Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          fBaq5SB6brHrX1BQRg7cuUdo6I/tHMTxRcN1nuTWvWU=
Subject key identifier:   97:60:E0:6B:81:9E:52:B1:45:AC:B2:21:96:61:F3:4B:12:09:AC:19
Certificate issuer:       /CN=4156BE0E036363A596E1CBC310489AB801DFF941
Certificate serial:       061206E928CA410E7966F929E7CB80DF800586A2
Authority key identifier: 41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 03 May 2026 02:46:38 +0000
ROA not before:           Sun 03 May 2026 02:41:38 +0000
ROA not after:            Sun 02 May 2027 02:46:38 +0000
asID:                     55002
IP address blocks:        103.82.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl
                          rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:12:06:e9:28:ca:41:0e:79:66:f9:29:e7:cb:80:df:80:05:86:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4156BE0E036363A596E1CBC310489AB801DFF941
        Validity
            Not Before: May  3 02:41:38 2026 GMT
            Not After : May  2 02:46:38 2027 GMT
        Subject: CN=9760E06B819E52B145ACB2219661F34B1209AC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:d9:d8:a0:b0:bd:db:ce:fa:4a:2b:c6:d1:
                    e8:61:94:36:27:4e:0d:0f:75:6e:8a:f9:8a:a0:f8:
                    a5:6b:5d:4f:ce:75:ea:4a:87:b0:2c:bc:b8:58:ca:
                    41:f9:8e:09:ec:8e:8c:27:ba:d7:d0:ae:65:ab:4b:
                    87:0d:32:21:4d:75:c6:a9:59:00:52:a0:e2:01:09:
                    e1:c2:80:23:f1:85:e8:84:a5:39:16:0d:4f:75:97:
                    f5:c2:bd:64:eb:6f:42:4e:87:e2:ba:28:53:42:33:
                    03:16:eb:0a:31:b4:b0:32:a9:59:12:96:a4:aa:d9:
                    28:6d:ad:de:3c:c4:cf:ed:bf:5b:89:8b:d2:6f:d7:
                    72:cb:d9:87:75:ef:d6:76:80:3b:20:d1:47:da:06:
                    40:0f:33:b5:88:67:9e:9a:bb:65:93:7f:16:69:7f:
                    43:80:01:45:21:3e:36:d1:4f:6a:68:dd:b8:22:f9:
                    a0:4e:09:f2:53:f1:58:c8:e9:75:27:41:5b:dd:28:
                    5b:3f:35:57:1c:08:a1:3e:74:3c:db:60:25:ae:a8:
                    29:15:e2:7d:d6:59:8b:52:ce:82:00:2c:75:aa:5b:
                    73:e4:6b:1f:a0:dd:13:55:50:62:e8:31:0e:14:59:
                    ba:ed:62:d5:14:76:24:23:54:b3:c5:dc:dc:5a:1c:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:E0:6B:81:9E:52:B1:45:AC:B2:21:96:61:F3:4B:12:09:AC:19
            X509v3 Authority Key Identifier:
                keyid:41:56:BE:0E:03:63:63:A5:96:E1:CB:C3:10:48:9A:B8:01:DF:F9:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/4156BE0E036363A596E1CBC310489AB801DFF941.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4156BE0E036363A596E1CBC310489AB801DFF941.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:01:23:68:0f:06:5c:cf:b3:2b:1a:e7:7d:48:64:02:53:12:
         64:3c:ac:bd:39:79:a2:38:72:ab:f9:8b:e2:f8:d4:83:16:1b:
         43:93:d2:43:b8:bd:da:44:64:14:a0:78:ed:e3:00:10:ea:05:
         da:f0:04:24:1c:fa:26:e1:91:a7:eb:6e:c7:8e:b0:42:01:51:
         df:72:5b:da:55:ca:82:bb:b1:2f:99:3a:97:99:ec:7e:09:f3:
         9f:69:d0:e5:39:f5:d1:bf:dd:14:49:02:87:51:ce:cc:3b:0f:
         c4:e9:72:87:db:98:f1:4a:c9:68:b3:55:42:71:82:f2:6c:fb:
         7c:d1:d6:5f:5b:af:fe:9d:3a:56:53:00:8d:31:47:8e:f8:70:
         52:20:55:ce:a3:aa:91:dd:e0:51:49:18:c6:57:f7:50:75:46:
         70:d4:76:74:21:87:56:72:0e:76:74:7c:55:d9:6a:d2:d9:ec:
         c1:47:bb:64:2a:26:1b:e9:7a:db:f2:19:7a:c0:be:6b:c0:01:
         c7:b6:91:a1:a7:6b:72:b3:13:61:cc:96:eb:a5:ae:a7:30:31:
         92:9f:5d:e9:74:12:80:52:50:38:58:27:1b:5f:c3:6f:ff:47:
         a6:0f:46:6f:43:33:ef:d0:ff:1e:7d:2c:42:0f:6b:6b:82:f9:
         81:5c:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:25:51 2026 by rpki-client