Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
File:                     3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa (raw, json)
Hash identifier:          8o9FS5xLO5vhevJDNVpAnOF71b53C2MlNbITwJZ0GuU=
Subject key identifier:   C6:01:2C:B4:6F:6B:1B:EF:63:75:CE:C8:30:26:67:05:19:46:9B:AA
Certificate issuer:       /CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
Certificate serial:       2018C72DFF8FC7097FA459939DCAD4AB109658
Authority key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa
Signing time:             Fri 03 Apr 2026 06:00:01 +0000
ROA not before:           Fri 03 Apr 2026 05:55:01 +0000
ROA not after:            Fri 02 Apr 2027 06:00:01 +0000
asID:                     149369
IP address blocks:        103.180.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl
                          rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 09:36:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:c7:2d:ff:8f:c7:09:7f:a4:59:93:9d:ca:d4:ab:10:96:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E
        Validity
            Not Before: Apr  3 05:55:01 2026 GMT
            Not After : Apr  2 06:00:01 2027 GMT
        Subject: CN=C6012CB46F6B1BEF6375CEC83026670519469BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:d3:0f:65:ff:8f:21:a3:60:71:62:34:cf:
                    3a:19:4f:3d:02:4c:76:cf:8d:b6:1f:34:d8:6c:df:
                    9d:03:98:97:97:ae:d1:f6:31:b4:07:66:e1:9c:99:
                    e6:40:50:78:e2:5e:e6:d1:5c:4f:a8:91:8b:db:f3:
                    d7:37:d5:c5:5f:f1:d6:b7:ab:a2:c2:77:d7:3a:e2:
                    22:16:c4:1a:90:85:2d:e4:14:90:92:98:2e:9d:44:
                    72:c6:77:25:49:27:08:9f:d9:03:c5:37:c3:24:da:
                    d1:f5:53:a3:52:d1:21:50:49:9d:2f:56:ed:00:e7:
                    ab:06:fa:0c:2f:04:60:40:b8:6c:21:20:8a:4c:33:
                    f6:86:b5:12:c3:78:46:8b:50:a5:96:96:34:79:f7:
                    27:41:5c:1d:d2:5f:a0:a9:5a:20:18:2d:66:e5:d9:
                    ee:89:fb:d7:bc:09:94:60:35:d8:50:69:2b:a2:d5:
                    c1:98:7d:58:b3:13:05:1a:9a:4d:e7:ee:2c:e2:47:
                    96:b0:b8:51:5b:4c:95:c3:9f:ff:74:d2:aa:b9:71:
                    44:02:bb:29:7c:ae:a6:f7:a0:ea:97:36:d9:ac:48:
                    f1:10:1e:b5:c7:20:ec:09:f8:0f:86:0f:e5:ab:6c:
                    69:f2:65:89:e8:a4:99:27:73:04:2b:f1:12:7e:95:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:01:2C:B4:6F:6B:1B:EF:63:75:CE:C8:30:26:67:05:19:46:9B:AA
            X509v3 Authority Key Identifier:
                keyid:19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/3130332e3138302e3139372e302f32342d3234203d3e20313439333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:b0:88:8d:98:6e:c8:b0:5e:e1:27:d0:9e:60:7e:f0:11:
         27:84:f0:13:8b:13:78:33:30:01:8a:35:c7:67:48:84:f9:81:
         d6:dd:c2:3c:3c:74:37:01:80:ec:56:e8:bf:cc:36:59:79:60:
         76:11:43:09:1c:9a:eb:c8:d2:b6:e2:28:7c:96:e8:90:35:24:
         1e:ba:ac:7d:9e:de:ba:0c:67:bf:4d:c9:ec:00:ac:94:24:5b:
         e4:f3:93:c7:11:46:31:18:ba:e0:22:e0:77:20:69:31:8c:e4:
         06:54:b7:22:4e:38:a2:9b:c8:bc:9f:2c:e7:ee:ae:d5:78:38:
         d0:0c:92:dd:ae:cd:80:8b:67:43:22:9c:41:62:04:e5:c1:4d:
         f0:7e:5f:ef:7c:9a:58:25:a4:1c:85:e1:77:37:2c:5b:23:1f:
         0a:0a:1b:6f:d2:ae:e6:f2:c7:dd:c5:95:5c:f4:c0:78:c8:7c:
         84:cb:36:cb:d8:d8:da:2f:03:81:b0:d0:40:ad:30:21:8f:40:
         2f:5a:7d:2b:f8:d3:41:05:a1:41:31:a3:f4:ec:96:2c:12:20:
         6e:fc:34:a7:be:69:9d:f1:7c:73:37:f6:d5:b8:be:2d:e5:00:
         f5:33:90:5b:8c:fb:fe:29:30:c8:bb:3b:65:57:e5:ae:c7:7f:
         1f:ad:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:41 2026 by rpki-client