Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa
File:                     3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (raw, json)
Hash identifier:          W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=
Subject key identifier:   28:E3:36:C1:3E:AA:DE:43:02:F4:38:17:4E:C0:E7:A2:37:DD:68:74
Certificate issuer:       /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505
Certificate serial:       627F712556DC51BC3B88F8FF24C263BAAF24ED81
Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa
Signing time:             Sun 03 May 2026 02:47:16 +0000
ROA not before:           Sun 03 May 2026 02:42:16 +0000
ROA not after:            Sun 02 May 2027 02:47:16 +0000
asID:                     149391
IP address blocks:        103.181.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl
                          rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7f:71:25:56:dc:51:bc:3b:88:f8:ff:24:c2:63:ba:af:24:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505
        Validity
            Not Before: May  3 02:42:16 2026 GMT
            Not After : May  2 02:47:16 2027 GMT
        Subject: CN=28E336C13EAADE4302F438174EC0E7A237DD6874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:f6:51:e6:80:a8:55:ef:09:46:ca:88:9a:
                    d8:2a:e2:59:f5:5f:6d:91:e3:d1:e7:e9:42:61:ea:
                    fb:43:dc:3a:8d:17:61:eb:7b:c5:e4:58:6e:90:56:
                    b2:d8:82:b8:8c:ce:23:c0:93:47:29:86:58:d0:cc:
                    18:7c:15:be:9f:53:63:5f:9d:15:e4:71:10:89:c6:
                    18:51:f0:bd:0d:5f:74:01:a6:98:73:a3:80:60:8d:
                    a2:19:e0:cb:be:2d:49:1d:a0:c6:0f:92:66:26:fe:
                    c4:74:b1:83:68:98:d1:93:85:71:57:a5:62:3a:b2:
                    b4:c1:76:48:37:74:44:5f:ad:3c:30:d2:6a:72:8f:
                    a0:15:6a:57:ad:df:dd:f6:59:4f:0f:75:38:c8:66:
                    2f:b5:53:3a:5b:17:a6:b5:77:04:36:c4:40:9e:eb:
                    44:ee:00:ea:64:8d:f2:97:b0:ac:40:13:50:34:61:
                    73:38:28:77:8d:00:92:c1:3a:1d:0f:76:17:68:6a:
                    9a:8d:1d:fb:04:30:0e:8d:5a:b6:0b:eb:f6:72:dc:
                    9c:ec:65:9d:4a:ee:36:e0:7e:84:9e:41:fe:16:94:
                    01:68:cc:9c:1c:63:cf:03:2b:6f:6c:77:40:25:39:
                    d8:c6:22:3f:12:32:82:fa:17:a6:3c:90:68:d0:b5:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E3:36:C1:3E:AA:DE:43:02:F4:38:17:4E:C0:E7:A2:37:DD:68:74
            X509v3 Authority Key Identifier:
                keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:f4:ad:30:ae:44:df:42:13:3c:9d:a9:7c:b9:e2:4c:61:81:
         5b:9b:a1:1a:18:42:89:4d:26:6a:49:ee:cb:59:be:68:d2:31:
         0c:eb:0f:72:49:a5:72:dd:bd:ef:18:74:5a:e5:1f:c6:0e:a8:
         57:78:fd:ce:71:d1:b7:04:2c:f1:82:39:c3:f7:78:b0:23:cc:
         83:ef:d0:0e:9e:bf:af:8b:11:15:24:69:e5:9a:ea:dd:01:b3:
         3c:20:c9:7f:bf:fc:1c:6d:8a:63:ca:e4:3c:81:6e:4d:aa:1c:
         f2:67:ea:46:88:d2:9c:00:94:9d:ca:be:9c:21:1d:95:56:65:
         24:4c:ed:09:53:1d:e6:88:77:1e:d3:e2:b7:7f:a2:8b:c2:99:
         bf:0b:89:20:f3:b1:3d:7f:29:f2:fa:10:ca:79:28:5c:fa:54:
         63:24:12:85:c0:e2:ab:26:71:e4:65:15:37:13:96:08:10:fa:
         8e:09:6d:99:62:a2:a1:8c:0c:83:2c:39:fc:61:a9:b2:c7:b9:
         a5:70:06:3b:aa:7a:0f:88:99:3d:f9:94:73:4f:3c:c0:ed:e9:
         62:99:1a:c4:17:ec:d4:47:97:96:73:b4:00:d0:3e:74:fd:0d:
         2c:7e:49:1b:8d:ac:39:73:77:ee:d5:71:14:9d:8e:d0:fa:ab:
         11:81:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:42 2026 by rpki-client