Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa
File:                     3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa (raw, json)
Hash identifier:          1pNOuwLSFvDZKZb1JbkTYWa4bVsi9xEgXcnRAdjK3AA=
Subject key identifier:   EB:F0:A5:F0:96:C0:89:EC:20:1C:13:BF:BF:00:EB:AF:F0:74:8D:57
Certificate issuer:       /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
Certificate serial:       07318E1CEAB8FF95C11B27EE449313FE2F09B8D9
Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa
Signing time:             Sun 03 May 2026 02:28:34 +0000
ROA not before:           Sun 03 May 2026 02:23:34 +0000
ROA not after:            Sun 02 May 2027 02:28:34 +0000
asID:                     134623
IP address blocks:        103.197.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl
                          rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:31:8e:1c:ea:b8:ff:95:c1:1b:27:ee:44:93:13:fe:2f:09:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
        Validity
            Not Before: May  3 02:23:34 2026 GMT
            Not After : May  2 02:28:34 2027 GMT
        Subject: CN=EBF0A5F096C089EC201C13BFBF00EBAFF0748D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5f:c4:e0:d2:63:6c:8e:a5:a6:db:01:32:ac:
                    bd:bb:3f:cd:aa:4c:e7:72:3b:8f:52:13:36:d1:92:
                    af:8b:7d:e7:db:6d:5d:3a:52:2f:e5:b0:a4:4f:59:
                    f8:d2:18:ea:3a:df:c3:07:f6:bf:fb:35:cd:90:c5:
                    06:c0:d8:b8:0c:7e:01:63:02:84:24:c9:4b:a8:a7:
                    a1:aa:f9:e6:a5:d3:5b:20:af:67:51:5a:54:83:5e:
                    b7:73:26:0f:eb:15:61:19:02:bc:cd:32:e3:3f:37:
                    b1:d2:dd:3a:be:0a:5d:8d:76:3a:3a:d1:d0:6b:0e:
                    61:a2:56:b5:fe:56:50:10:e7:a6:08:63:b1:65:e0:
                    02:3f:93:1e:33:5c:26:bc:e1:43:28:e7:e0:2c:df:
                    94:a0:fb:e5:60:ff:f0:49:a2:b7:eb:d9:cc:75:db:
                    77:06:d8:6e:bb:f0:62:32:ee:2f:83:99:e5:c6:78:
                    39:f5:d5:80:fe:52:a8:8b:a6:79:ff:53:77:fb:36:
                    4f:fb:14:49:72:9c:72:d6:19:b6:1f:03:10:78:be:
                    b8:50:04:97:d5:7e:be:6a:4a:47:4f:8f:05:c6:b4:
                    b5:7f:2c:66:9c:08:d9:8f:00:a3:2f:d2:d3:46:64:
                    ee:9a:98:31:49:7d:e3:dd:30:6f:74:63:ce:fd:9a:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F0:A5:F0:96:C0:89:EC:20:1C:13:BF:BF:00:EB:AF:F0:74:8D:57
            X509v3 Authority Key Identifier:
                keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39332e302f32342d3234203d3e20313334363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c7:c7:9c:e1:9b:cc:c3:0f:fd:ec:df:b5:39:4c:aa:84:1b:
         1d:2e:92:ae:e5:9f:47:f7:7a:84:58:76:65:ad:0f:b5:4a:6f:
         43:bd:f7:09:86:a8:0a:19:08:86:a8:a9:84:c4:f9:da:e2:db:
         ec:21:4e:bd:48:97:5f:d4:d5:99:93:d2:aa:bc:d1:61:5c:d2:
         b1:a8:e0:9a:30:1e:30:3a:2b:7d:d7:c9:a1:b2:77:76:fa:86:
         75:58:f7:3e:1c:b0:0c:b9:2e:a0:bd:ef:b8:4a:47:97:6b:53:
         f0:67:2b:85:b0:95:71:ef:34:97:d0:e6:63:b3:82:b8:9b:a6:
         e0:79:4d:1b:a7:53:92:bb:b8:77:32:0d:a9:f4:aa:26:29:6b:
         43:2f:95:cd:13:3e:af:0d:10:33:09:0d:a6:1d:94:c7:2f:fc:
         d3:a1:44:c0:2c:5c:91:58:e9:9f:c9:1d:9f:7c:9f:97:64:40:
         8d:c0:c4:a7:f8:e3:e1:3b:78:2a:36:2e:b9:bc:61:b9:77:1f:
         d4:f1:d3:45:4e:32:14:1c:95:f1:50:6b:46:dd:ac:d6:0a:5b:
         b3:0c:8b:6a:8e:e1:0d:b6:ab:2c:21:51:24:76:ca:35:40:71:
         02:d0:60:59:f5:72:ed:e9:71:ac:e8:a8:23:c0:7a:ce:fa:81:
         92:b9:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:58 2026 by rpki-client