Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          6zRlVB+7VhU+EM3gEBCiqmflsWcB74DY3jlrVLYDaZ8=
Subject key identifier:   9E:05:C6:0E:25:71:E1:90:FD:3E:A7:D8:6F:75:D6:9B:BE:29:DC:B3
Certificate issuer:       /CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
Certificate serial:       6427521002F4BCBD234E8D57B735F3D17C8DCBA7
Authority key identifier: D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
Signing time:             Sun 03 May 2026 03:17:46 +0000
ROA not before:           Sun 03 May 2026 03:12:46 +0000
ROA not after:            Sun 02 May 2027 03:17:46 +0000
asID:                     149369
IP address blocks:        103.180.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl
                          rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:27:52:10:02:f4:bc:bd:23:4e:8d:57:b7:35:f3:d1:7c:8d:cb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625
        Validity
            Not Before: May  3 03:12:46 2026 GMT
            Not After : May  2 03:17:46 2027 GMT
        Subject: CN=9E05C60E2571E190FD3EA7D86F75D69BBE29DCB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:6e:31:52:28:3e:61:7c:d7:e4:61:a4:05:
                    b0:b8:24:19:49:c9:39:d0:bc:68:e7:b1:b6:3a:e2:
                    b4:f7:63:44:cf:37:37:7f:7b:2e:46:4a:28:02:e7:
                    66:7f:63:c2:4a:72:15:42:c4:da:11:ef:fc:a0:1d:
                    99:45:62:99:3f:c7:ed:f7:5a:e4:f4:e6:67:d5:ef:
                    ef:d3:8f:e4:b2:76:ca:15:86:d9:0d:d4:ea:f7:71:
                    6f:1a:8e:21:6f:33:86:69:d1:f8:b1:bf:86:99:8a:
                    c4:eb:f0:13:79:7b:40:52:f1:3b:87:76:da:4e:8d:
                    49:f4:02:08:12:88:b4:4a:35:16:6f:6d:a2:ac:40:
                    d3:3e:c6:69:30:9c:24:66:c8:ba:b6:3f:4b:b4:8e:
                    d5:41:71:5f:58:c8:1a:84:40:43:7e:f2:ea:40:9f:
                    84:3e:44:08:67:d8:36:25:c4:e3:e1:22:ee:d5:77:
                    17:c2:dc:43:1f:54:94:9f:ee:0b:ea:0c:22:db:9e:
                    0e:c1:85:22:f9:14:8b:d0:c4:79:31:ce:ae:86:88:
                    dc:13:bc:68:f7:8d:16:90:4d:7e:63:7e:63:d5:fa:
                    cb:f8:f9:73:b7:a6:b4:cf:af:2e:3d:91:c1:34:d8:
                    08:31:ff:b8:4b:3e:2f:b9:97:52:be:8d:27:ba:a6:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:C6:0E:25:71:E1:90:FD:3E:A7:D8:6F:75:D6:9B:BE:29:DC:B3
            X509v3 Authority Key Identifier:
                keyid:D0:F0:C8:D1:50:FE:AE:B3:B2:62:AE:26:0E:ED:6E:FA:46:C4:C6:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D0F0C8D150FEAEB3B262AE260EED6EFA46C4C625.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:49:0b:36:6e:a2:32:01:88:8d:14:d3:28:cb:e5:0e:18:6a:
         c4:d7:71:24:01:60:95:d4:7d:43:9e:3c:36:9b:95:c2:60:2b:
         56:86:04:9b:0b:2f:34:6a:83:df:a8:1b:32:53:a4:ab:26:8b:
         2c:32:1e:88:8e:cc:c9:d0:9d:18:0e:ed:c7:0f:da:79:9f:5d:
         46:8e:5f:47:29:53:2e:99:8e:63:00:e0:5e:fa:fd:eb:9b:db:
         2b:7f:c7:00:15:07:99:8b:2e:9c:eb:12:88:7d:0c:e6:55:ac:
         3b:17:ae:f8:78:c3:aa:1d:65:8b:ca:39:80:d6:1e:3c:80:83:
         15:36:c9:56:fa:d6:92:88:a4:53:b1:7d:5f:81:b3:0b:8e:44:
         76:29:59:71:3d:31:fe:31:97:d7:41:b4:41:df:89:5c:8a:74:
         5c:37:f0:c2:4c:6b:0d:3b:f8:77:50:fa:eb:c5:3e:db:84:25:
         f9:42:a8:d3:1c:dd:ac:53:89:9d:bb:08:62:dc:55:64:96:eb:
         23:6d:fc:a6:49:0f:a4:6f:db:47:04:e7:c4:2e:3a:43:eb:d8:
         4a:cc:10:18:20:db:75:85:ab:b9:39:f0:6c:ec:34:3f:7a:08:
         01:2f:f1:cc:25:30:b8:ae:2e:c4:db:46:72:e3:1f:e8:35:32:
         10:60:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:51 2026 by rpki-client