Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Ve4ocQOUOq8AQ9gpm5lYh6lO9aEe09tZrNXe/azearo=
Subject key identifier:   8D:AB:89:B0:07:DB:71:C8:7F:A2:F6:76:C2:77:EC:3C:F2:8C:9F:AB
Certificate issuer:       /CN=B9281144646657214FE1ADE5A3228E100E340E53
Certificate serial:       0F9FFAFEACFE1C3D4681F9639776B62BD52AAB6B
Authority key identifier: B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:26:46 +0000
ROA not before:           Sun 03 May 2026 02:21:46 +0000
ROA not after:            Sun 02 May 2027 02:26:46 +0000
asID:                     9341
IP address blocks:        103.180.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl
                          rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 06:38:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9f:fa:fe:ac:fe:1c:3d:46:81:f9:63:97:76:b6:2b:d5:2a:ab:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9281144646657214FE1ADE5A3228E100E340E53
        Validity
            Not Before: May  3 02:21:46 2026 GMT
            Not After : May  2 02:26:46 2027 GMT
        Subject: CN=8DAB89B007DB71C87FA2F676C277EC3CF28C9FAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:fa:7b:07:54:59:ea:0c:b9:69:81:a1:23:
                    46:22:32:ea:1f:47:8e:f3:c3:bd:92:e5:4a:36:01:
                    4d:ba:5d:cb:7b:81:2e:fe:35:6c:7b:02:d3:ad:12:
                    a6:b7:26:e6:22:6f:0e:c8:19:dd:4b:97:bd:98:4a:
                    fa:73:3d:54:80:14:08:b9:d8:2b:35:25:66:91:6e:
                    96:e6:eb:04:35:1e:0b:fb:bc:ab:9e:2e:7f:08:5b:
                    18:66:4c:2b:39:ce:98:d3:6c:6e:ae:5c:e5:a1:ee:
                    e5:40:28:49:ad:06:b5:a8:62:94:64:0d:ce:21:39:
                    3d:92:ed:1b:ca:ce:e2:35:72:9b:ec:45:be:00:98:
                    76:cf:18:26:60:40:e1:49:19:b8:c9:64:df:c2:84:
                    0a:8c:2a:7e:0b:57:21:f3:f1:55:6d:7c:54:4b:3f:
                    a3:e5:f1:86:6e:39:08:0e:3e:14:6b:d0:6e:94:83:
                    6c:42:f0:c2:7f:d4:a2:ad:81:9e:cc:98:8e:bc:2e:
                    78:f7:ce:c2:2d:5c:d6:c2:db:a6:3d:92:a5:fe:f6:
                    3c:cc:c7:cf:fc:4a:e6:92:af:03:d5:45:a2:01:7b:
                    34:32:bf:db:b9:79:0c:8c:d5:18:67:7f:43:09:87:
                    bf:69:61:a2:32:d5:41:40:43:7b:85:f5:2e:97:c4:
                    a1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:89:B0:07:DB:71:C8:7F:A2:F6:76:C2:77:EC:3C:F2:8C:9F:AB
            X509v3 Authority Key Identifier:
                keyid:B9:28:11:44:64:66:57:21:4F:E1:AD:E5:A3:22:8E:10:0E:34:0E:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/B9281144646657214FE1ADE5A3228E100E340E53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9281144646657214FE1ADE5A3228E100E340E53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:76:b5:11:2e:af:a1:53:9c:58:03:c2:95:5b:71:7c:5f:
         05:3d:bc:62:18:19:df:ea:98:b5:11:05:6b:61:ba:8d:fb:50:
         35:05:30:b5:8c:6f:55:da:bc:c4:09:56:dd:6f:c5:d6:af:70:
         c3:e2:1a:31:f9:70:b8:28:eb:ae:c2:95:35:f9:a8:6e:6a:cb:
         b3:b1:28:7c:8a:68:1e:e5:fc:71:c5:e9:6c:ff:f5:8a:9a:59:
         be:cd:62:67:02:ec:8b:88:96:ad:9f:5a:d7:2f:e1:43:4d:13:
         af:da:63:fb:2f:db:19:2f:ad:14:fd:a1:5c:2c:fe:18:6c:45:
         15:8e:f1:4e:d0:47:1a:7b:71:7d:3a:24:b4:f1:e0:6e:92:9d:
         79:16:3c:c4:32:0e:8a:43:a4:c1:1a:d9:f9:c2:48:ee:ed:f7:
         f1:10:6d:ac:6c:3d:a5:c7:05:93:cb:2a:81:0b:2d:af:5d:8b:
         3c:3b:26:46:1e:05:28:79:d9:fc:0e:c1:1c:51:c3:fa:12:86:
         8c:a2:41:56:29:82:dc:6d:28:f0:82:89:a8:98:e6:ca:07:b8:
         3e:ff:f1:e0:e7:10:e1:6d:8b:ea:f4:6f:e9:81:b1:20:90:ff:
         e8:bb:51:ce:a7:c5:92:60:4f:cc:7c:94:4d:7d:11:15:6e:b1:
         70:6c:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:27:26 2026 by rpki-client