Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
File:                     3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (raw, json)
Hash identifier:          Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=
Subject key identifier:   1A:D4:4E:B7:1E:53:C9:59:62:1E:88:F9:5F:0B:F9:17:51:13:9A:DC
Certificate issuer:       /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
Certificate serial:       56BB09CC6590CC93324DF25C795479E8A65BF8B6
Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa
Signing time:             Sun 03 May 2026 02:35:08 +0000
ROA not before:           Sun 03 May 2026 02:30:08 +0000
ROA not after:            Sun 02 May 2027 02:35:08 +0000
asID:                     149358
IP address blocks:        103.180.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl
                          rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bb:09:cc:65:90:cc:93:32:4d:f2:5c:79:54:79:e8:a6:5b:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
        Validity
            Not Before: May  3 02:30:08 2026 GMT
            Not After : May  2 02:35:08 2027 GMT
        Subject: CN=1AD44EB71E53C959621E88F95F0BF91751139ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:ed:52:36:59:0e:9b:17:22:36:78:70:46:
                    15:8c:79:3a:16:fc:f9:61:f8:4e:51:f7:e6:84:ef:
                    17:c0:38:82:25:a3:ca:de:de:a1:ef:fe:3d:2e:27:
                    59:ce:aa:d4:04:ed:28:c2:b2:04:f2:1c:67:9e:8e:
                    81:d0:9d:22:30:c7:2c:b6:e0:f6:7d:15:c6:a8:4a:
                    ea:dd:5d:0e:80:c2:fc:cf:c0:81:3a:7e:30:a8:e3:
                    ee:e5:6c:4e:e8:37:3c:79:53:18:b9:dd:0d:c7:30:
                    d4:7a:c0:7f:47:c4:a5:9c:ea:b8:87:c5:ec:c1:37:
                    e6:cb:75:b8:69:a0:84:2f:34:c1:a4:63:49:ee:9c:
                    99:85:91:29:4a:89:6c:98:ad:f3:0b:ba:d1:85:d3:
                    31:42:4f:63:8c:eb:46:89:b0:ab:19:cb:dd:99:2e:
                    15:de:df:ac:ea:53:fe:05:2b:ed:b8:57:94:2f:a3:
                    e1:3b:4a:2c:cd:f8:70:21:00:8a:75:6c:29:cf:5e:
                    00:2e:25:0b:a1:44:06:3f:e3:b4:ca:90:3f:8e:ed:
                    57:58:94:dd:16:d9:f6:24:5a:25:3f:32:a7:20:21:
                    f3:47:ab:01:02:ec:16:67:3a:5f:c0:ef:19:b6:c6:
                    d1:ab:8d:92:96:9e:dd:d4:cb:84:2d:0b:43:29:10:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D4:4E:B7:1E:53:C9:59:62:1E:88:F9:5F:0B:F9:17:51:13:9A:DC
            X509v3 Authority Key Identifier:
                keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2a:46:83:68:21:e9:a1:7d:35:ae:ed:e7:65:8d:35:39:7d:
         6b:bd:7c:91:6e:9b:57:41:39:76:4e:45:ba:42:6a:4f:b2:43:
         3a:22:3c:e8:0a:24:dc:1f:68:a3:1e:00:bb:b4:6a:0e:bb:e1:
         f4:33:d1:a4:11:68:df:84:d4:0e:53:10:5d:cd:15:4b:fa:6a:
         9e:42:d5:0c:1c:df:09:d1:62:15:6d:8c:f8:bf:8f:cc:c4:c1:
         f5:47:09:f1:15:a0:8c:b9:0d:a6:6c:33:71:aa:a0:52:bc:1d:
         c1:a0:b3:1e:25:80:39:9f:b1:2e:da:30:0f:34:e5:bd:48:34:
         93:d0:2c:30:56:0b:9c:0f:9e:d3:77:2e:72:91:07:ac:94:f0:
         54:a6:82:fe:55:68:3c:a2:f0:84:77:ce:f5:26:87:51:ed:86:
         c4:e3:ec:67:f7:ca:ed:8e:6d:a3:5c:da:9a:af:bb:65:de:7a:
         2f:8a:6a:95:52:fe:b7:56:40:71:ac:b7:71:58:59:3d:02:12:
         8a:46:4d:2e:69:fe:0c:8b:87:eb:6d:5a:31:aa:9b:5e:99:f3:
         16:e5:76:13:94:c0:a1:fd:c3:e9:a5:36:b4:b5:0d:c1:50:86:
         43:ad:dc:0b:b7:08:42:ee:84:f7:af:93:1a:2e:7f:1b:79:81:
         5b:c6:41:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:08 2026 by rpki-client