Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          VU4Fqm4q9lM1qlbwtCDfQfln3xy8Zkz6BXFC8JhBhSw=
Subject key identifier:   C9:A9:9C:A6:1E:8E:D7:84:5B:2D:F0:F6:9E:45:F6:3C:73:ED:6D:29
Certificate issuer:       /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Certificate serial:       43AA90EE257E8BF584E5E77ABBE196F440ACF87D
Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
Signing time:             Sun 03 May 2026 03:17:45 +0000
ROA not before:           Sun 03 May 2026 03:12:45 +0000
ROA not after:            Sun 02 May 2027 03:17:45 +0000
asID:                     149369
IP address blocks:        103.180.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
                          rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:aa:90:ee:25:7e:8b:f5:84:e5:e7:7a:bb:e1:96:f4:40:ac:f8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
        Validity
            Not Before: May  3 03:12:45 2026 GMT
            Not After : May  2 03:17:45 2027 GMT
        Subject: CN=C9A99CA61E8ED7845B2DF0F69E45F63C73ED6D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:52:93:8e:94:78:3e:62:a3:95:34:cd:30:
                    ab:c4:aa:ac:58:ad:50:c0:1a:6a:fe:75:5f:65:39:
                    30:c6:77:b9:a3:22:f4:f1:b0:5f:8a:5a:0c:cf:96:
                    ea:ab:bf:52:af:b4:89:d1:57:bd:d6:05:2f:ec:ae:
                    3b:30:90:49:8a:a3:82:d4:55:00:e8:3f:33:58:57:
                    f3:16:4a:77:10:f2:34:04:90:ab:e1:c7:1f:00:3a:
                    c5:26:2f:9e:b4:67:64:b6:1f:78:64:c4:9d:6f:35:
                    89:e0:f6:75:07:54:fa:a0:e9:99:45:ca:75:87:83:
                    ee:64:94:ab:c8:21:e8:39:7e:be:0c:23:11:a8:f1:
                    5f:85:f7:51:31:2a:f7:15:93:89:ac:4b:1e:23:72:
                    0d:2f:c7:bf:1f:a8:31:84:4c:42:f0:2f:83:38:01:
                    d6:46:2b:03:90:75:01:09:20:78:07:92:d3:6e:5f:
                    f7:2a:ce:0b:cd:85:ca:ef:d6:1f:bf:26:26:a1:ed:
                    42:7d:f7:cf:2a:31:3f:b1:8a:56:52:73:86:52:f4:
                    98:da:6f:4b:2c:42:d0:1f:45:19:a0:95:d1:be:71:
                    83:93:57:d6:f8:c8:f9:3c:72:a3:72:c3:fc:27:a1:
                    29:d5:13:54:dd:19:89:a5:59:3e:db:38:57:86:75:
                    07:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A9:9C:A6:1E:8E:D7:84:5B:2D:F0:F6:9E:45:F6:3C:73:ED:6D:29
            X509v3 Authority Key Identifier:
                keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:d0:0a:7f:2e:67:19:e6:39:54:e7:fd:05:d2:b9:ed:9a:15:
         8c:aa:f2:83:4e:7e:32:07:94:d6:49:e0:88:c6:c3:f7:7f:a3:
         e0:41:44:fd:1f:4a:cb:42:2a:f6:db:25:aa:67:09:65:aa:9f:
         39:29:50:82:c9:f9:0b:ca:84:63:5d:91:00:18:b8:a6:0f:dd:
         71:07:dc:d2:7c:0a:c6:8e:41:cd:51:8c:e7:17:c6:46:9c:da:
         e1:ff:a3:0a:8b:1a:e7:ab:7a:ca:2a:d7:a5:1f:d8:5d:d0:59:
         15:8e:c0:9c:59:e5:66:e2:3c:4c:ff:9f:47:60:21:cc:ec:b9:
         57:3a:49:bf:da:a3:f2:2e:df:e1:bd:0d:f0:fd:fa:69:7c:b4:
         07:bc:d4:98:f7:0f:50:dc:2d:a3:47:4c:58:25:dc:a3:25:50:
         41:65:a5:2e:aa:ec:1d:07:a0:74:31:e2:a3:c9:09:e1:a7:4f:
         65:3e:2b:21:f0:ae:bd:36:92:67:51:dd:67:f3:51:6c:0d:dd:
         f3:6b:7f:f4:1d:0b:2b:e0:73:21:a1:b9:3c:5a:0e:e2:ba:5f:
         fa:e5:f0:13:22:da:44:67:3a:82:fd:f9:53:ae:14:d8:63:f3:
         d9:75:bd:3d:e3:98:01:97:a2:f7:a0:2f:30:1b:32:7c:1b:a0:
         d3:47:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:17 2026 by rpki-client