Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (raw, json)
Hash identifier:          BnEjvX1TV7mzZcLsswA7EKyiNtfAnyBE1cK3RYLFuSA=
Subject key identifier:   F3:5A:D8:1F:3E:1C:70:DE:9B:33:F7:CB:1F:30:A0:4D:0D:D8:15:AB
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       72C2FE429339F6D8FBE050CCAFB26B775308BA5B
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
Signing time:             Sun 03 May 2026 02:46:39 +0000
ROA not before:           Sun 03 May 2026 02:41:39 +0000
ROA not after:            Sun 02 May 2027 02:46:39 +0000
asID:                     55002
IP address blocks:        103.82.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:fe:42:93:39:f6:d8:fb:e0:50:cc:af:b2:6b:77:53:08:ba:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: May  3 02:41:39 2026 GMT
            Not After : May  2 02:46:39 2027 GMT
        Subject: CN=F35AD81F3E1C70DE9B33F7CB1F30A04D0DD815AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:13:61:46:48:e5:ee:fe:04:22:cd:dd:4d:
                    61:1b:ac:7c:7a:33:f9:51:a7:3e:7a:aa:d3:4b:d9:
                    e0:1b:a7:e6:bb:31:94:42:8a:35:7d:8b:ee:a5:79:
                    e6:94:88:a6:87:aa:f9:85:b0:73:ac:b6:33:50:27:
                    c5:b4:8f:2f:92:24:f4:c4:35:e0:a0:d6:9f:1e:b0:
                    e0:78:75:c1:38:24:81:c6:6d:dc:b5:77:ff:7f:89:
                    70:e3:63:61:5a:02:39:a7:f5:bf:75:ea:64:72:4d:
                    56:0c:95:ef:f8:8e:56:1e:95:c1:6c:c9:56:73:80:
                    fe:77:6c:e5:fc:dc:0e:9b:a0:8e:19:bb:3d:a9:c5:
                    bc:d8:cd:ab:8d:39:49:38:f6:00:48:b6:16:c2:2a:
                    14:4b:1f:70:2b:48:91:d0:e1:17:1f:1e:1d:e6:c0:
                    32:88:6c:1f:76:f7:d0:98:ef:c1:09:b3:df:d3:14:
                    59:52:e2:f1:86:36:a7:d3:c6:ff:32:ea:c7:e4:87:
                    c3:16:0e:51:54:00:7d:bc:b6:ee:9b:9e:2f:fc:61:
                    ab:b0:28:d7:00:fc:7f:38:da:93:a7:1b:fa:a3:17:
                    18:5b:34:86:2a:1f:78:ad:c5:d8:fb:51:d1:4e:9e:
                    2c:4a:a8:66:0b:7a:97:e9:16:1e:38:c7:68:62:2c:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:D8:1F:3E:1C:70:DE:9B:33:F7:CB:1F:30:A0:4D:0D:D8:15:AB
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:a1:8a:de:dc:93:a4:91:98:6b:13:9c:e7:ca:e7:b6:b8:
         98:6a:65:e7:eb:52:51:53:11:38:52:fb:78:89:85:e8:ca:55:
         41:87:02:16:67:d0:e6:b0:80:c6:35:1e:65:ac:2e:55:9f:0a:
         26:74:b5:43:64:72:fc:fb:00:b9:b0:6e:b4:d7:e3:25:d7:7c:
         94:e6:53:56:da:65:5b:9d:21:dc:75:ff:05:23:27:af:09:69:
         86:a1:58:23:a8:ce:71:9d:5c:40:7e:80:5e:f2:a0:12:85:65:
         c4:e2:a8:68:31:22:75:3a:ee:c2:3c:aa:71:89:86:b2:e5:24:
         8c:3f:64:a8:5c:df:cf:44:9e:6b:3e:ba:ae:18:5a:2f:96:7c:
         96:fb:a8:79:6f:75:34:f1:98:14:d0:a4:d2:57:13:40:42:05:
         e4:03:21:50:d9:7b:bd:b8:7b:42:1f:96:e7:7b:2e:a2:6b:22:
         4d:23:f8:30:45:ba:e5:ba:fe:34:e6:74:19:ad:95:3e:2d:46:
         08:f6:73:0a:34:e8:66:44:b6:47:36:16:c2:43:22:2a:b7:2c:
         bb:3e:cc:08:28:d7:7b:07:14:f1:0c:f1:a5:1c:48:e5:2d:a1:
         74:cb:3e:c3:d0:ec:fc:01:c7:5d:12:29:90:00:fb:59:37:10:
         64:d5:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:27 2026 by rpki-client