Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa
File:                     3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa (raw, json)
Hash identifier:          CoNMyYapkTQsn2kT5d+VYMHLw4FeHqNI/nUQczlGMBw=
Subject key identifier:   56:F0:74:29:9C:26:C0:EC:81:02:B9:35:E5:1D:4C:26:E6:DF:26:41
Certificate issuer:       /CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
Certificate serial:       253C4B42F0D3F2CA6A19C3FEC1A5CE33882B828D
Authority key identifier: CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa
Signing time:             Sun 03 May 2026 03:03:18 +0000
ROA not before:           Sun 03 May 2026 02:58:18 +0000
ROA not after:            Sun 02 May 2027 03:03:18 +0000
asID:                     149371
IP address blocks:        103.180.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl
                          rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:3c:4b:42:f0:d3:f2:ca:6a:19:c3:fe:c1:a5:ce:33:88:2b:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5
        Validity
            Not Before: May  3 02:58:18 2026 GMT
            Not After : May  2 03:03:18 2027 GMT
        Subject: CN=56F074299C26C0EC8102B935E51D4C26E6DF2641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:21:5a:00:db:56:88:9a:0b:d4:1f:8c:38:
                    6b:0c:64:83:f9:8b:c6:31:f9:bf:ab:6c:53:b3:2d:
                    c7:63:de:ac:af:32:49:81:d3:19:b1:af:dc:32:74:
                    9d:5d:b2:82:9d:12:b1:2c:ad:d6:47:c0:75:4d:c5:
                    87:29:cb:f0:bc:e9:e8:b6:e1:f5:d7:21:a8:35:be:
                    8d:36:46:f4:de:ef:d2:36:05:a0:76:e9:8e:2f:6b:
                    6d:61:f5:3d:ac:2a:45:11:e3:41:d5:79:a6:24:a8:
                    ec:44:88:4b:2f:c4:04:b3:ef:c9:ee:01:84:80:28:
                    c6:3a:32:38:92:73:79:6b:04:3f:18:a3:d1:22:e7:
                    05:0d:bc:bb:3a:ba:f8:1a:9e:e2:06:f3:6a:03:88:
                    aa:82:1b:6b:47:15:ba:11:e4:1c:d5:cc:c6:ba:7f:
                    73:50:d2:d8:2c:40:f1:e8:85:d0:89:12:8a:c3:34:
                    24:01:15:0c:18:f6:71:84:72:66:9d:1f:43:5d:dd:
                    8d:7d:74:81:24:af:4d:95:e4:45:f0:08:f4:3f:50:
                    3c:94:c0:a4:d0:7f:71:02:de:f0:3f:ec:68:45:42:
                    d0:56:04:d0:e2:4a:97:95:00:84:cc:b9:db:be:fd:
                    b1:47:a0:18:b3:6f:53:8e:e6:b8:e8:e4:c8:33:ae:
                    3b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F0:74:29:9C:26:C0:EC:81:02:B9:35:E5:1D:4C:26:E6:DF:26:41
            X509v3 Authority Key Identifier:
                keyid:CE:5E:A0:55:7D:F9:5A:BC:F9:48:E6:6B:9B:9D:5A:48:F4:11:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE5EA0557DF95ABCF948E66B9B9D5A48F411BAC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0de6c82-d92b-4085-8893-d647791c277f/0/3130332e3138302e3234372e302f32342d3234203d3e20313439333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:fd:2d:26:8c:84:27:5d:ab:e1:1b:a6:7c:62:f8:2a:94:
         ed:44:7a:1b:cb:ec:14:ac:a8:59:d4:10:96:40:46:5e:89:1a:
         6d:ba:d8:b4:fc:65:d5:5f:62:e5:d6:f2:ee:f3:4a:0f:97:8a:
         72:71:19:6f:b9:f8:99:1d:fb:a7:23:44:e7:b0:67:8d:0f:8e:
         09:3c:fc:1e:47:97:2d:16:b9:2f:08:77:8d:e7:7f:e9:16:34:
         9e:ce:2e:dd:6e:a9:c8:54:94:f8:ab:c0:0f:96:48:34:00:a2:
         85:0d:31:33:f9:2b:3c:3e:06:30:80:63:8e:ae:5c:c3:ff:fd:
         2c:a7:08:63:08:17:58:6d:fc:74:7e:a2:04:6d:f4:e6:e1:0f:
         f3:42:b8:f6:50:e9:ef:bd:87:87:04:91:17:df:36:f4:ab:67:
         64:ed:dd:ab:fd:fd:fa:a2:72:67:65:4f:36:1a:72:af:f9:67:
         67:a6:50:f3:b9:8f:2c:f3:0c:2d:24:f7:01:e1:a5:42:50:a4:
         ec:be:b4:9b:66:2d:8e:a4:4c:73:a7:00:99:5a:f8:05:b2:a6:
         1c:0d:e1:53:54:69:a1:72:f9:11:23:1b:b9:68:f3:b9:5b:28:
         f0:47:43:d6:f8:bd:58:38:76:8b:4d:46:18:71:ff:35:8c:e0:
         df:23:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:01 2026 by rpki-client