Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
File:                     3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (raw, json)
Hash identifier:          IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=
Subject key identifier:   4F:8B:7E:17:34:0C:D3:F0:9A:97:B5:87:D1:A3:1A:C0:B5:1F:7A:6F
Certificate issuer:       /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505
Certificate serial:       219451D52362A4F5F28BEA1876AE78C38322578E
Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
Signing time:             Sun 03 May 2026 02:47:16 +0000
ROA not before:           Sun 03 May 2026 02:42:16 +0000
ROA not after:            Sun 02 May 2027 02:47:16 +0000
asID:                     149391
IP address blocks:        103.181.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl
                          rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:51:d5:23:62:a4:f5:f2:8b:ea:18:76:ae:78:c3:83:22:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505
        Validity
            Not Before: May  3 02:42:16 2026 GMT
            Not After : May  2 02:47:16 2027 GMT
        Subject: CN=4F8B7E17340CD3F09A97B587D1A31AC0B51F7A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:18:65:e4:13:ab:03:04:0b:23:d0:85:ec:a5:
                    c9:ef:c2:bf:a2:54:21:a4:3b:ff:9a:98:c5:08:e1:
                    10:35:ae:fb:08:f5:3d:62:19:73:f7:5c:c1:90:15:
                    a5:ab:32:70:89:4c:a6:b8:fb:17:2e:f2:b7:be:4e:
                    74:d4:61:14:f4:ab:e3:ef:dc:c4:82:dc:d9:f9:dd:
                    9e:b6:d5:7d:6c:e9:57:06:76:7f:8d:31:c2:b9:fe:
                    a7:7b:b1:75:82:04:46:96:53:2a:57:29:1b:b8:3b:
                    24:7c:c6:25:dd:15:0a:8f:5f:9b:33:e7:f2:07:cc:
                    10:87:1b:76:d9:58:38:ba:95:21:b2:22:ce:79:f6:
                    29:23:f4:08:79:6b:d3:f8:88:f4:8f:03:fe:b0:48:
                    06:d5:d5:bf:b3:7f:d8:24:db:1e:35:e4:c7:53:ab:
                    6f:6c:c1:b2:9e:f8:83:83:f7:96:1e:23:07:a1:1f:
                    c3:82:6d:9f:12:10:51:00:a0:3c:cd:d5:05:be:21:
                    7d:ad:e0:46:8c:f7:ed:d0:44:9b:1e:06:8f:b8:17:
                    a5:30:db:d5:61:ce:44:48:75:c7:d7:b6:a1:eb:66:
                    ee:16:89:2b:9c:e4:a7:29:9c:a1:c9:91:c2:7b:59:
                    d2:c7:de:bc:41:9f:c8:6c:dc:5f:6c:64:29:5f:2a:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8B:7E:17:34:0C:D3:F0:9A:97:B5:87:D1:A3:1A:C0:B5:1F:7A:6F
            X509v3 Authority Key Identifier:
                keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:5a:6f:3a:04:73:58:3a:cf:d0:f2:1a:11:b1:4e:c4:40:
         d7:d6:24:f9:c6:72:51:2c:fd:fa:98:cd:b6:ed:a2:90:a1:71:
         9a:31:7d:4e:c7:e3:d7:5b:70:92:a6:bd:f4:b5:a1:be:7a:ec:
         e2:27:6c:96:a1:9b:68:00:f9:77:8b:cf:0f:e9:a7:f4:4f:91:
         09:0c:3e:64:d7:71:3b:21:be:4c:8d:9d:c3:03:f4:27:c9:f1:
         12:93:0e:5b:06:ad:cd:78:ac:66:43:29:ad:f1:42:2f:57:f9:
         74:60:2e:ad:83:40:51:c6:42:1d:1d:23:65:15:2d:6e:7b:d6:
         43:59:30:76:aa:64:2c:21:d8:75:3b:c7:00:22:9c:22:0b:5e:
         13:68:c1:b3:79:1f:fa:cc:fb:1c:e7:bc:cc:61:16:94:4e:46:
         4c:87:df:8d:2b:cf:42:b2:b1:21:24:3a:6f:0b:78:1f:62:84:
         31:84:5a:12:76:35:99:30:16:95:44:53:01:07:74:78:3c:42:
         40:be:7b:55:99:e9:d8:a5:79:2c:20:6b:f7:80:a7:d0:c8:d4:
         6e:26:e9:55:f7:e8:ad:87:5a:95:0e:01:fd:45:82:5f:82:da:
         b5:5e:c0:21:60:18:d7:e0:26:52:d2:8f:f1:9d:f1:30:d7:01:
         f1:a1:2f:c2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIZRR1SNipPXyi+oYdq54w4MiV44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx
NjUxQzUwNTAeFw0yNjA1MDMwMjQyMTZaFw0yNzA1MDIwMjQ3MTZaMDMxMTAvBgNV
BAMTKDRGOEI3RTE3MzQwQ0QzRjA5QTk3QjU4N0QxQTMxQUMwQjUxRjdBNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGGXkE6sDBAsj0IXspcnvwr+i
VCGkO/+amMUI4RA1rvsI9T1iGXP3XMGQFaWrMnCJTKa4+xcu8re+TnTUYRT0q+Pv
3MSC3Nn53Z621X1s6VcGdn+NMcK5/qd7sXWCBEaWUypXKRu4OyR8xiXdFQqPX5sz
5/IHzBCHG3bZWDi6lSGyIs559ikj9Ah5a9P4iPSPA/6wSAbV1b+zf9gk2x415MdT
q29swbKe+IOD95YeIwehH8OCbZ8SEFEAoDzN1QW+IX2t4EaM9+3QRJseBo+4F6Uw
29VhzkRIdcfXtqHrZu4WiSuc5KcpnKHJkcJ7WdLH3rxBn8hs3F9sZClfKtCrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUT4t+FzQM0/Cal7WH0aMawLUfem8wHwYDVR0j
BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz
MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD
NTA1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzgyYzJmNDhkLTUxODUtNDFmOS1i
NmQyLTIyOGZiY2FjNGUyOS8wLzMxMzAzMzJlMzEzODMxMmUzMTM4MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntbYwDQYJ
KoZIhvcNAQELBQADggEBAETyWm86BHNYOs/Q8hoRsU7EQNfWJPnGclEs/fqYzbbt
opChcZoxfU7H49dbcJKmvfS1ob567OInbJahm2gA+XeLzw/pp/RPkQkMPmTXcTsh
vkyNncMD9CfJ8RKTDlsGrc14rGZDKa3xQi9X+XRgLq2DQFHGQh0dI2UVLW571kNZ
MHaqZCwh2HU7xwAinCILXhNowbN5H/rM+xznvMxhFpRORkyH340rz0KysSEkOm8L
eB9ihDGEWhJ2NZkwFpVEUwEHdHg8QkC+e1WZ6dileSwga/eAp9DI1G4m6VX36K2H
WpUOAf1Fgl+C2rVewCFgGNfgJlLSj/Gd8TDXAfGhL8I=
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:25 2026 by rpki-client