Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          LmAAYXQDd7PTPcaMEiTttR5qd67toE25WQOCNYRTLdg=
Subject key identifier:   0A:1A:97:FE:48:DC:81:14:00:39:85:61:C8:09:29:AE:33:C1:A6:CD
Certificate issuer:       /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Certificate serial:       42991323D7A6DCBB9D6D60500926717188163BB9
Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:43:14 +0000
ROA not before:           Sun 03 May 2026 02:38:14 +0000
ROA not after:            Sun 02 May 2027 02:43:14 +0000
asID:                     9341
IP address blocks:        103.180.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
                          rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:99:13:23:d7:a6:dc:bb:9d:6d:60:50:09:26:71:71:88:16:3b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
        Validity
            Not Before: May  3 02:38:14 2026 GMT
            Not After : May  2 02:43:14 2027 GMT
        Subject: CN=0A1A97FE48DC811400398561C80929AE33C1A6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:36:4b:3a:c7:ac:c6:82:ee:b1:e3:b8:61:
                    bf:64:69:93:2a:ec:d7:81:8a:45:6a:dc:6c:94:e8:
                    e6:73:5c:0e:47:98:70:2b:0d:ef:bb:ee:54:85:ba:
                    6a:d1:81:f1:f8:f9:82:53:18:aa:ec:f6:e9:b8:38:
                    be:07:23:aa:1b:d9:3d:39:cb:b2:c4:f6:95:db:5b:
                    84:bc:44:0b:f3:24:39:fb:e3:07:b9:7b:af:e9:21:
                    eb:61:44:28:46:26:f8:07:c9:94:cb:c9:69:4d:f8:
                    f0:24:37:43:cd:e3:b3:cb:81:59:19:99:88:fd:8d:
                    cc:0e:01:dd:f1:c8:09:a6:7f:01:93:32:e6:61:71:
                    fb:5a:74:76:ce:21:06:31:9a:22:1d:5e:c0:ba:21:
                    55:cb:36:90:f1:d9:b2:b0:a9:8b:c5:8b:8b:7b:0f:
                    be:27:9f:0c:ea:9a:f6:4a:48:87:f9:fe:7e:0d:e6:
                    04:0c:63:c1:16:1c:4a:84:6f:1a:c0:0a:84:c3:e2:
                    38:d6:a6:21:97:f6:bb:ca:31:75:01:bb:48:d0:08:
                    31:2c:d0:00:f0:ee:9e:b9:e0:1b:14:6c:1c:4a:8c:
                    60:05:8a:8d:e2:5f:e5:46:a2:cd:4d:f5:7b:7f:41:
                    8a:53:5e:f8:ef:9f:34:10:77:ce:5a:71:c7:39:d5:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1A:97:FE:48:DC:81:14:00:39:85:61:C8:09:29:AE:33:C1:A6:CD
            X509v3 Authority Key Identifier:
                keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:81:79:1d:68:3c:ec:f0:8b:a7:05:9b:79:57:68:0d:28:
         be:41:30:bf:09:58:bf:ec:54:a5:06:b0:46:7f:ab:4d:d6:38:
         45:f7:28:c4:0e:22:57:5b:6a:51:96:c3:9f:78:31:00:26:f3:
         91:ca:b0:fc:f2:d7:99:99:3d:b6:6c:82:81:f5:dd:cc:ad:d1:
         bb:af:9c:43:7a:99:d6:6c:92:07:d6:11:6f:4a:af:f9:c3:88:
         81:cd:93:e5:c0:16:b8:ec:35:d8:2a:fe:75:8e:2a:6d:1e:10:
         1c:d5:70:2f:cf:57:97:96:36:b1:08:53:96:09:b5:76:5d:20:
         c3:9e:8f:3e:35:2a:dd:19:eb:17:5a:25:b9:ee:4a:ba:ec:95:
         c8:7e:13:25:10:79:a8:d8:59:de:dc:b9:07:e8:92:7c:51:6e:
         ea:9d:c2:01:8e:ec:8c:c2:f4:b2:3e:b3:db:51:0d:26:5d:72:
         74:76:6a:f6:93:12:62:33:1f:df:90:3a:00:6d:40:a9:9c:26:
         24:f9:c8:51:e1:5c:ad:55:7d:15:0c:f3:61:92:68:cb:4a:5b:
         40:90:c7:00:be:50:3c:c1:84:98:12:3b:ac:e6:c3:4b:b2:8e:
         84:11:4f:e2:85:dc:3e:97:dc:4f:4b:0c:24:f0:22:df:2d:93:
         dc:a7:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:40 2026 by rpki-client