Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (raw, json)
Hash identifier:          kj3Va/8wSHksYied1qkOcAHkBVKdF7m1RMTnT7xu/jU=
Subject key identifier:   B9:62:23:57:1E:39:3A:BA:DE:6C:E9:9E:C0:39:C4:57:A8:6E:3A:73
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       11FB7A8E67743217E2B6E9CAAE49DCD1E4878333
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa
Signing time:             Sat 18 Apr 2026 15:00:02 +0000
ROA not before:           Sat 18 Apr 2026 14:55:02 +0000
ROA not after:            Sat 17 Apr 2027 15:00:02 +0000
asID:                     55002
IP address blocks:        103.82.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:fb:7a:8e:67:74:32:17:e2:b6:e9:ca:ae:49:dc:d1:e4:87:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Apr 18 14:55:02 2026 GMT
            Not After : Apr 17 15:00:02 2027 GMT
        Subject: CN=B96223571E393ABADE6CE99EC039C457A86E3A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:79:11:2c:c7:76:1f:f5:3e:9d:b8:7d:ac:1c:
                    a4:c0:1d:b9:9f:4c:80:6e:5f:58:22:f2:df:d9:30:
                    62:8d:4a:21:5c:60:66:a4:88:ce:42:02:ba:8c:69:
                    8a:43:1c:b0:82:e4:ba:68:c8:34:4c:a4:15:93:ce:
                    b0:0d:5a:4d:46:78:6d:ce:75:32:98:a4:2b:e4:d6:
                    ca:ad:66:c5:1b:27:4c:8f:9d:d7:07:5f:48:e6:17:
                    00:44:3a:48:d5:99:4b:9c:53:a8:56:fc:cb:2d:7b:
                    07:16:a9:2f:a0:43:f7:61:6c:71:23:89:a1:8f:dd:
                    04:ba:11:43:70:36:72:ee:3e:17:ab:88:3f:41:4b:
                    23:8a:08:28:b1:41:25:bd:e2:48:19:62:56:e2:19:
                    a1:01:ef:c3:cf:65:c6:8c:f0:99:1a:d4:63:cf:06:
                    aa:56:71:1f:dd:36:ea:57:37:04:51:a6:e0:0c:f0:
                    13:0a:9a:b4:a6:c2:e9:62:db:32:91:e2:a7:7d:db:
                    eb:63:26:31:6e:f6:c4:9b:a3:ce:ae:7d:f9:63:06:
                    17:c4:e9:b0:f0:9a:a0:9b:b9:fb:bd:ca:aa:88:d9:
                    7e:6c:b4:46:19:67:0d:c9:9e:9b:26:86:57:0d:4e:
                    21:c4:2f:af:4b:7c:35:3a:7e:e2:9f:14:b5:36:45:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:62:23:57:1E:39:3A:BA:DE:6C:E9:9E:C0:39:C4:57:A8:6E:3A:73
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:6a:2a:43:13:51:dc:58:9b:e2:9e:02:1b:bb:52:8e:64:
         41:b9:66:f2:70:11:76:9a:c1:61:b0:4d:f0:2b:08:01:dc:30:
         ec:fb:a2:12:c7:ae:bc:ed:e8:93:c7:f0:a2:91:88:c4:fb:98:
         7d:f9:6a:38:29:8a:c9:19:55:fe:e7:f0:a5:4c:d9:85:6f:28:
         b2:32:0c:92:40:05:9e:e3:65:7f:34:9a:8e:28:fe:1c:60:90:
         d7:5d:a6:2c:23:8c:23:f6:19:d7:4b:16:52:10:34:b4:72:28:
         0a:8f:c9:47:91:ae:1c:99:a2:5e:b2:ac:e0:ed:de:ba:9d:e3:
         0d:7b:99:58:f4:cd:f0:ca:a4:69:62:7b:94:21:db:33:e1:69:
         ce:d2:8f:ca:86:1c:d7:b2:30:d4:8d:ec:9c:ec:65:4c:99:53:
         43:49:9f:7c:0a:67:60:43:6d:95:65:48:91:29:72:8e:4e:66:
         0d:7a:72:15:4f:e6:56:e9:5a:4d:22:74:31:09:2d:40:cb:38:
         e5:d8:0d:e1:ac:76:69:b9:9b:e8:3b:0d:01:08:dc:27:60:ad:
         5b:4f:33:66:95:97:a1:f5:a5:7b:e1:20:e8:00:bb:ed:b6:a8:
         0f:63:e7:49:22:5a:a2:2d:d8:b0:74:27:f7:39:ec:40:50:fd:
         24:ac:55:24
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEft6jmd0MhfitunKrknc0eSHgzMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD
QjNBMzQyODAeFw0yNjA0MTgxNDU1MDJaFw0yNzA0MTcxNTAwMDJaMDMxMTAvBgNV
BAMTKEI5NjIyMzU3MUUzOTNBQkFERTZDRTk5RUMwMzlDNDU3QTg2RTNBNzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYeREsx3Yf9T6duH2sHKTAHbmf
TIBuX1gi8t/ZMGKNSiFcYGakiM5CArqMaYpDHLCC5LpoyDRMpBWTzrANWk1GeG3O
dTKYpCvk1sqtZsUbJ0yPndcHX0jmFwBEOkjVmUucU6hW/MstewcWqS+gQ/dhbHEj
iaGP3QS6EUNwNnLuPheriD9BSyOKCCixQSW94kgZYlbiGaEB78PPZcaM8Jka1GPP
BqpWcR/dNupXNwRRpuAM8BMKmrSmwuli2zKR4qd92+tjJjFu9sSbo86uffljBhfE
6bDwmqCbufu9yqqI2X5stEYZZw3JnpsmhlcNTiHEL69LfDU6fuKfFLU2RfUxAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuWIjVx45OrrebOmewDnEV6huOnMwHwYDVR0j
BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw
Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB
MzQyOC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwNzU4ZjE1LTVkZTgtNDg3ZC05
OTQ1LWMzZWEyMDdlNDRhZC8wLzMxMzAzMzJlMzgzMjJlMzEzODMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzNTMwMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdStDANBgkqhkiG
9w0BAQsFAAOCAQEAa75qKkMTUdxYm+KeAhu7Uo5kQblm8nARdprBYbBN8CsIAdww
7PuiEseuvO3ok8fwopGIxPuYfflqOCmKyRlV/ufwpUzZhW8osjIMkkAFnuNlfzSa
jij+HGCQ112mLCOMI/YZ10sWUhA0tHIoCo/JR5GuHJmiXrKs4O3eup3jDXuZWPTN
8MqkaWJ7lCHbM+FpztKPyoYc17Iw1I3snOxlTJlTQ0mffApnYENtlWVIkSlyjk5m
DXpyFU/mVulaTSJ0MQktQMs45dgN4ax2abmb6DsNAQjcJ2CtW08zZpWXofWle+Eg
6AC77baoD2PnSSJaoi3YsHQn9znsQFD9JKxVJA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:48 2026 by rpki-client