Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
File:                     3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (raw, json)
Hash identifier:          m5ppv+yynAEqteuPqjvU2pSSwALPEakKRId/1LTSW8g=
Subject key identifier:   41:65:BA:D4:7A:DE:72:DE:90:14:92:EF:F8:E7:11:D1:4B:18:47:93
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       1D39B06621D56AEF1650D4355951445DFC409318
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa
Signing time:             Sun 19 Apr 2026 08:00:02 +0000
ROA not before:           Sun 19 Apr 2026 07:55:02 +0000
ROA not after:            Sun 18 Apr 2027 08:00:02 +0000
asID:                     55002
IP address blocks:        103.82.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 20:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:39:b0:66:21:d5:6a:ef:16:50:d4:35:59:51:44:5d:fc:40:93:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Apr 19 07:55:02 2026 GMT
            Not After : Apr 18 08:00:02 2027 GMT
        Subject: CN=4165BAD47ADE72DE901492EFF8E711D14B184793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:08:6f:52:78:95:16:79:b2:b5:6d:44:ad:
                    0b:d2:a4:e5:a5:65:a5:dc:c3:b3:65:2d:92:41:d9:
                    ef:78:cb:42:90:cd:d1:a3:f3:61:b8:16:8f:a7:68:
                    7b:4e:fd:a0:27:9f:5b:aa:e4:53:bb:7a:13:78:15:
                    eb:99:cd:12:16:67:3a:62:0c:39:bb:2e:b4:e9:4a:
                    25:c8:65:88:51:65:68:37:4c:78:4a:f8:6e:bc:3c:
                    ea:1c:20:0d:23:2f:f0:29:22:36:a7:76:d1:1d:55:
                    df:49:57:60:af:3a:4d:a7:af:d9:47:67:9e:48:12:
                    a0:a5:8c:66:24:1f:48:79:f2:a6:2a:ad:3d:7b:6a:
                    4c:17:cc:5e:03:48:b9:cf:fe:0f:ca:33:fe:f4:77:
                    e9:17:96:d0:35:4c:c5:da:7a:a6:06:36:9b:50:17:
                    ac:06:cd:53:64:4f:7c:3a:5e:c3:61:ba:ec:ea:52:
                    cc:f5:e8:ef:df:82:95:d0:16:61:0a:9c:f0:88:ea:
                    c4:cd:b4:c3:d5:c0:e3:e0:f6:67:49:fc:97:38:cf:
                    d1:3d:a1:31:c6:06:06:48:24:d1:c7:3d:b1:b0:86:
                    45:6e:77:07:4a:5f:78:b2:e9:23:86:c9:e3:91:ff:
                    4f:26:b4:40:17:af:cf:d1:f9:23:e3:f6:a1:94:2a:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:65:BA:D4:7A:DE:72:DE:90:14:92:EF:F8:E7:11:D1:4B:18:47:93
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138332e302f32342d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:8f:33:bb:ae:40:ee:82:9b:1e:e4:8a:4d:59:f0:1d:62:43:
         bc:fe:49:09:36:58:01:60:9c:f3:0d:68:96:6f:76:a7:be:16:
         01:13:95:d5:7b:c0:9d:ae:9f:4a:67:b6:c1:1e:df:0c:1e:e7:
         29:00:21:0e:6e:32:29:cc:b7:19:b2:01:6a:06:f9:4c:86:e8:
         e3:f9:a3:57:9e:07:70:65:e1:13:fd:3b:8c:cb:f6:92:9e:4d:
         c3:29:b7:d9:b6:ae:bc:4d:c4:e9:2a:1e:05:20:0e:b1:02:ad:
         36:2c:53:0a:99:46:5d:2b:50:98:1c:92:6b:81:5d:03:ce:0b:
         4c:a7:10:e5:07:e3:0c:b3:3c:ce:62:b4:df:30:ef:c5:a1:65:
         7a:d4:78:5a:79:72:dd:1d:36:a0:81:f6:ea:de:02:8f:11:e7:
         ba:6e:a9:0f:68:22:ff:b3:75:14:1b:5c:b5:8e:60:f1:1a:dc:
         13:47:81:d8:d4:bd:4c:00:64:27:1d:b4:8e:6a:23:1f:1b:d4:
         80:07:84:f7:e3:f9:95:cf:d0:35:fb:d0:4e:cc:c4:fc:f2:21:
         62:52:c2:ab:1e:f0:71:56:52:1e:69:ff:4d:b9:86:6e:e3:97:
         0d:80:28:4d:1d:b3:38:b3:e4:59:da:32:21:47:23:fc:c3:25:
         19:ad:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:24:36 2026 by rpki-client