Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          zqJ6/Ht8K/+Ny3dimqY84LbP7J5Bka6C/L5Nlwxj1Xo=
Subject key identifier:   5B:FD:04:DE:EE:12:57:C4:CE:DB:81:10:33:0C:37:40:14:A9:B6:83
Certificate issuer:       /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
Certificate serial:       287B3358E314CA622839E007A05315D25C7AA874
Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa
Signing time:             Fri 03 Apr 2026 06:00:01 +0000
ROA not before:           Fri 03 Apr 2026 05:55:01 +0000
ROA not after:            Fri 02 Apr 2027 06:00:01 +0000
asID:                     149369
IP address blocks:        103.180.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl
                          rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7b:33:58:e3:14:ca:62:28:39:e0:07:a0:53:15:d2:5c:7a:a8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Validity
            Not Before: Apr  3 05:55:01 2026 GMT
            Not After : Apr  2 06:00:01 2027 GMT
        Subject: CN=5BFD04DEEE1257C4CEDB8110330C374014A9B683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:d4:1e:04:55:fd:bb:7a:d7:ea:45:7d:e6:
                    f6:07:46:e9:22:3a:83:e1:14:5d:c2:92:e9:07:67:
                    21:46:a6:10:79:02:59:69:34:18:fa:ed:fb:89:2a:
                    d9:d8:8b:87:85:82:2a:49:d5:22:f9:f4:dd:49:8c:
                    aa:32:27:f0:0d:37:97:06:e6:e8:23:75:3f:1e:0b:
                    f4:cf:c7:0f:1c:93:a0:f6:44:e4:ff:3d:f7:76:c3:
                    87:1a:e2:ba:b9:65:c1:71:62:b8:39:ac:4e:f7:6c:
                    09:85:3e:b3:45:d5:dd:55:07:c9:82:f6:77:e0:be:
                    da:0a:cd:25:ed:cc:5f:d0:8c:ec:32:d8:d8:9f:94:
                    3a:04:96:32:e8:24:98:cf:70:6a:14:b5:a2:10:0b:
                    29:a5:df:ba:48:43:bc:d5:f8:0a:6a:fc:e0:58:ef:
                    a2:3f:e6:72:55:1a:ec:b4:9a:2f:7e:70:a3:7f:7a:
                    dd:11:23:ff:7d:8d:51:98:b2:06:83:c2:00:83:f3:
                    ab:77:0c:84:a8:0b:c2:cf:33:d9:79:66:d1:b5:4c:
                    6d:98:e5:9a:52:91:25:a7:db:11:a6:90:97:b0:97:
                    e4:69:0c:fe:1e:6d:da:fa:c1:3d:2e:0b:d4:6e:7f:
                    60:6c:10:13:25:a8:b9:a8:f4:f7:a5:c8:2d:b8:57:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FD:04:DE:EE:12:57:C4:CE:DB:81:10:33:0C:37:40:14:A9:B6:83
            X509v3 Authority Key Identifier:
                keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139362e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:13:4f:6a:20:26:16:f4:0e:70:b0:4a:4e:02:e4:27:11:69:
         12:cb:d9:14:f9:94:3b:37:4b:a1:20:9d:95:63:9b:91:de:60:
         74:58:d9:56:86:27:e2:ba:da:ea:3f:a2:49:ac:52:b2:ab:31:
         ce:13:30:b1:f4:1d:fc:1c:d6:0f:1d:31:67:ca:56:5d:07:83:
         87:15:b9:cf:b1:97:50:f0:53:92:aa:1a:e1:0d:b0:e0:cd:df:
         47:1b:ce:ed:2f:96:9e:7c:53:8c:91:5c:7f:4c:8f:fb:83:37:
         9b:5d:7d:11:30:10:94:6c:e9:0e:a1:3c:7b:c3:bb:98:04:e6:
         8c:a8:de:65:8e:f3:60:74:23:79:62:a7:61:aa:2a:b9:92:89:
         92:f9:59:0b:46:32:01:eb:be:9d:0a:b4:18:c8:e5:0c:af:6d:
         92:5d:97:25:ab:07:d1:19:0a:2e:8b:a2:d1:00:4b:2a:d2:45:
         d4:14:01:13:56:ac:ac:fe:03:03:52:6a:af:f2:a6:47:02:0c:
         1b:cf:26:e4:15:52:61:61:40:02:c5:ee:a5:2c:ad:cf:90:f3:
         78:29:1c:67:15:c1:f6:b4:33:42:2f:ba:1d:95:83:83:00:f8:
         77:92:a1:67:be:6b:57:60:f8:fc:83:2f:b9:79:ae:83:95:1e:
         dc:de:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:40 2026 by rpki-client