Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          iFf65VSXg20wrz6v4r2DcwmXJElUznETQwb4JjKEsDU=
Subject key identifier:   F5:BE:95:FF:CD:78:44:A1:27:6A:F3:92:87:A3:D5:77:2B:05:37:5E
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       3BD4EBB016E4800212D79E38301182318E19CD19
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
Signing time:             Fri 27 Mar 2026 16:00:01 +0000
ROA not before:           Fri 27 Mar 2026 15:55:01 +0000
ROA not after:            Fri 26 Mar 2027 16:00:01 +0000
asID:                     149365
IP address blocks:        103.180.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 20:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d4:eb:b0:16:e4:80:02:12:d7:9e:38:30:11:82:31:8e:19:cd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: Mar 27 15:55:01 2026 GMT
            Not After : Mar 26 16:00:01 2027 GMT
        Subject: CN=F5BE95FFCD7844A1276AF39287A3D5772B05375E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bc:8a:26:1c:b8:5a:47:be:ce:b5:3e:c1:16:
                    f3:0f:5f:79:92:96:16:05:46:66:fa:dc:7a:48:5f:
                    9f:c6:47:d8:d1:47:e0:f1:93:c7:e8:f6:46:6d:5c:
                    97:49:b6:a9:fe:08:1e:0a:00:f1:71:9e:ae:93:6a:
                    1d:d3:4b:6b:76:87:cb:4f:3b:16:09:a3:7c:64:89:
                    10:09:90:2c:88:c0:03:a4:1b:5f:1b:b4:89:ab:f0:
                    80:34:61:5d:ec:2f:bd:d8:06:b2:72:a4:9b:6a:aa:
                    83:bb:4e:34:59:e9:52:ed:08:de:14:d3:4b:f4:5b:
                    f0:a3:ae:ee:38:b6:eb:f8:88:20:c7:4d:b6:36:96:
                    75:a3:d6:f8:fb:93:a0:0d:b7:8b:fa:0b:88:26:e5:
                    c8:db:f0:fc:bd:95:3a:f6:e2:de:72:06:d9:5c:b1:
                    f1:04:94:43:70:6b:96:1f:2c:2c:bf:a3:3e:a0:7a:
                    9e:8c:cb:fb:17:f6:2e:fe:1d:d5:d9:68:76:98:c5:
                    5e:61:50:f6:0b:c3:1d:84:c4:66:92:21:66:f6:69:
                    c8:84:a6:50:5a:05:b7:da:6d:b0:35:94:e5:a9:91:
                    a9:3b:50:96:fa:21:74:cd:01:5c:04:85:f7:b5:f6:
                    12:39:27:da:3c:2e:3b:64:ce:c4:30:e6:ba:4a:32:
                    ce:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:95:FF:CD:78:44:A1:27:6A:F3:92:87:A3:D5:77:2B:05:37:5E
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:06:99:31:cd:77:70:e5:11:93:02:75:89:11:70:e1:f4:04:
         19:92:8c:2c:5b:b2:b0:2d:96:05:a4:66:44:23:a7:60:7c:58:
         78:f9:76:50:75:7e:a4:8e:0d:40:5c:96:af:42:07:8b:08:98:
         23:36:d0:c8:68:9d:e7:ba:e6:d7:1b:7d:2a:92:e2:2c:57:92:
         cf:12:40:f1:61:0e:ff:bd:93:1b:12:e5:cb:f6:d6:46:0f:fa:
         25:60:64:c2:78:11:74:b6:79:d0:f0:ac:df:9a:e7:2b:ce:f4:
         5a:2e:29:3c:12:ea:19:2c:17:5e:aa:7e:02:d2:b9:f0:b0:26:
         32:e6:40:dc:33:73:03:1f:4f:f6:5a:ce:3f:03:03:15:a8:6c:
         08:2a:50:a0:73:23:de:9b:77:bb:e8:b4:ea:15:44:5b:58:b0:
         fe:8e:a7:a9:b1:6d:72:c5:54:59:19:a3:a2:3d:29:eb:b8:43:
         a1:73:8b:28:c8:47:9e:ad:bc:79:87:9c:03:28:e6:58:fb:84:
         57:cc:72:12:17:8c:ea:52:d6:87:fb:c7:2f:ba:ac:f3:37:73:
         34:4f:59:cc:00:a7:ca:4f:d8:b4:6c:37:40:0e:83:cc:cd:30:
         2a:99:1b:37:f8:50:e6:26:64:1d:5d:fa:6a:dc:3d:ad:cf:ae:
         40:93:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:47:30 2026 by rpki-client