Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
File:                     3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (raw, json)
Hash identifier:          EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=
Subject key identifier:   B1:75:90:DB:42:8C:97:81:45:A6:4C:14:D5:A0:16:63:16:6C:E9:80
Certificate issuer:       /CN=C940C2C66C795EF89DE57AA820616ED8225890BC
Certificate serial:       37F3CAE19CCF7FC58BF679613CCA67C1E69223C4
Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa
Signing time:             Sun 03 May 2026 03:07:36 +0000
ROA not before:           Sun 03 May 2026 03:02:36 +0000
ROA not after:            Sun 02 May 2027 03:07:36 +0000
asID:                     149400
IP address blocks:        103.181.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl
                          rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:ca:e1:9c:cf:7f:c5:8b:f6:79:61:3c:ca:67:c1:e6:92:23:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC
        Validity
            Not Before: May  3 03:02:36 2026 GMT
            Not After : May  2 03:07:36 2027 GMT
        Subject: CN=B17590DB428C978145A64C14D5A01663166CE980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:9f:36:98:41:5d:9e:ce:a7:18:70:6d:15:
                    d4:13:ab:65:61:5b:b6:24:94:21:cf:e9:63:10:e0:
                    8e:03:0f:26:dd:e4:cc:65:3d:96:57:ab:6f:dc:02:
                    4f:f8:88:f4:c1:68:cd:89:9c:05:52:13:73:9d:b1:
                    f1:cc:21:dd:64:d3:69:92:6c:04:3c:f1:2c:30:51:
                    f0:6c:84:e3:c1:ed:76:fd:9a:d0:2b:be:2d:11:d4:
                    fe:22:1d:1e:7f:16:4d:6c:b4:88:d2:dd:2c:37:54:
                    a9:16:f8:a1:03:37:17:d4:f6:d0:55:85:7b:4e:8a:
                    62:3b:f1:89:c2:03:f1:cf:07:b5:c8:45:0b:18:14:
                    6b:25:3a:51:d6:9c:c8:71:3f:65:45:34:1f:93:1e:
                    3f:6c:83:bb:28:ba:e8:c7:90:5a:53:83:f9:10:83:
                    32:39:03:a6:4c:74:51:81:2f:9c:4b:92:7c:c9:85:
                    b9:da:70:0b:2a:9b:17:ee:1e:a6:33:86:ac:ae:55:
                    ad:32:dc:60:0e:01:c4:86:79:64:d2:b7:28:ba:c4:
                    b1:03:f9:25:92:5e:80:50:17:a6:b1:8f:fb:a5:d8:
                    9f:f0:a5:5e:09:b0:e4:ba:23:40:0c:79:d0:cb:f9:
                    cf:9b:9e:40:1c:6a:45:97:ed:9d:1b:89:08:57:ae:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:75:90:DB:42:8C:97:81:45:A6:4C:14:D5:A0:16:63:16:6C:E9:80
            X509v3 Authority Key Identifier:
                keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:2d:91:c9:fc:a4:1e:92:aa:3f:81:5c:dc:60:10:3a:72:3b:
         45:49:de:b1:66:39:c3:b6:3c:ad:8d:54:d4:ce:7b:55:ca:6d:
         cf:31:12:bd:1f:43:e6:a5:ca:3b:10:95:99:ef:81:25:ad:88:
         4b:a2:f9:c1:c4:2e:57:46:71:c5:4a:a1:ac:b7:57:c1:60:d9:
         3d:1a:5e:93:18:33:df:ac:cc:27:89:74:50:96:a3:2c:95:97:
         21:4d:7f:3e:27:99:2a:67:d2:ed:d6:16:c6:56:5b:cf:64:16:
         58:35:8c:bf:06:ce:c7:0e:9d:a4:80:bc:39:1c:91:08:ca:57:
         20:4e:9a:da:bb:86:fc:f8:1c:3d:b4:92:c5:9e:a2:08:16:89:
         12:8a:c1:ec:78:69:1f:01:a2:9e:0b:e2:e2:4e:2f:17:4f:18:
         5a:70:7a:a5:12:e2:5e:4f:e6:44:6c:e5:7d:09:82:f8:c0:d7:
         2c:2e:54:e9:4f:06:a6:02:4f:90:dd:7c:fd:2a:25:b9:1d:5a:
         ce:6c:7e:ca:51:80:c8:4d:55:f3:99:f1:d9:5f:8d:83:6a:60:
         19:b6:2b:75:76:59:e8:92:2b:27:54:84:6a:94:76:71:92:6e:
         c1:b2:54:c2:7b:66:1d:e1:f3:d6:1b:58:92:ac:bb:f4:6e:cc:
         71:67:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:02 2026 by rpki-client