Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          Relrsr05v7o6LWUkvyj3CRc7sy187SltL/KM3/wqMnY=
Subject key identifier:   EC:6B:15:54:BA:56:35:73:60:CC:D2:ED:6B:A6:6E:B2:CF:7F:6C:7D
Certificate issuer:       /CN=C21FB465A0510DBFCC14562C85738E9077EEC01A
Certificate serial:       4C4ABFFF12FF443E3855267E6F551067D722AD93
Authority key identifier: C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa
Signing time:             Sun 03 May 2026 03:11:16 +0000
ROA not before:           Sun 03 May 2026 03:06:16 +0000
ROA not after:            Sun 02 May 2027 03:11:16 +0000
asID:                     149374
IP address blocks:        103.180.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl
                          rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4a:bf:ff:12:ff:44:3e:38:55:26:7e:6f:55:10:67:d7:22:ad:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C21FB465A0510DBFCC14562C85738E9077EEC01A
        Validity
            Not Before: May  3 03:06:16 2026 GMT
            Not After : May  2 03:11:16 2027 GMT
        Subject: CN=EC6B1554BA56357360CCD2ED6BA66EB2CF7F6C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:04:67:11:fe:b9:00:fb:d8:68:30:b9:d2:
                    ed:93:b0:c0:02:b9:36:d6:f1:ba:9e:66:aa:4b:34:
                    3e:8f:ff:3a:25:d3:32:fb:f0:3c:cc:a5:e7:68:32:
                    3a:fd:92:ab:8c:65:35:94:1f:9d:51:6c:19:65:08:
                    03:f3:f1:74:d2:69:0a:39:9f:35:33:f3:01:71:2c:
                    4c:f8:8a:8d:4b:f0:cd:73:16:f3:e1:06:03:a9:02:
                    4c:e2:1d:73:09:5b:95:5a:27:ed:76:4d:82:77:d1:
                    d2:15:a5:0f:3d:cf:a2:f2:d0:33:e2:7a:d8:be:91:
                    7d:e7:10:0b:bb:4b:67:b1:9f:9d:27:b0:02:ff:a4:
                    85:c1:eb:59:d2:0a:ca:64:d8:0e:cf:8d:02:98:d9:
                    36:2c:dc:ba:80:d1:87:e7:5b:9b:2b:30:c6:99:2b:
                    28:0a:00:e7:2c:ce:cd:80:26:a6:ee:e2:1c:49:5d:
                    98:25:d9:47:54:10:55:9c:31:d0:a9:af:13:bd:9c:
                    8b:1c:90:41:46:db:91:24:9e:55:cf:30:e2:1b:4d:
                    5f:a4:ac:bf:80:f6:1a:34:15:c5:14:cf:56:44:75:
                    d3:73:4d:3e:48:96:10:5b:95:98:e7:45:d0:62:2c:
                    67:4c:49:53:b9:7c:95:08:b1:2c:2d:91:9a:a9:11:
                    b8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6B:15:54:BA:56:35:73:60:CC:D2:ED:6B:A6:6E:B2:CF:7F:6C:7D
            X509v3 Authority Key Identifier:
                keyid:C2:1F:B4:65:A0:51:0D:BF:CC:14:56:2C:85:73:8E:90:77:EE:C0:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/C21FB465A0510DBFCC14562C85738E9077EEC01A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C21FB465A0510DBFCC14562C85738E9077EEC01A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132372e302f32342d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:27:0c:d3:b2:22:86:fb:bf:45:00:6e:2e:e1:c2:aa:c4:72:
         03:7a:6d:8f:9e:58:f0:40:c7:cf:d7:fd:f8:53:02:d7:75:01:
         f3:6f:e1:da:c7:ef:a4:f3:d5:94:1c:c0:d0:1e:c8:12:56:79:
         38:ba:b2:9d:91:22:ba:8e:ef:d1:a0:77:cd:6a:b6:93:d0:4a:
         82:1a:26:0c:5c:fd:78:d4:57:5e:5f:99:12:a9:b1:9b:36:f8:
         ce:81:10:f5:a7:7d:71:c1:c6:d7:b7:9c:65:c1:51:6f:94:d4:
         5a:9a:0f:c8:8b:59:98:f7:bd:2d:9b:90:31:62:53:1b:0a:97:
         f1:a4:28:2c:c1:b5:22:de:ce:3f:d7:01:e9:5f:21:78:fd:16:
         d7:ee:13:84:0f:2e:5e:eb:8a:d3:36:6a:c1:b6:37:2d:4f:1b:
         6f:d4:b5:43:64:fb:a8:b4:bd:ae:53:1e:da:32:ff:76:98:39:
         c8:eb:41:5c:c2:9c:8b:08:3e:d0:36:75:6f:e3:31:57:02:b7:
         98:9a:39:b6:32:4e:6b:88:39:ea:57:74:f6:39:bd:2e:ba:0d:
         d8:4f:af:27:5d:91:dd:48:2c:58:76:4a:c7:f7:08:ba:66:bc:
         01:40:e3:e2:d5:6c:ad:d3:28:46:e9:cb:42:46:05:38:60:4c:
         28:d4:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:38:23 2026 by rpki-client