Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa
File:                     3130332e33302e3138302e302f32322d3234203d3e203435333032.roa (raw, json)
Hash identifier:          gLAENSlaQMcJ9v6GA44xoX5e3fJBvlMgzzvMJD6So7k=
Subject key identifier:   2B:F5:C9:5F:86:DF:34:90:C7:87:EC:B7:51:F3:CA:11:2B:86:EC:0E
Certificate issuer:       /CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
Certificate serial:       16125BE9A4F24B38015AF1DAD2C36850A6EEDD4D
Authority key identifier: ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa
Signing time:             Sun 03 May 2026 03:19:00 +0000
ROA not before:           Sun 03 May 2026 03:14:00 +0000
ROA not after:            Sun 02 May 2027 03:19:00 +0000
asID:                     45302
IP address blocks:        103.30.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl
                          rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:12:5b:e9:a4:f2:4b:38:01:5a:f1:da:d2:c3:68:50:a6:ee:dd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2
        Validity
            Not Before: May  3 03:14:00 2026 GMT
            Not After : May  2 03:19:00 2027 GMT
        Subject: CN=2BF5C95F86DF3490C787ECB751F3CA112B86EC0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:82:82:a2:46:34:ae:12:63:cd:f3:c7:b0:
                    b7:a8:4f:59:ac:4a:31:03:bb:db:65:9a:c3:25:59:
                    8c:93:e8:b9:37:c5:02:e1:4c:85:16:85:c7:76:b0:
                    99:d8:c6:a8:aa:ba:20:65:56:9f:64:49:fa:4a:17:
                    a7:23:a4:78:99:72:3a:7c:a7:31:ac:3e:ce:2e:3b:
                    88:83:8b:c2:61:c2:9c:d7:ce:78:f6:09:a6:96:2b:
                    2b:57:8f:a5:b2:dc:bf:73:17:ad:b6:98:20:c9:bf:
                    5a:10:a0:db:0d:a9:1e:c7:ba:08:55:8a:4b:8a:09:
                    73:25:6a:0d:1e:c7:e4:31:e7:41:73:e0:9e:62:58:
                    5d:23:63:fb:01:94:45:a0:d0:94:f4:68:fc:4b:2d:
                    40:5a:16:d4:ad:ad:c9:c7:02:f4:a9:7d:80:e0:78:
                    02:28:3d:a9:28:a3:f3:1d:5f:cc:c0:a2:84:fb:ff:
                    c1:6f:a7:40:5d:39:d8:32:78:4a:01:a7:bf:d2:b3:
                    02:74:15:ca:89:b3:57:56:19:65:38:63:e0:0d:ee:
                    f5:8e:15:f7:38:44:69:3d:e2:7d:31:2e:ac:ef:5a:
                    6c:85:f5:59:2e:a5:27:6d:f9:e3:c1:34:04:a1:67:
                    20:37:ec:61:a1:a1:fe:7a:67:ba:2d:54:0e:12:2d:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F5:C9:5F:86:DF:34:90:C7:87:EC:B7:51:F3:CA:11:2B:86:EC:0E
            X509v3 Authority Key Identifier:
                keyid:ED:41:DE:F7:56:30:D6:BC:76:B3:92:AB:AF:C7:A2:0B:95:98:A8:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ED41DEF75630D6BC76B392ABAFC7A20B9598A8A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fb8858e0-ecf0-4e53-a490-3b7c2de1693c/0/3130332e33302e3138302e302f32322d3234203d3e203435333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:6c:8b:ff:1a:77:a6:22:a8:a3:99:f3:14:4c:f2:c0:de:cf:
         17:e0:00:29:9d:45:25:54:a9:2a:2a:61:31:e9:df:14:0a:ef:
         d4:c3:f1:17:02:07:b1:1c:63:4c:19:64:d4:e5:a7:bd:b5:d1:
         93:92:2c:d6:ae:5d:ea:dd:7f:cb:e7:1b:b2:5f:3e:c8:1c:4b:
         56:d7:46:bb:80:78:21:57:0b:7a:27:f7:d2:32:3f:d7:34:59:
         31:14:77:fb:95:da:ed:2f:69:b8:6c:85:30:ec:88:0f:1f:4b:
         25:b8:c9:d1:f1:4e:c0:8a:c0:55:fc:d4:79:c9:e9:06:5d:e4:
         6b:58:a1:26:d8:b1:44:07:0a:69:dd:d4:12:8c:86:e2:31:27:
         2a:e1:ee:d3:62:80:b9:04:d3:84:19:27:26:a1:d6:b2:be:55:
         94:a6:ae:9d:3b:e1:f6:87:69:34:7c:7e:3e:a0:41:d3:eb:d0:
         ec:b9:91:c0:e4:c5:c9:59:6c:6b:9b:3e:b7:1f:2e:62:61:1c:
         92:16:80:a0:59:d6:c7:8b:4d:2f:c8:34:dc:e2:4b:cd:55:9d:
         78:51:2e:cb:68:37:1c:72:d1:1e:0d:76:22:de:b5:bf:d1:27:
         ab:7e:f7:f4:36:38:cb:2c:aa:7b:92:b3:a4:69:eb:63:1d:77:
         7b:0e:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:28 2026 by rpki-client