Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
File:                     3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (raw, json)
Hash identifier:          2fUOKnvs8nbAYX5IeKT2gpYQH5FYCwB7JlXdvrKSoYU=
Subject key identifier:   60:A5:E4:59:39:9E:F4:78:A5:0D:B1:CE:CE:80:DC:3A:37:4E:35:45
Certificate issuer:       /CN=096782C6E108EAAEE59692E8A1E468AA698658F3
Certificate serial:       343252D5A12852B7AB77FF90DE86B9D6513D5A41
Authority key identifier: 09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa
Signing time:             Sun 03 May 2026 02:35:49 +0000
ROA not before:           Sun 03 May 2026 02:30:49 +0000
ROA not after:            Sun 02 May 2027 02:35:49 +0000
asID:                     149401
IP address blocks:        103.182.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl
                          rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:32:52:d5:a1:28:52:b7:ab:77:ff:90:de:86:b9:d6:51:3d:5a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096782C6E108EAAEE59692E8A1E468AA698658F3
        Validity
            Not Before: May  3 02:30:49 2026 GMT
            Not After : May  2 02:35:49 2027 GMT
        Subject: CN=60A5E459399EF478A50DB1CECE80DC3A374E3545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:84:4b:28:f1:3e:60:74:19:93:8f:df:1a:21:
                    80:e1:0d:1e:46:9f:31:76:ee:74:42:26:29:99:6f:
                    3e:b4:68:1f:2e:87:85:2c:99:cb:2f:9a:d8:85:f5:
                    45:77:2a:fd:4d:1a:f7:34:48:33:4d:2f:4e:35:9d:
                    44:8b:fb:e1:42:7c:1b:f1:b1:af:64:9a:73:3d:62:
                    77:65:1a:9b:7f:64:09:81:16:1b:a9:dc:1e:c6:41:
                    39:6d:b3:6e:c2:28:79:ac:09:89:c8:c7:70:e9:eb:
                    6c:8d:d2:64:a8:d4:a1:1b:10:94:7a:7a:c6:91:54:
                    c0:1c:22:c5:55:cb:28:66:36:b1:5b:90:38:b3:e5:
                    17:bf:e1:86:3b:35:67:86:6b:f0:b1:bc:38:5e:1d:
                    46:52:c8:84:48:89:4b:cc:98:9e:63:df:d8:42:e4:
                    f0:2c:4a:36:b3:f1:b9:40:05:a0:bd:ba:8c:38:17:
                    1a:43:43:a6:fe:4d:92:72:5c:dc:f6:bd:0b:65:4e:
                    b9:88:c4:a4:23:7e:c1:98:2b:97:fe:68:66:14:56:
                    41:7d:41:48:fa:b6:b6:da:62:ca:3d:af:f1:21:39:
                    89:d0:58:c0:8d:7c:10:a0:2d:0a:a6:97:9b:6b:21:
                    28:1e:03:9e:7f:6f:2f:f4:1f:eb:1f:b1:fa:34:3f:
                    50:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A5:E4:59:39:9E:F4:78:A5:0D:B1:CE:CE:80:DC:3A:37:4E:35:45
            X509v3 Authority Key Identifier:
                keyid:09:67:82:C6:E1:08:EA:AE:E5:96:92:E8:A1:E4:68:AA:69:86:58:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/096782C6E108EAAEE59692E8A1E468AA698658F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/096782C6E108EAAEE59692E8A1E468AA698658F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:91:7a:67:33:47:2a:35:4a:f3:d2:cb:65:47:c9:01:6f:f9:
         1f:51:0a:ce:97:c7:d1:5c:af:19:6c:73:f6:da:59:56:8e:84:
         2b:a9:92:0b:7c:8c:54:16:c6:cb:96:3c:b1:14:e3:2b:9c:4d:
         a2:67:b8:f9:81:7f:47:ac:2e:f1:03:99:77:4e:0a:83:70:00:
         bd:c1:aa:ea:50:63:54:a6:fc:8b:a9:7d:07:3f:8e:7d:7c:bb:
         3d:21:6d:9d:e1:0c:dd:ca:c4:e7:2d:d2:2e:14:d1:0a:a7:3f:
         30:86:6d:fd:9d:cf:e4:8e:3c:4c:21:87:bd:40:95:95:d6:11:
         17:60:b0:5d:e3:92:63:79:31:5d:d6:be:f0:47:c3:00:d5:92:
         06:03:36:c8:9d:d4:83:a8:3b:f1:ef:89:76:7e:88:1a:96:7b:
         ff:e0:fa:55:c6:80:d5:67:ef:6c:29:45:82:8a:14:54:ca:e3:
         b7:df:86:e3:78:da:f5:91:27:10:a4:39:cd:4a:12:5c:a3:87:
         0c:31:68:18:2b:84:d8:58:73:d1:41:e8:eb:5f:30:c3:fd:69:
         a7:16:9b:ce:8d:5c:9e:8f:1f:13:39:dd:fb:09:3c:93:b8:82:
         83:4c:02:c1:89:5c:25:76:3f:b2:f1:5b:f4:a1:76:3e:76:c7:
         fc:12:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:47 2026 by rpki-client