Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
File:                     3130332e33312e34362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          OWYiObJaqc/Z3EdwxKTbcXYbKygqdFCjSyxXYt1wd18=
Subject key identifier:   F4:C2:E2:97:1B:7F:E0:EB:28:46:20:47:A1:82:D0:B0:54:F6:97:BD
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       24743D02D7836B5D3BC874931D96D02422A99F6A
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:43 +0000
ROA not before:           Sun 03 May 2026 02:13:43 +0000
ROA not after:            Sun 02 May 2027 02:18:43 +0000
asID:                     23679
IP address blocks:        103.31.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:74:3d:02:d7:83:6b:5d:3b:c8:74:93:1d:96:d0:24:22:a9:9f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:43 2026 GMT
            Not After : May  2 02:18:43 2027 GMT
        Subject: CN=F4C2E2971B7FE0EB28462047A182D0B054F697BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:ac:88:e4:4e:74:30:51:7c:06:1d:48:02:
                    bb:9a:19:70:b9:f8:7a:ba:33:62:76:33:76:f4:85:
                    4a:5e:0c:51:e9:7e:9a:79:18:ab:59:72:34:fa:60:
                    e2:10:11:5b:ec:55:68:9b:fd:1a:9e:f3:f9:ab:b1:
                    02:b7:ad:c7:e8:b8:5c:92:34:31:cb:bd:fb:51:28:
                    2e:31:1c:91:75:61:4b:96:5c:e1:1b:4f:88:5b:54:
                    8c:f0:1e:1a:b5:8d:5d:b8:53:cb:ad:a4:5b:63:50:
                    b7:53:79:d6:15:0a:e5:07:7d:3f:8e:8f:d2:54:db:
                    a0:0d:ec:c7:85:74:d7:82:26:d2:0e:7c:70:c2:06:
                    25:a7:8d:14:9c:51:62:00:88:8d:c2:23:21:84:7c:
                    4a:5a:04:be:af:2f:7e:ec:13:b4:4c:62:85:74:91:
                    01:8d:95:21:0c:76:9d:af:59:b0:b9:56:24:8c:97:
                    ab:3a:d0:bb:e9:54:8b:52:2a:f6:5a:29:7c:d9:84:
                    dd:7e:50:ab:d5:c5:70:ed:12:20:fd:37:09:c9:3c:
                    26:03:15:78:f7:ce:f3:c2:41:64:01:0d:d9:07:9d:
                    7d:48:e1:67:42:65:8e:24:da:d4:15:93:9c:45:29:
                    44:48:b3:4d:ef:4a:53:22:4f:66:d0:a5:10:2c:cf:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C2:E2:97:1B:7F:E0:EB:28:46:20:47:A1:82:D0:B0:54:F6:97:BD
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:df:5c:5a:fc:1c:a4:01:1b:bd:4b:88:f1:c0:c2:53:fd:3e:
         24:55:e6:f9:58:19:2a:b9:d6:51:76:5c:75:dc:3a:fc:f4:ce:
         8f:bd:5a:3a:dd:d7:9d:0b:37:5c:48:76:a5:d0:31:0c:c3:b1:
         ed:4f:e9:4d:13:aa:57:74:56:d4:84:fc:d4:59:62:0f:76:f7:
         41:8d:30:5f:75:2c:0c:f1:28:0b:6e:a3:65:25:5c:a9:31:d2:
         b1:56:56:fc:ac:8d:8a:7f:0f:92:fb:fb:34:a6:17:1e:f8:90:
         6b:7a:1d:b3:0e:75:5c:dd:89:f7:6f:e0:1f:f7:d9:e9:d7:62:
         41:af:b9:1c:e5:6e:96:6f:20:c4:e9:83:eb:9d:63:a6:df:6a:
         97:b4:31:93:b8:c1:a7:f0:4a:92:29:a0:e6:80:c1:3c:12:3b:
         a5:22:f8:af:27:93:45:b3:2a:58:41:a9:04:91:6f:b2:d2:bf:
         cf:53:06:06:35:10:6e:6b:2c:26:fc:99:79:ff:58:8d:e3:c3:
         aa:c9:b2:a5:3d:1e:fc:09:dc:ce:0c:bd:86:34:89:d8:ae:42:
         02:24:e9:af:5f:9a:55:3e:e1:a6:50:a4:25:41:c8:e2:63:16:
         6b:f4:df:32:3f:54:34:17:14:78:6c:a7:31:b5:15:69:7b:0f:
         81:ce:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:55 2026 by rpki-client