a0:f1:a4:5d:4d:0c:44:df:ff:fc:d2:
         6d:c2:cf:1d:01:68:4b:b3:b5:d1:31:87:16:10:a3:12:1a:14:
         16:f9:91:87:3b:d5:a4:72:6f:78:78:b0:8c:30:36:61:51:75:
         21:53:7d:00:72:ff:9b:86:c6:4c:89:bd:d1:75:92:63:0e:61:
         d3:8f:d8:f8:71:58:6a:ce:5b:0c:3e:d7:d6:28:50:53:ea:78:
         73:3f:68:d3:92:3b:d2:f7:43:a5:55:21:b9:15:ae:1a:a6:6a:
         d8:b9:7d:89:dd:0e:15:67:3f:fc:59:55:32:26:51:f6:5e:64:
         f0:64:f5:a3:89:9c:23:29:65:15:56:a4:43:45:fb:ec:de:58:
         e1:d1:a2:0f:0f:b4:12:fa:2a:15:e8:6f:ad:dc:9e:03:11:e8:
         9e:87:58:ac:a7:8d:83:8f:14:21:7f:a2:25:15:38:bb:57:a2:
         88:c8:47:88:25:8a:7c:97:48:a6:e5:f8:65:8e:df:42:d5:2e:
         a8:c8:fc:be:78:c8:fd:9a:ce:28:b0:4a:e7:c2:c9:68:1b:c9:
         64:fa:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:50:45 2026 by rpki-client