Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          5qu3egPdBZlEVTvgirw7pWXgCRudPnC+xEwHD5lFYU8=
Subject key identifier:   00:D0:5C:88:3C:E7:62:27:08:E8:5E:CB:07:89:35:11:65:36:46:27
Certificate issuer:       /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Certificate serial:       7C651706E6D4A46397168B87122EF134FFC6A989
Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa
Signing time:             Sun 03 May 2026 03:11:03 +0000
ROA not before:           Sun 03 May 2026 03:06:03 +0000
ROA not after:            Sun 02 May 2027 03:11:03 +0000
asID:                     149368
IP address blocks:        103.180.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
                          rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:65:17:06:e6:d4:a4:63:97:16:8b:87:12:2e:f1:34:ff:c6:a9:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
        Validity
            Not Before: May  3 03:06:03 2026 GMT
            Not After : May  2 03:11:03 2027 GMT
        Subject: CN=00D05C883CE7622708E85ECB0789351165364627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:56:0b:48:0b:08:5e:b2:f4:df:1b:bc:c4:
                    04:3b:1a:56:d0:c5:2c:43:58:0f:a5:4c:60:5d:d6:
                    87:8d:4f:9c:ec:b6:a5:b4:36:68:56:51:d6:cc:98:
                    25:ae:9e:6a:98:ab:18:04:29:3f:bd:ab:d7:ea:77:
                    7b:a8:47:27:90:98:9a:21:38:15:af:d9:d9:a5:64:
                    4b:55:11:1d:6f:4c:00:a1:79:7b:c0:ae:82:a1:dd:
                    57:c7:ed:5e:1d:36:27:f9:4d:ce:12:61:a4:6e:2e:
                    ca:aa:e5:85:3e:48:02:bb:f7:04:ca:43:f4:6f:0d:
                    9a:84:79:1e:2f:42:59:05:34:12:6e:cc:e4:83:39:
                    b8:0e:d5:3e:81:d9:75:80:65:54:b6:58:88:a5:94:
                    c6:d6:07:75:40:db:6c:30:9b:a2:7f:49:0c:fa:70:
                    27:32:10:08:45:15:ce:b8:61:7f:cb:d3:d1:5b:1a:
                    b5:06:16:97:ac:20:85:e3:b7:9f:48:09:d2:8a:ee:
                    bb:e8:ab:aa:d2:db:64:52:56:f3:5f:6c:a3:c7:1c:
                    04:f4:63:d2:1c:9f:7f:cc:09:9c:6a:b3:db:f4:69:
                    54:15:b8:f1:68:59:ac:c9:25:bc:c1:38:5d:44:d0:
                    36:0d:e0:f9:fb:91:44:58:89:98:0d:5d:4e:9a:3f:
                    cb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D0:5C:88:3C:E7:62:27:08:E8:5E:CB:07:89:35:11:65:36:46:27
            X509v3 Authority Key Identifier:
                keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:b0:36:62:cf:95:c8:19:22:ee:76:21:35:a4:ac:bf:a5:3d:
         75:85:c1:df:e8:02:a3:cb:ec:32:07:71:8a:02:7a:9e:c1:e9:
         7c:7f:e4:2a:0c:4c:52:e4:19:48:e5:9f:49:4a:c7:a4:4f:9f:
         4d:29:a7:a4:29:b5:19:44:b8:e0:a2:20:de:36:a2:df:fd:b2:
         71:ed:e1:90:b7:65:20:58:c0:e7:d8:af:08:29:14:9f:b1:bb:
         28:96:cb:63:ec:13:1d:2a:7d:00:43:4e:4e:70:ea:13:9e:91:
         ff:7f:20:cc:20:b7:d9:34:36:d7:7a:d5:76:07:d5:6f:26:1b:
         43:e7:5d:36:a9:41:c9:78:de:2b:08:79:99:92:d4:4c:17:75:
         53:95:3d:2d:7f:bc:7f:a4:3e:85:21:75:66:92:d2:a6:f6:e5:
         c4:d0:33:ab:8a:df:48:3e:92:bd:7a:93:3c:15:d0:13:5e:33:
         6b:07:1a:ed:74:0f:14:5d:c8:79:26:85:dd:83:c5:86:ca:a5:
         f8:74:70:a0:fc:de:bb:8f:f1:53:f1:7e:c0:b6:84:ad:81:42:
         01:45:77:6a:94:37:ed:4a:d2:ac:f9:aa:12:b1:7b:4d:3f:81:
         08:91:7f:da:c6:ea:0d:9e:88:25:73:85:98:cb:14:d5:62:6a:
         53:5e:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:56 2026 by rpki-client