Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa
File:                     3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa (raw, json)
Hash identifier:          Ur2deLsRWDmCAqL8yUm8FNnfEGneYV45Th8VxPgH0qk=
Subject key identifier:   27:0B:77:8D:A5:AB:7A:6F:FD:A6:0B:07:0D:1F:06:91:63:85:D4:A6
Certificate issuer:       /CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37
Certificate serial:       1E4B301B80A4AB864C8893A7FCC26A80B866BA6B
Authority key identifier: 19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa
Signing time:             Sun 03 May 2026 02:38:59 +0000
ROA not before:           Sun 03 May 2026 02:33:59 +0000
ROA not after:            Sun 02 May 2027 02:38:59 +0000
asID:                     149395
IP address blocks:        103.181.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl
                          rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4b:30:1b:80:a4:ab:86:4c:88:93:a7:fc:c2:6a:80:b8:66:ba:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37
        Validity
            Not Before: May  3 02:33:59 2026 GMT
            Not After : May  2 02:38:59 2027 GMT
        Subject: CN=270B778DA5AB7A6FFDA60B070D1F06916385D4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:a6:61:4f:d0:2f:e7:78:9d:21:ea:54:b1:
                    af:69:17:a3:fd:a0:cf:41:9b:cf:58:a9:7d:c1:90:
                    ff:52:aa:15:40:8e:47:2c:3f:da:60:18:14:a6:28:
                    19:bc:d8:57:21:0a:56:3f:bb:9f:61:44:0c:26:56:
                    3d:d6:52:3f:84:d1:9f:fd:e6:76:90:ec:9b:3b:75:
                    02:60:a7:7a:47:0f:af:c8:5b:b2:78:be:0d:ce:b4:
                    7e:49:95:3e:2f:e0:74:b1:73:1a:ad:5a:d6:fc:c7:
                    3a:5e:f8:cc:fd:01:fb:c2:4b:cc:9b:00:98:20:3e:
                    c5:4f:17:b4:ba:d4:06:46:40:99:68:3e:e9:29:cb:
                    7a:99:63:e2:06:de:fe:a6:04:01:ad:1b:e0:18:6a:
                    90:69:40:36:2a:1e:3e:f3:7b:e6:0e:b1:0a:62:aa:
                    aa:15:57:5e:08:fe:9c:fd:9a:be:97:59:ca:17:7f:
                    16:d7:bb:ab:b1:26:8b:f8:52:75:a8:3e:8f:c6:1a:
                    77:c2:bb:93:ee:08:ef:38:da:4e:c1:2b:79:8d:c8:
                    e5:1e:dc:7d:db:b5:02:04:cd:29:61:3e:b5:93:e5:
                    03:77:5e:e2:7d:1b:16:9a:4a:d1:7f:ad:db:88:d9:
                    8c:04:ca:c2:1f:5c:19:45:7a:c9:95:bb:87:b3:aa:
                    e6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0B:77:8D:A5:AB:7A:6F:FD:A6:0B:07:0D:1F:06:91:63:85:D4:A6
            X509v3 Authority Key Identifier:
                keyid:19:A7:D2:47:3F:AA:6B:72:E3:99:A4:A1:0F:4B:64:0A:DF:1B:BB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/19A7D2473FAA6B72E399A4A10F4B640ADF1BBB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3234203d3e20313439333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:21:f4:70:ad:19:7e:65:ec:18:f9:3b:6c:5b:d2:a0:ed:
         24:ae:20:5b:57:65:e5:ac:7d:0e:91:fa:22:63:9f:fe:fa:14:
         65:67:88:9f:6e:bd:a6:28:7c:ba:35:36:c4:3d:34:af:fb:f2:
         67:7f:40:d5:35:8d:97:77:d0:db:f5:78:02:74:d2:1c:df:9e:
         57:02:13:61:5b:78:6a:e4:1d:2d:07:45:2b:72:14:ea:e1:d7:
         13:6c:91:f4:a9:60:3e:cb:ed:e1:03:39:57:b9:a4:72:10:9e:
         8d:fb:15:13:39:a3:1c:8a:f2:63:7a:a6:d1:86:be:25:ff:5f:
         8c:5a:f9:f8:1e:fe:21:c7:55:17:56:93:c1:6f:40:f0:94:c4:
         cf:cc:ba:a1:f9:ec:89:11:af:f6:2a:79:b0:a6:d1:23:cc:1f:
         79:f8:cf:c3:24:6f:f2:3b:dc:c6:05:6b:f1:42:29:29:04:83:
         b5:39:d5:88:97:73:9c:d3:12:fe:e0:4d:8e:4f:88:ce:9f:ad:
         9c:de:96:c0:b5:de:9d:e8:56:ae:c8:3f:e2:8c:b3:26:86:32:
         6d:86:da:d7:f5:51:ce:0b:00:1c:c5:68:13:13:c7:4a:cf:af:
         c3:8a:b1:58:af:f4:c7:bf:87:4e:80:5b:72:d4:09:a9:33:07:
         1f:72:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:12 2026 by rpki-client