Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          syfItM1/yGZojD6BnuWKenSP5tC0UxI22EVXiaCRFHk=
Subject key identifier:   96:51:4A:40:5E:39:58:39:11:BB:2C:38:AC:B7:F0:82:16:11:43:F1
Certificate issuer:       /CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
Certificate serial:       7588CAF40ED6E62195F50D9DFBD5774D406B9D7D
Authority key identifier: 65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:15:40 +0000
ROA not before:           Sun 03 May 2026 02:10:40 +0000
ROA not after:            Sun 02 May 2027 02:15:40 +0000
asID:                     9341
IP address blocks:        103.180.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl
                          rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:88:ca:f4:0e:d6:e6:21:95:f5:0d:9d:fb:d5:77:4d:40:6b:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65BD8BDB0F0688479A1741E2BD6624408DA567AB
        Validity
            Not Before: May  3 02:10:40 2026 GMT
            Not After : May  2 02:15:40 2027 GMT
        Subject: CN=96514A405E39583911BB2C38ACB7F082161143F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:2a:92:ce:d8:b8:14:56:32:84:2e:0d:30:
                    63:0b:2c:9b:cc:e0:b6:f5:40:b7:ee:b2:d3:26:e7:
                    e1:bb:a3:da:23:9d:3e:bc:4e:59:3a:64:13:a7:bd:
                    8d:b9:06:08:c5:9d:9e:4b:7f:fd:14:3d:f1:52:b4:
                    30:e3:ea:3d:a3:5f:9b:14:4f:fa:8a:9f:10:4c:76:
                    9d:7e:a6:2a:24:cf:a9:e2:af:45:45:ea:d2:a4:c8:
                    ee:10:f1:57:41:be:01:9d:71:cb:9a:76:87:b2:30:
                    51:8d:b2:73:96:a7:45:60:d8:72:1f:e4:67:64:77:
                    c6:58:42:52:90:31:ae:e1:c9:e6:a4:82:f1:b8:eb:
                    f4:e3:a0:2a:e4:af:27:31:c4:8e:29:bc:8d:37:a9:
                    23:1d:2d:17:88:73:8d:f0:a0:fd:49:fa:04:5d:c9:
                    36:5b:a3:5d:26:9a:00:4e:e2:65:a3:f5:8e:ec:ac:
                    25:fd:61:b7:8f:aa:e2:22:c2:fe:d8:81:ce:97:a0:
                    c4:ee:71:a4:d9:c1:8f:87:62:43:e6:ba:6f:02:c3:
                    69:d4:c8:8b:19:d3:1d:24:1a:83:b1:25:b2:62:ca:
                    4f:7c:42:ea:e5:d5:55:2d:95:3b:2b:7f:63:ee:26:
                    77:b8:67:d0:12:d5:f5:15:27:b4:be:f1:6c:06:51:
                    a5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:51:4A:40:5E:39:58:39:11:BB:2C:38:AC:B7:F0:82:16:11:43:F1
            X509v3 Authority Key Identifier:
                keyid:65:BD:8B:DB:0F:06:88:47:9A:17:41:E2:BD:66:24:40:8D:A5:67:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/65BD8BDB0F0688479A1741E2BD6624408DA567AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/65BD8BDB0F0688479A1741E2BD6624408DA567AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/3130332e3138302e35392e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:59:b8:a1:77:41:7f:18:d2:52:f2:0a:bf:9e:20:a7:54:
         6b:fa:ee:b7:d3:cb:2f:93:1f:70:0f:86:a1:8a:3a:8f:48:4d:
         d9:2e:f7:af:f2:f5:bb:79:6b:f8:df:7a:0f:b0:14:92:c8:f8:
         f0:4a:9b:34:4b:bb:ad:4b:74:d0:c6:3c:d9:c2:27:f4:9f:8d:
         72:01:ad:d5:88:0e:4f:03:43:67:24:1a:39:36:ce:d3:5f:4d:
         e7:bc:54:87:85:71:b4:11:5b:92:69:e8:57:37:8e:3d:fb:f7:
         06:48:62:79:d4:ed:39:d8:05:76:55:1e:18:c2:e3:e2:57:ac:
         d6:7a:b8:bb:a6:18:c2:fb:7f:15:ec:1e:1f:4c:c8:00:d9:98:
         23:a6:ae:d9:8a:cf:cc:b1:b0:db:a6:89:36:5b:ff:cf:6d:13:
         fd:6b:ee:fd:86:d5:91:3f:8b:e6:61:cf:84:43:c7:41:91:9e:
         74:8f:1b:98:e4:64:63:fa:1c:a8:7c:72:61:a2:5e:42:4f:9d:
         9a:3a:47:e7:1e:df:2b:a6:75:0c:12:b4:7c:a0:6c:30:0d:d4:
         5b:31:4a:4d:62:ac:30:8a:a6:6d:56:ad:e8:0d:41:76:69:f9:
         53:4e:68:85:96:93:d0:68:2f:76:c1:47:25:09:ff:a9:98:52:
         56:aa:e2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:32:10 2026 by rpki-client