Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          0M3/iOLfAX/g/90FmWqP3sssBOdbMngP4uNnmAsUyjY=
Subject key identifier:   B8:9A:A1:0D:C2:14:90:F2:55:1E:A5:CA:92:7D:BF:97:F7:B2:45:B9
Certificate issuer:       /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Certificate serial:       0AE4EB4FCAB19DBA1739B742EC89267F69D01D63
Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:15:40 +0000
ROA not before:           Sun 03 May 2026 02:10:40 +0000
ROA not after:            Sun 02 May 2027 02:15:40 +0000
asID:                     9341
IP address blocks:        103.180.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
                          rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e4:eb:4f:ca:b1:9d:ba:17:39:b7:42:ec:89:26:7f:69:d0:1d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
        Validity
            Not Before: May  3 02:10:40 2026 GMT
            Not After : May  2 02:15:40 2027 GMT
        Subject: CN=B89AA10DC21490F2551EA5CA927DBF97F7B245B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:99:81:9b:cd:c0:83:51:e1:9c:3e:45:68:
                    a2:76:10:03:e7:66:77:33:46:3d:29:a3:c7:d9:3f:
                    a3:46:77:d8:c3:48:fd:9d:bd:73:9b:dc:ee:73:3a:
                    6c:0f:bc:88:08:19:da:c5:47:3e:a3:19:c6:c2:b3:
                    a0:ab:fe:3f:66:88:fa:c6:9e:07:6d:fa:0c:65:62:
                    66:35:61:1e:23:58:1c:54:1a:d1:1a:cf:e7:93:df:
                    44:f0:50:74:ff:f9:de:ed:7d:a0:e1:75:65:d9:00:
                    79:a9:5c:64:bc:3f:34:5f:47:fa:f9:03:01:62:86:
                    70:bd:2d:ef:b8:1b:e2:d8:93:d1:8c:dd:5e:14:9e:
                    13:11:fd:4a:b7:77:d1:ea:f9:ba:d2:61:3f:80:a6:
                    f1:2d:07:cc:a4:e4:52:ca:5e:ed:dc:70:df:b9:b9:
                    b9:28:ab:d5:72:d4:a9:ed:e0:45:9a:d0:ff:d7:54:
                    3c:d5:78:3a:1b:7f:d8:fd:3c:32:68:71:ea:44:3a:
                    52:e6:ed:bd:5a:84:bc:f5:bf:ef:6d:d4:47:9c:5c:
                    5f:61:f5:a6:6b:d3:d1:35:f3:1b:4b:12:93:b3:d1:
                    4b:41:cd:ba:98:0e:85:08:68:6e:9d:51:05:f2:8d:
                    08:f4:bd:07:33:c2:2f:95:fb:07:78:9a:33:b9:29:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9A:A1:0D:C2:14:90:F2:55:1E:A5:CA:92:7D:BF:97:F7:B2:45:B9
            X509v3 Authority Key Identifier:
                keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35382e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:90:cc:62:09:1e:2a:1b:1c:0b:99:cc:38:d9:20:9c:96:7a:
         22:39:cd:2d:8f:c4:c8:0d:e9:c8:1b:69:1f:f2:71:8e:fc:d4:
         9f:f7:12:57:12:d8:ce:75:bb:94:b2:e7:45:87:2d:47:d4:6c:
         b3:2b:1d:70:35:4e:4f:3f:13:54:2f:d8:57:da:e7:b5:79:f2:
         73:2f:04:39:7d:95:f1:13:84:a8:21:6d:1a:c3:a2:5f:c1:0c:
         f7:93:ac:bc:b1:d5:c6:45:d5:5a:13:86:79:82:b0:ba:82:5a:
         4f:16:c5:83:db:78:a5:72:b0:ef:02:c4:76:25:72:0a:9b:5d:
         2d:fd:c3:bd:40:35:50:60:b3:27:25:e7:ac:25:86:6b:8a:82:
         ca:5f:e6:b0:29:37:4e:95:d7:2d:11:52:de:19:05:1f:ea:89:
         c1:f2:9c:bb:66:49:44:c4:32:60:ee:9c:d3:9e:50:1e:44:fd:
         71:0e:e3:e1:f3:3a:bc:e5:ae:ce:97:00:61:44:96:bc:f7:a6:
         7d:40:09:ee:ff:e8:f2:15:4a:33:e5:6b:8b:2d:49:72:07:c1:
         21:8b:14:a7:4f:5b:a7:13:c0:cd:52:a2:5a:7f:f4:45:a3:14:
         6c:72:26:45:02:18:09:19:7c:a1:5a:ff:c9:bb:38:11:99:55:
         2c:7d:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:31:35 2026 by rpki-client