Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
File:                     3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (raw, json)
Hash identifier:          4a9og07u0srQecoyb+IpBZCUaRdvfCWkjUR0wkeGFvU=
Subject key identifier:   7C:11:21:DD:EF:B0:68:80:12:8D:05:72:A0:DC:2B:42:93:9B:AF:56
Certificate issuer:       /CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
Certificate serial:       2C0B954606E19C3280A2BDAD4003081DC61C8175
Authority key identifier: 80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa
Signing time:             Sun 03 May 2026 03:11:03 +0000
ROA not before:           Sun 03 May 2026 03:06:03 +0000
ROA not after:            Sun 02 May 2027 03:11:03 +0000
asID:                     149368
IP address blocks:        103.180.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl
                          rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0b:95:46:06:e1:9c:32:80:a2:bd:ad:40:03:08:1d:c6:1c:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724
        Validity
            Not Before: May  3 03:06:03 2026 GMT
            Not After : May  2 03:11:03 2027 GMT
        Subject: CN=7C1121DDEFB06880128D0572A0DC2B42939BAF56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:df:17:e8:7a:51:37:b0:1b:66:d3:31:bc:1a:
                    6c:d9:c2:da:fb:49:6b:cc:54:3b:a0:d1:25:77:1b:
                    68:d1:ae:ba:e2:56:40:32:65:67:f8:3e:58:03:51:
                    23:8f:ee:01:da:90:95:47:a9:2f:ec:b4:ad:07:41:
                    55:62:f1:36:0d:f1:19:a1:ed:85:5d:b0:8b:19:ad:
                    e6:22:47:c4:4c:b4:e7:4d:fa:48:3a:a4:50:e4:4b:
                    8b:a1:29:dc:c9:47:b5:1b:6b:95:c9:ba:01:8f:a8:
                    c8:90:d8:1b:b5:e8:e0:2a:00:19:d7:c1:29:52:7a:
                    88:7f:89:61:94:e7:82:17:b0:10:f8:62:49:68:d7:
                    14:d0:53:c8:66:ae:90:29:95:29:09:0a:3d:f7:5a:
                    56:02:aa:86:f8:21:9c:8a:27:0c:01:08:0b:02:f4:
                    12:8f:69:8a:d7:18:91:58:33:7c:4a:20:98:7f:1f:
                    f3:28:af:49:58:0c:57:20:78:9d:b5:d3:48:1d:c8:
                    fb:08:bd:18:01:c3:c5:ed:c6:c1:ea:d3:7b:98:44:
                    5e:fe:61:e3:28:45:ce:69:1c:35:3e:a7:70:58:dc:
                    53:ea:fe:46:1c:a7:aa:58:78:a3:1b:c0:db:67:f0:
                    44:51:30:2e:65:22:f4:3b:f7:b1:c4:ec:58:ca:49:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:21:DD:EF:B0:68:80:12:8D:05:72:A0:DC:2B:42:93:9B:AF:56
            X509v3 Authority Key Identifier:
                keyid:80:1D:1B:4E:E6:BB:69:D3:F7:DA:2D:A9:DF:BD:AE:FB:29:78:37:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/801D1B4EE6BB69D3F7DA2DA9DFBDAEFB29783724.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:06:89:83:e2:58:a8:d4:a8:21:de:31:b5:4a:90:0c:a7:
         b6:6b:6e:0c:6c:a0:cc:0a:9c:89:d3:5e:60:69:25:bb:67:39:
         8a:35:86:d2:35:54:70:37:ef:bb:d7:4d:d2:50:35:1e:dd:b1:
         28:f3:03:d3:ad:8b:1a:f5:48:4c:af:ae:4c:d8:e6:eb:7a:8e:
         58:93:3e:25:fc:85:11:5e:84:1b:de:58:01:04:80:97:ea:94:
         b7:d6:64:5b:44:5c:f4:81:a0:93:90:17:75:89:33:ee:e2:a3:
         c0:47:33:95:0c:10:97:a1:12:f1:13:58:81:9f:cf:8d:4a:ef:
         39:b9:1c:77:72:88:e8:1d:0a:61:9d:f9:bf:bf:6b:f7:32:c2:
         92:5f:46:28:1a:c0:ea:6e:bb:58:f3:11:4c:b7:0f:f7:6a:f6:
         d1:7a:44:6e:33:8f:0b:5f:6b:35:b2:73:5c:bb:66:21:08:a3:
         6f:53:16:62:e5:23:7b:d4:e2:7b:d8:90:72:f3:87:94:d8:2e:
         0b:b0:8d:da:15:d9:98:3c:4d:6a:24:fa:e2:f3:86:ff:0d:b3:
         ea:4b:01:f2:30:22:36:30:de:3e:07:5a:60:7c:55:fe:c3:c4:
         4f:26:7d:ef:d1:21:d0:61:35:d5:34:41:10:45:e5:b5:31:e5:
         47:f8:08:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:08 2026 by rpki-client