Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa
File:                     3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (raw, json)
Hash identifier:          1Jti76r9T9UKwdcEcYvsPgmo/iaRRGG2B+UGXQ8BTSc=
Subject key identifier:   78:06:79:EA:27:95:DD:B8:07:A0:FF:F7:B2:9F:2C:55:E4:91:31:9F
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       25C53A36489561243687DD842E950A923880C6FB
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa
Signing time:             Sun 03 May 2026 02:46:39 +0000
ROA not before:           Sun 03 May 2026 02:41:39 +0000
ROA not after:            Sun 02 May 2027 02:46:39 +0000
asID:                     136061
IP address blocks:        103.82.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c5:3a:36:48:95:61:24:36:87:dd:84:2e:95:0a:92:38:80:c6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: May  3 02:41:39 2026 GMT
            Not After : May  2 02:46:39 2027 GMT
        Subject: CN=780679EA2795DDB807A0FFF7B29F2C55E491319F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:f3:a5:c6:f9:f1:84:6f:02:07:fb:b2:ac:
                    7f:f2:99:57:22:d3:54:f5:fe:5e:30:0d:36:28:8e:
                    c6:1b:6c:57:3d:97:1d:a1:32:c6:0f:ee:7e:10:80:
                    9d:fe:06:83:eb:4a:ca:c0:6a:4b:95:21:cf:8d:4c:
                    fd:5f:69:86:eb:59:77:71:4d:fe:72:1f:10:ff:3d:
                    ab:ac:41:39:2c:1a:34:0e:c8:13:d4:97:88:83:f1:
                    23:21:06:94:82:70:31:2d:81:cd:34:45:bb:2c:a0:
                    97:33:93:c9:93:e6:c0:5e:55:54:6b:31:d8:f5:ee:
                    b4:c5:f8:71:e1:9d:3f:7f:b5:50:57:14:a2:70:ca:
                    b4:c8:b4:0d:7e:93:6b:a5:37:36:64:26:47:94:c1:
                    eb:01:ca:92:7e:1b:5a:1d:fe:68:fb:0a:38:44:07:
                    ca:e5:e5:de:b4:aa:c3:4e:14:54:39:93:15:0e:2b:
                    18:e9:69:f9:4d:31:9b:25:d7:ea:a3:9a:d8:19:96:
                    83:87:84:d9:48:dd:72:81:45:d7:0a:9f:4d:94:2a:
                    7c:44:66:ac:b5:5d:e8:5a:25:b0:20:16:99:14:c3:
                    61:04:14:51:6f:61:7e:74:68:87:40:78:dc:67:fc:
                    48:0c:74:e9:2b:eb:8c:62:d1:61:2c:7f:85:8d:cc:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:79:EA:27:95:DD:B8:07:A0:FF:F7:B2:9F:2C:55:E4:91:31:9F
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:f3:b4:a9:c0:e9:b4:ee:13:01:d5:ff:02:6f:46:8c:87:ff:
         a8:13:d8:93:fb:14:cd:7e:a4:99:9f:fb:2a:bb:aa:17:15:b2:
         7d:af:b5:cd:df:08:5b:df:22:20:f2:56:1c:10:91:7b:56:96:
         ff:7b:43:af:2b:e9:06:cb:c4:24:d3:9a:be:c6:75:53:5d:41:
         83:42:d7:ce:15:a3:f2:61:35:7f:5e:1c:d5:17:4d:c9:ab:68:
         56:48:12:39:99:20:df:12:5f:bc:76:7c:04:e7:55:bd:06:ef:
         4a:ab:78:8e:9e:6f:45:06:92:eb:9b:4f:66:84:75:cd:5b:31:
         03:ab:6e:a5:f6:a1:07:6d:3b:5d:09:57:23:9d:2c:72:85:d4:
         d2:7d:4d:b7:36:5d:c0:e9:c4:b3:8a:6c:bc:4e:f7:c2:af:4f:
         26:ec:22:b8:1e:e2:7f:aa:dd:e0:10:b4:e0:79:fa:01:c7:14:
         31:45:66:f3:b6:a0:26:7d:69:22:35:45:57:04:b3:a8:54:6d:
         9e:40:dc:64:73:45:09:65:99:2f:52:9d:e3:fb:9a:13:c9:5c:
         f0:7f:91:0e:4d:d2:02:2d:57:f7:69:30:36:af:23:de:3a:d6:
         ce:4f:cd:b0:62:52:54:56:04:68:18:d8:48:77:c9:04:59:9e:
         a3:18:cb:97
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJcU6NkiVYSQ2h92ELpUKkjiAxvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE1NkJFMEUwMzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgw
MURGRjk0MTAeFw0yNjA1MDMwMjQxMzlaFw0yNzA1MDIwMjQ2MzlaMDMxMTAvBgNV
BAMTKDc4MDY3OUVBMjc5NUREQjgwN0EwRkZGN0IyOUYyQzU1RTQ5MTMxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6vOlxvnxhG8CB/uyrH/ymVci
01T1/l4wDTYojsYbbFc9lx2hMsYP7n4QgJ3+BoPrSsrAakuVIc+NTP1faYbrWXdx
Tf5yHxD/PausQTksGjQOyBPUl4iD8SMhBpSCcDEtgc00RbssoJczk8mT5sBeVVRr
Mdj17rTF+HHhnT9/tVBXFKJwyrTItA1+k2ulNzZkJkeUwesBypJ+G1od/mj7CjhE
B8rl5d60qsNOFFQ5kxUOKxjpaflNMZsl1+qjmtgZloOHhNlI3XKBRdcKn02UKnxE
Zqy1XehaJbAgFpkUw2EEFFFvYX50aIdAeNxn/EgMdOkr64xi0WEsf4WNzKrFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeAZ56ieV3bgHoP/3sp8sVeSRMZ8wHwYDVR0j
BBgwFoAUQVa+DgNjY6WW4cvDEEiauAHf+UEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODA3NThmMTUtNWRlOC00ODdkLTk5NDUtYzNlYTIwN2U0NGFkLzAvNDE1NkJFMEUw
MzYzNjNBNTk2RTFDQkMzMTA0ODlBQjgwMURGRjk0MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MTU2QkUwRTAzNjM2M0E1OTZFMUNCQzMxMDQ4OUFCODAxREZG
OTQxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgwNzU4ZjE1LTVkZTgtNDg3ZC05
OTQ1LWMzZWEyMDdlNDRhZC8wLzMxMzAzMzJlMzgzMjJlMzEzODMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1K3MA0GCSqG
SIb3DQEBCwUAA4IBAQA787SpwOm07hMB1f8Cb0aMh/+oE9iT+xTNfqSZn/squ6oX
FbJ9r7XN3whb3yIg8lYcEJF7Vpb/e0OvK+kGy8Qk05q+xnVTXUGDQtfOFaPyYTV/
XhzVF03Jq2hWSBI5mSDfEl+8dnwE51W9Bu9Kq3iOnm9FBpLrm09mhHXNWzEDq26l
9qEHbTtdCVcjnSxyhdTSfU23Nl3A6cSzimy8TvfCr08m7CK4HuJ/qt3gELTgefoB
xxQxRWbztqAmfWkiNUVXBLOoVG2eQNxkc0UJZZkvUp3j+5oTyVzwf5EOTdICLVf3
aTA2ryPeOtbOT82wYlJUVgRoGNhId8kEWZ6jGMuX
-----END CERTIFICATE-----
Generated at Wed May 13 10:30:05 2026 by rpki-client