Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          /H7mHY2xJ6jF9zjh/SzqcS82iVWznIKFIdaRtKBLuXI=
Subject key identifier:   CF:1C:40:70:EE:B4:C8:4E:A5:0F:E0:02:50:E2:11:6B:9E:5D:F7:67
Certificate issuer:       /CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
Certificate serial:       59F72AC1CD56644D35D0B313B9EB6D2659186699
Authority key identifier: C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:43:13 +0000
ROA not before:           Sun 03 May 2026 02:38:13 +0000
ROA not after:            Sun 02 May 2027 02:43:13 +0000
asID:                     9341
IP address blocks:        103.180.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl
                          rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 09:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:2a:c1:cd:56:64:4d:35:d0:b3:13:b9:eb:6d:26:59:18:66:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1D5CACB2869A45074AA2EEF0AAF440A043D578A
        Validity
            Not Before: May  3 02:38:13 2026 GMT
            Not After : May  2 02:43:13 2027 GMT
        Subject: CN=CF1C4070EEB4C84EA50FE00250E2116B9E5DF767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:eb:5c:8f:7c:64:c0:55:04:37:43:ce:00:
                    e1:09:5e:60:0c:d8:b3:bc:3d:9f:1b:e9:3f:3c:48:
                    74:07:b8:5e:46:6e:73:0a:59:6c:11:4d:2b:10:d1:
                    56:ce:a9:6b:12:cb:32:f7:1c:50:a6:74:9e:b9:f3:
                    c4:a5:e7:d6:f7:95:83:86:55:56:92:83:8f:2c:da:
                    a7:ee:47:31:e8:05:4d:90:38:c4:bc:db:8b:ce:f4:
                    22:e2:98:30:7f:d6:16:61:68:8a:e8:8e:33:8f:7a:
                    53:19:bf:ee:a6:0f:14:2c:fc:72:40:5e:a8:34:34:
                    c8:d1:b2:0e:f8:57:b8:0e:93:fa:9f:67:b3:e1:b7:
                    e2:f2:5d:9f:06:4d:fb:f0:4b:6c:dc:43:17:af:e7:
                    ad:8c:a7:0a:b7:9f:3d:20:3c:26:15:a8:2a:33:62:
                    42:cc:d1:d2:1d:a8:7a:e6:92:4f:b6:5c:46:5d:00:
                    5b:28:7c:f4:dd:5f:a2:1d:79:60:0a:49:68:c9:ee:
                    d9:31:e2:64:e6:8f:93:f9:8f:93:74:fc:00:c5:82:
                    e7:a1:70:15:ca:f4:0f:1b:08:40:b5:a1:e7:c2:21:
                    c0:d5:36:70:a7:b4:ac:4e:d6:34:5e:15:1f:5e:95:
                    01:d0:4a:12:19:c7:9e:b3:51:0f:07:61:6e:aa:f5:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1C:40:70:EE:B4:C8:4E:A5:0F:E0:02:50:E2:11:6B:9E:5D:F7:67
            X509v3 Authority Key Identifier:
                keyid:C1:D5:CA:CB:28:69:A4:50:74:AA:2E:EF:0A:AF:44:0A:04:3D:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1D5CACB2869A45074AA2EEF0AAF440A043D578A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:84:22:6d:f0:95:92:a1:a5:eb:21:4b:a8:3b:00:c8:89:41:
         6c:2f:8c:ce:0a:9c:22:04:a5:0a:1d:9b:46:4a:a4:19:ca:63:
         7f:6a:0a:66:4c:40:35:6f:58:bd:f0:cf:80:4a:34:74:5d:19:
         13:4f:4a:6a:cc:a7:d2:62:06:a3:a9:cc:ba:cc:11:3c:29:f2:
         28:d9:35:50:08:93:69:14:92:ed:d1:f7:61:bf:87:ab:bb:19:
         ed:de:9c:e1:e4:eb:e3:b3:fa:61:e5:fa:ff:b6:b9:f9:70:08:
         d5:95:28:b1:4f:58:d3:32:98:ee:b7:75:32:68:d1:37:fc:bf:
         55:a7:e0:5e:ac:93:14:6b:f4:4c:2d:27:75:a9:85:5b:29:4e:
         11:8d:9f:aa:90:b5:fa:0a:a0:4d:2b:68:78:a4:03:62:aa:0b:
         07:b8:77:a8:d4:53:2d:31:47:b5:df:b5:47:09:68:49:81:b1:
         7d:a2:2c:d3:dd:38:62:94:ec:12:f3:ae:73:a0:c5:b2:55:ab:
         f4:f7:b0:8d:4b:c3:e2:e6:dc:b4:ee:aa:76:82:58:b0:95:cc:
         ed:2b:f2:ba:ed:2a:94:ee:e4:38:db:04:f8:45:c8:01:e3:f4:
         25:85:7a:6c:c9:87:64:b2:89:4e:00:04:d1:04:d8:a2:0b:f2:
         e3:eb:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:09 2026 by rpki-client