Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          X5EvMEBlrSRW+HPtHYFfHFbBOHTDK9FLsUNGXxD6WIM=
Subject key identifier:   E0:46:0B:48:00:B4:5F:35:5E:E3:48:26:D6:FB:D4:71:37:71:E8:C1
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       1A4444E169E20DC8FB2AEEE4B4F2860285AC4F32
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 19 Apr 2026 08:00:02 +0000
ROA not before:           Sun 19 Apr 2026 07:55:02 +0000
ROA not after:            Sun 18 Apr 2027 08:00:02 +0000
asID:                     55002
IP address blocks:        103.82.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:44:44:e1:69:e2:0d:c8:fb:2a:ee:e4:b4:f2:86:02:85:ac:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Apr 19 07:55:02 2026 GMT
            Not After : Apr 18 08:00:02 2027 GMT
        Subject: CN=E0460B4800B45F355EE34826D6FBD4713771E8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9d:f5:a6:09:8f:47:85:6b:c0:33:24:46:04:
                    83:7c:25:7e:5f:96:f0:57:11:4e:2c:22:4a:e7:71:
                    74:81:bf:99:b2:d7:1a:75:9b:84:63:1c:f1:c6:6b:
                    05:e0:0d:a6:f0:b0:cd:3b:7c:60:53:17:75:5c:47:
                    3e:44:ac:6e:53:fa:fb:27:54:7d:79:e3:4c:2d:dc:
                    a6:58:c2:24:83:5a:76:fa:34:fd:f4:54:54:80:b2:
                    80:24:28:70:d3:7b:36:2b:f1:17:ab:1d:71:67:94:
                    b6:91:bb:67:22:0a:9c:2b:c1:37:45:01:2a:7e:c9:
                    58:01:41:96:04:e3:c5:8b:0c:7a:c6:50:5f:0b:6d:
                    79:85:85:a8:14:39:6f:a6:a6:53:e9:df:ce:34:c0:
                    70:a1:5f:2a:fc:67:2a:a5:41:80:b0:15:ab:6b:6c:
                    91:40:82:d4:6c:75:19:9e:ac:e5:97:ee:8a:cc:e0:
                    b5:3b:51:de:8a:8f:47:80:ef:cb:5b:4f:82:3f:cb:
                    6a:80:76:b3:9f:b5:d6:30:23:8f:17:d7:70:f0:db:
                    61:f2:94:77:09:02:34:3b:63:ac:9e:98:fc:ee:ec:
                    26:33:23:b0:5f:a3:85:4a:9f:fa:da:ed:27:48:a2:
                    a9:40:4c:0a:43:3f:ae:a6:2d:80:a3:89:ad:7c:7d:
                    b8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:46:0B:48:00:B4:5F:35:5E:E3:48:26:D6:FB:D4:71:37:71:E8:C1
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138322e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:83:82:88:96:e6:35:8c:f7:7e:9f:7d:56:92:15:d1:07:41:
         2b:9d:82:d3:8c:06:d9:42:a1:11:f7:75:08:19:14:57:63:74:
         a8:0b:35:a4:f1:85:cf:a0:6e:34:f6:e2:50:28:b0:1b:6f:3a:
         31:88:bd:1f:e6:05:0f:4f:ae:d8:72:fd:43:1c:11:18:e5:fe:
         64:c5:fa:2e:77:fe:f2:85:4d:5a:6b:a0:18:10:aa:f5:5b:80:
         87:83:ef:de:9a:ef:48:43:1f:87:8a:8b:21:f6:3d:12:4d:61:
         15:9e:77:e4:1b:3e:1f:5d:6f:2b:0c:cd:fe:bf:2c:b4:6c:fa:
         8c:de:a4:29:74:e8:0b:f3:ed:92:89:09:07:02:d4:fb:6b:ac:
         e8:f6:b5:8d:db:72:7e:16:cd:c5:92:15:30:02:8a:a5:8b:88:
         79:ae:e6:c3:99:7e:d6:44:83:8c:84:27:56:72:5b:6f:8c:13:
         8f:28:80:fc:70:20:1a:2b:30:03:c4:17:e4:a2:cd:3b:29:57:
         d7:7a:7d:d6:0e:f4:a5:11:dc:49:19:26:29:17:70:10:4c:72:
         a6:f0:34:66:2e:db:ca:8a:eb:26:6b:86:fa:76:23:f2:9c:e0:
         2d:70:12:ca:1b:6a:b3:4e:bc:45:cf:79:b6:d9:d1:cc:a8:d3:
         10:24:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:37 2026 by rpki-client