Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa
File:                     3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa (raw, json)
Hash identifier:          xAeV2hLz9AAi8eD0RSa0UPYhbnheoFJmDPmUOWP3hpA=
Subject key identifier:   A3:86:6F:4A:ED:52:83:29:AA:09:E5:EE:1E:12:33:9D:D2:86:ED:E2
Certificate issuer:       /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
Certificate serial:       4332FE00D8A9750058ED5736453143E6F8777E6A
Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa
Signing time:             Sun 03 May 2026 03:03:18 +0000
ROA not before:           Sun 03 May 2026 02:58:18 +0000
ROA not after:            Sun 02 May 2027 03:03:18 +0000
asID:                     149371
IP address blocks:        103.180.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl
                          rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:32:fe:00:d8:a9:75:00:58:ed:57:36:45:31:43:e6:f8:77:7e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
        Validity
            Not Before: May  3 02:58:18 2026 GMT
            Not After : May  2 03:03:18 2027 GMT
        Subject: CN=A3866F4AED528329AA09E5EE1E12339DD286EDE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:61:03:6a:15:30:86:52:3d:19:c7:24:1d:
                    3d:1f:2e:04:4e:57:b1:9a:31:7e:a1:a2:fa:7b:d2:
                    32:8d:05:18:e3:84:3e:43:8b:80:22:1f:2b:7d:36:
                    9a:29:a6:7d:a7:09:9e:c2:db:c2:d0:bb:c5:be:d6:
                    fc:b1:5b:c7:f6:b0:c2:59:ed:f1:6b:c2:57:fd:f3:
                    fb:6d:e3:96:af:d3:5d:ec:e3:87:14:ec:fc:d0:18:
                    48:e2:92:68:86:c4:91:5a:2c:78:1b:e8:7a:ce:af:
                    c2:5c:8d:28:af:40:ab:9e:9a:89:bb:83:2d:ea:5b:
                    6f:56:d8:e7:87:36:61:cc:9b:55:ec:86:1f:fa:2b:
                    ed:62:70:1b:27:8f:ee:8d:f0:7d:42:43:c9:3a:7f:
                    92:90:44:b0:06:27:dd:bb:da:7c:39:df:ad:02:f5:
                    fd:df:18:f9:a4:91:bc:a7:7d:df:fd:ae:4d:f0:67:
                    a3:d3:6a:3b:db:2a:39:37:58:98:d8:6a:e4:2a:10:
                    63:22:a7:50:e4:70:67:26:08:96:47:e2:3b:31:14:
                    53:af:1f:ce:e0:ee:fa:cc:43:ca:5d:10:0f:e8:40:
                    4e:38:e3:b6:70:db:c4:ee:34:29:e3:97:32:99:e6:
                    38:ee:43:32:75:ca:c5:43:ad:cb:6b:cd:52:5b:e4:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:86:6F:4A:ED:52:83:29:AA:09:E5:EE:1E:12:33:9D:D2:86:ED:E2
            X509v3 Authority Key Identifier:
                keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234362e302f32342d3234203d3e20313439333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:c7:44:78:03:9b:a7:9d:ec:a1:2a:82:5b:8c:c8:5a:c1:15:
         c4:15:28:b3:c8:a9:ca:92:9b:25:33:48:7b:fa:45:30:48:22:
         f5:de:da:fe:0a:4a:9c:4b:d3:49:a9:92:c3:17:cb:ee:c3:e6:
         52:69:32:ba:d8:6c:7b:a8:03:04:4a:e2:36:d1:7f:a1:89:31:
         9e:4e:56:a4:e3:f4:2e:a7:29:40:75:dd:c7:83:19:99:ab:37:
         18:5b:d7:1c:84:f3:4f:03:51:f5:78:5b:da:15:d0:8b:d5:0f:
         c9:f9:5c:22:27:48:93:8f:30:84:3c:b6:24:2f:2a:a3:ff:bd:
         09:6d:26:39:9a:06:75:db:91:b3:bd:b6:4f:01:93:18:f7:da:
         62:51:54:80:70:16:33:48:f1:23:75:ba:7a:21:45:20:cb:8b:
         c5:9e:cd:d0:f6:fe:69:d9:90:a1:18:34:19:96:54:ac:ae:7e:
         fa:d3:3a:28:cb:f5:0e:f4:bb:80:ff:ee:61:48:f7:1b:e2:5a:
         63:58:ac:c0:e7:54:7d:d5:98:6a:23:74:80:44:5a:b6:f3:12:
         98:f2:11:34:1f:98:95:7b:d2:e7:ea:b7:91:dc:d3:2e:d2:52:
         3f:05:97:1a:1a:19:5c:33:39:b1:4c:80:bb:e3:af:d3:03:38:
         67:70:22:c6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQzL+ANipdQBY7Vc2RTFD5vh3fmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U1RUEwNTU3REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhG
NDExQkFDNTAeFw0yNjA1MDMwMjU4MThaFw0yNzA1MDIwMzAzMThaMDMxMTAvBgNV
BAMTKEEzODY2RjRBRUQ1MjgzMjlBQTA5RTVFRTFFMTIzMzlERDI4NkVERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZmEDahUwhlI9GcckHT0fLgRO
V7GaMX6hovp70jKNBRjjhD5Di4AiHyt9Npoppn2nCZ7C28LQu8W+1vyxW8f2sMJZ
7fFrwlf98/tt45av013s44cU7PzQGEjikmiGxJFaLHgb6HrOr8JcjSivQKuemom7
gy3qW29W2OeHNmHMm1Xshh/6K+1icBsnj+6N8H1CQ8k6f5KQRLAGJ9272nw5360C
9f3fGPmkkbynfd/9rk3wZ6PTajvbKjk3WJjYauQqEGMip1DkcGcmCJZH4jsxFFOv
H87g7vrMQ8pdEA/oQE4447Zw28TuNCnjlzKZ5jjuQzJ1ysVDrctrzVJb5JNHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUo4ZvSu1SgymqCeXuHhIzndKG7eIwHwYDVR0j
BBgwFoAUzl6gVX35Wrz5SOZrm51aSPQRusUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YzBkZTZjODItZDkyYi00MDg1LTg4OTMtZDY0Nzc5MWMyNzdmLzAvQ0U1RUEwNTU3
REY5NUFCQ0Y5NDhFNjZCOUI5RDVBNDhGNDExQkFDNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9DRTVFQTA1NTdERjk1QUJDRjk0OEU2NkI5QjlENUE0OEY0MTFC
QUM1LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2MwZGU2YzgyLWQ5MmItNDA4NS04
ODkzLWQ2NDc3OTFjMjc3Zi8wLzMxMzAzMzJlMzEzODMwMmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntPYwDQYJ
KoZIhvcNAQELBQADggEBALbHRHgDm6ed7KEqgluMyFrBFcQVKLPIqcqSmyUzSHv6
RTBIIvXe2v4KSpxL00mpksMXy+7D5lJpMrrYbHuoAwRK4jbRf6GJMZ5OVqTj9C6n
KUB13ceDGZmrNxhb1xyE808DUfV4W9oV0IvVD8n5XCInSJOPMIQ8tiQvKqP/vQlt
JjmaBnXbkbO9tk8Bkxj32mJRVIBwFjNI8SN1unohRSDLi8WezdD2/mnZkKEYNBmW
VKyufvrTOijL9Q70u4D/7mFI9xviWmNYrMDnVH3VmGojdIBEWrbzEpjyETQfmJV7
0ufqt5Hc0y7SUj8FlxoaGVwzObFMgLvjr9MDOGdwIsY=
-----END CERTIFICATE-----
Generated at Wed May 13 07:56:11 2026 by rpki-client