Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa
File:                     3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (raw, json)
Hash identifier:          swMIglkDWca6bTykcQAlBI8mPZmObmBmI7XJvNSgNmI=
Subject key identifier:   89:6B:03:C9:FA:6B:B6:A0:06:59:A5:9A:B2:A5:68:E2:E9:07:2F:A1
Certificate issuer:       /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
Certificate serial:       A4E10F2A33F3B6ABCF3A6FC392D0375CDDDC59
Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa
Signing time:             Sun 03 May 2026 02:32:42 +0000
ROA not before:           Sun 03 May 2026 02:27:42 +0000
ROA not after:            Sun 02 May 2027 02:32:42 +0000
asID:                     132642
IP address blocks:        103.19.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl
                          rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:e1:0f:2a:33:f3:b6:ab:cf:3a:6f:c3:92:d0:37:5c:dd:dc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
        Validity
            Not Before: May  3 02:27:42 2026 GMT
            Not After : May  2 02:32:42 2027 GMT
        Subject: CN=896B03C9FA6BB6A00659A59AB2A568E2E9072FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:bb:cd:ce:55:1e:33:27:09:70:ed:20:60:
                    10:26:0a:45:15:9c:9d:94:42:40:d5:fc:29:96:c4:
                    e9:72:eb:da:f3:69:1b:b0:23:93:43:0d:32:f1:f6:
                    40:56:d4:ae:b8:69:da:82:3c:3c:73:07:09:ab:ca:
                    79:26:bc:e8:be:62:f4:51:68:f8:e3:40:32:68:18:
                    a1:3d:90:d3:26:f3:2d:b1:c2:e0:33:9a:18:cf:b3:
                    48:e2:87:2a:57:8c:eb:a6:c4:b7:77:6b:6e:e2:73:
                    4b:b8:4e:bc:dc:e7:71:2e:29:10:eb:32:4f:43:96:
                    76:8f:dc:87:8a:72:c8:00:93:17:b8:92:d5:8e:15:
                    0a:70:34:80:4a:31:77:47:98:64:c7:57:1d:a1:f3:
                    57:74:8a:b6:41:c3:0e:8f:09:d4:42:73:29:8e:af:
                    e5:0a:25:2b:9b:27:d7:d0:a5:e3:ab:a2:df:7c:4a:
                    7f:4b:34:d6:2c:f7:59:95:5c:a8:04:5e:8f:36:b7:
                    c5:c3:f3:3d:37:f9:ae:23:d8:9a:d0:cc:5e:03:f4:
                    3a:b8:92:6f:46:99:e7:73:ae:08:be:3b:e8:28:ab:
                    f0:ba:e9:1b:88:80:c3:ce:d1:fa:16:38:87:82:a1:
                    34:a4:a3:4e:e1:be:54:be:1d:29:a4:76:a3:11:a2:
                    aa:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6B:03:C9:FA:6B:B6:A0:06:59:A5:9A:B2:A5:68:E2:E9:07:2F:A1
            X509v3 Authority Key Identifier:
                keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:6b:52:8a:97:e9:6c:c9:89:4c:df:3d:90:4d:bd:8f:ac:75:
         b5:77:ef:f9:8a:76:ca:02:35:e9:91:ec:7b:5c:fb:fa:35:14:
         fc:c1:58:1a:a1:6a:e9:3b:31:54:99:cf:7a:19:af:69:3b:60:
         0e:cc:a1:40:65:fa:16:3d:fc:75:ab:88:b7:35:8b:0f:1b:77:
         7c:9d:81:24:25:8a:bc:b6:e0:eb:be:e8:bb:65:0a:18:11:ca:
         e4:a7:15:d9:be:b4:ff:d9:9d:33:6d:8d:28:69:f1:26:ea:b3:
         3e:3c:ca:c2:68:cf:41:eb:de:6a:92:fb:46:5c:4f:cb:44:9e:
         2f:f2:fe:88:86:0d:9c:af:84:b5:a8:69:0b:0a:cd:f2:0c:4c:
         a5:61:bc:72:c9:65:c1:d7:58:7a:2b:e8:e7:0d:dc:01:e0:49:
         ae:2d:4b:a3:97:7a:88:f1:68:33:ae:00:16:a9:6d:f4:4b:d0:
         25:5f:c6:12:7b:0d:c6:72:c0:b4:9a:3a:a9:24:4b:0b:c3:fb:
         48:7d:62:c3:34:6f:44:70:99:55:6c:73:d9:41:50:2a:7b:0a:
         8d:bc:4a:e4:36:fc:92:6e:89:26:25:fd:c8:c5:a1:ea:f6:00:
         cc:e7:48:36:c3:bd:89:63:91:36:08:4f:ca:a1:37:2b:d7:8e:
         c6:5b:4a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:18 2026 by rpki-client