Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (raw, json)
Hash identifier:          80LRBswxlIwyMdrBKKN8zHcPB67XbaBw69GuBUvFeh0=
Subject key identifier:   57:B6:12:01:15:58:38:B4:33:D7:70:79:BC:FA:86:54:02:E3:CE:FC
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       59B56894C27C9F8D025AE3482469DD343BA70C4D
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
Signing time:             Sun 03 May 2026 02:46:40 +0000
ROA not before:           Sun 03 May 2026 02:41:40 +0000
ROA not after:            Sun 02 May 2027 02:46:40 +0000
asID:                     136061
IP address blocks:        103.82.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b5:68:94:c2:7c:9f:8d:02:5a:e3:48:24:69:dd:34:3b:a7:0c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: May  3 02:41:40 2026 GMT
            Not After : May  2 02:46:40 2027 GMT
        Subject: CN=57B61201155838B433D77079BCFA865402E3CEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:f6:89:ed:a8:77:3a:de:2a:04:2b:83:06:
                    72:03:d9:9a:03:2d:1f:a6:3b:77:7b:70:b6:70:63:
                    de:fb:3f:c9:c3:50:33:74:30:64:db:74:8c:05:44:
                    89:43:4e:47:96:44:cc:77:9f:d6:c1:b7:e9:b4:c8:
                    ed:48:d5:0c:ea:5c:44:11:54:33:d3:b3:12:c0:4c:
                    a1:3e:a6:b8:08:bd:2a:af:e4:87:f6:d8:65:5f:de:
                    87:50:d4:f2:7e:dc:c6:1f:ea:1b:72:eb:db:fb:f3:
                    2a:e0:c7:89:61:5b:2d:66:51:cd:3a:d3:e9:66:79:
                    c5:35:76:3c:36:02:4a:15:ab:a8:11:04:d8:53:18:
                    71:d4:98:5f:fe:3d:68:b0:bd:1f:67:ee:32:b8:aa:
                    36:a3:ff:90:ef:62:a4:59:1e:e5:3d:4d:10:46:2a:
                    3e:77:2d:f7:d9:0c:7e:d1:a7:d3:11:19:2c:8c:72:
                    a5:8e:5c:c8:17:d4:2a:e0:73:f9:9d:25:0b:6c:a7:
                    36:bf:18:bb:63:cc:ae:41:09:08:6d:34:78:39:2b:
                    34:10:d7:d7:46:95:08:a0:54:86:b6:da:68:07:50:
                    0e:52:56:0d:23:b4:60:2e:61:e5:0c:27:63:60:c7:
                    42:21:50:d8:43:02:f2:b0:a6:2b:84:bf:94:b8:36:
                    16:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B6:12:01:15:58:38:B4:33:D7:70:79:BC:FA:86:54:02:E3:CE:FC
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:fa:fe:2f:b5:60:46:ca:17:3b:75:eb:32:12:da:7f:7d:b2:
         95:90:bc:1f:5c:ae:bb:06:3a:2e:9b:8e:35:dc:c0:07:24:49:
         57:82:f1:0f:95:56:ed:0b:b8:66:bc:48:2b:31:85:32:55:0f:
         0d:8f:0f:83:07:a1:75:d5:df:44:30:3c:8f:44:5e:88:49:9a:
         fb:52:b9:50:fa:8e:ab:71:54:40:e3:66:d0:f9:d5:f1:36:06:
         48:b2:25:f5:5c:76:68:59:b8:4e:e6:8e:a5:af:e4:9a:de:ed:
         f4:75:8c:11:e6:71:44:62:5b:fa:01:ba:89:c7:88:b7:ad:1d:
         b3:a6:33:83:cf:fe:7f:f8:54:3c:8e:df:33:a9:7f:eb:dc:73:
         af:87:f7:1b:b4:fc:ca:a1:06:69:18:9c:11:81:d4:0b:29:08:
         77:1f:3c:5b:ea:88:4a:2a:7a:dc:fa:a5:00:60:c9:a1:89:97:
         51:1e:60:31:e1:a2:e9:91:e5:d7:32:95:59:9b:6e:ca:d6:79:
         36:50:57:b0:dc:31:ab:62:04:22:2a:0d:fd:54:d2:94:dc:0e:
         19:60:58:9b:e4:38:09:2c:80:ba:c5:9b:ef:b3:b4:bf:c8:d6:
         ac:e2:ae:ca:77:8a:8f:a9:19:02:22:cc:24:ee:64:fc:a2:82:
         3b:17:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:02 2026 by rpki-client