Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          7vL8y9qGcwGlBHTlp7W2DDNh7nh9ZG6pUOsZTFcC5m8=
Subject key identifier:   FE:22:BB:13:34:9E:AD:78:8C:BC:24:45:7B:82:EF:EF:58:74:DE:81
Certificate issuer:       /CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
Certificate serial:       16643382BD72CB40E04BE0E9A5F0239EF5F176A0
Authority key identifier: DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa
Signing time:             Sun 03 May 2026 02:32:39 +0000
ROA not before:           Sun 03 May 2026 02:27:39 +0000
ROA not after:            Sun 02 May 2027 02:32:39 +0000
asID:                     132642
IP address blocks:        103.19.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl
                          rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:64:33:82:bd:72:cb:40:e0:4b:e0:e9:a5:f0:23:9e:f5:f1:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887
        Validity
            Not Before: May  3 02:27:39 2026 GMT
            Not After : May  2 02:32:39 2027 GMT
        Subject: CN=FE22BB13349EAD788CBC24457B82EFEF5874DE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:db:20:02:3e:57:f2:8c:11:29:dd:c9:23:80:
                    89:3e:cb:8f:c3:3e:85:aa:ea:27:b8:b8:8c:6c:9a:
                    84:9a:bf:d3:bf:7a:e9:fd:b0:78:7f:94:cc:ba:d6:
                    84:cd:b1:76:18:58:93:5c:92:39:34:59:f0:dc:be:
                    a5:69:53:e9:71:5c:33:1a:c4:23:ba:57:84:d7:b7:
                    f9:fe:76:b1:7e:0a:f1:33:de:2a:d7:b1:44:39:19:
                    2f:a4:ee:a5:13:85:6b:2c:01:41:01:06:46:d5:7c:
                    03:57:25:70:3c:0e:4f:26:eb:04:7a:7f:50:f5:f2:
                    a3:4d:37:1a:06:9e:65:90:bc:e2:68:d9:70:ec:ad:
                    dc:dc:a6:1e:3a:6e:81:89:fb:c8:8f:ab:2a:0d:fe:
                    55:d7:10:20:e8:80:a2:8d:2b:44:86:1b:a5:a3:93:
                    67:65:26:f8:5f:a4:fc:0b:4e:52:e1:e8:e5:0c:ed:
                    9b:0d:19:fb:57:ee:27:cf:17:bd:4f:59:b4:bc:69:
                    ad:18:9b:60:fb:21:01:43:e7:a5:f3:c9:ab:40:07:
                    15:ca:be:f7:07:e0:ac:cf:11:1d:8e:89:57:21:23:
                    9e:fe:6c:6b:5a:3d:32:90:7f:d5:ed:a6:4a:e1:80:
                    7c:ff:b4:3e:a3:0d:6a:19:ab:c7:44:17:5a:51:38:
                    4e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:BB:13:34:9E:AD:78:8C:BC:24:45:7B:82:EF:EF:58:74:DE:81
            X509v3 Authority Key Identifier:
                keyid:DC:A3:C8:F8:E8:2C:D4:F9:E2:F8:F9:AE:C8:90:BC:1D:B0:98:A8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA3C8F8E82CD4F9E2F8F9AEC890BC1DB098A887.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:b3:9d:96:3b:01:3b:0b:75:ad:35:3c:09:33:7e:98:8f:
         e4:08:53:81:83:26:99:f8:a9:f8:f8:f3:bf:7a:66:05:8f:6f:
         25:7f:86:af:b2:5b:0a:b0:17:cb:50:f5:ba:96:27:4e:e4:df:
         21:f1:5a:f9:52:66:0d:bb:22:74:5b:f8:00:e5:96:3f:4b:ee:
         6a:ef:1c:f9:b5:59:0c:b1:10:bc:a3:3e:be:c1:06:08:e2:7e:
         41:23:80:58:ec:63:98:c7:fa:4f:f1:a4:e4:71:34:8f:0a:e1:
         fe:45:28:71:3c:b2:86:0c:d2:03:32:27:50:54:5d:ea:04:cd:
         9e:00:8d:87:9c:ad:57:8f:8e:fb:a1:b1:cb:43:75:42:25:59:
         06:f9:17:2b:65:f9:50:a9:bb:bd:74:c9:a6:ef:be:db:6e:51:
         25:bf:bc:f1:4c:19:d4:e5:25:99:c8:ac:24:05:85:63:58:b0:
         75:9f:99:e7:c8:b7:ac:04:91:fb:b8:98:d4:df:bf:8e:7e:50:
         f7:9a:7f:82:97:f2:ac:41:da:5e:1f:68:04:58:d8:e4:6c:c9:
         4a:d1:49:ce:f1:97:46:93:7f:ab:54:7d:57:b4:d1:9f:6a:f1:
         7f:5c:a5:8c:74:be:f8:5b:ee:73:a2:5e:34:ad:ed:88:66:5a:
         1a:f7:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:08 2026 by rpki-client