Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa
File:                     3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa (raw, json)
Hash identifier:          4ReHII19sMtLUmN25MV5QEEELuhP3ebBL+yWF3/glT8=
Subject key identifier:   7F:A9:CE:6F:8F:E8:D4:D7:93:C0:68:33:F6:05:C9:AC:E1:C7:E6:E7
Certificate issuer:       /CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
Certificate serial:       628F134BD92437CA705C7EDFD28E7B51EB8E37AD
Authority key identifier: 37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa
Signing time:             Sun 03 May 2026 02:28:36 +0000
ROA not before:           Sun 03 May 2026 02:23:36 +0000
ROA not after:            Sun 02 May 2027 02:28:36 +0000
asID:                     134623
IP address blocks:        103.197.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl
                          rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8f:13:4b:d9:24:37:ca:70:5c:7e:df:d2:8e:7b:51:eb:8e:37:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37CDF1E94BDAEC139CC5236CAC31B5BCC9698801
        Validity
            Not Before: May  3 02:23:36 2026 GMT
            Not After : May  2 02:28:36 2027 GMT
        Subject: CN=7FA9CE6F8FE8D4D793C06833F605C9ACE1C7E6E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:b3:0d:c8:63:a2:6b:a8:a4:d3:42:68:ce:
                    b5:75:6a:53:a5:ee:bc:8c:5a:31:7e:df:4d:57:1b:
                    e9:8e:7b:14:04:ba:ea:95:84:0d:1c:36:cb:95:2d:
                    89:52:3f:32:3e:4e:32:29:30:ab:93:b0:9f:1e:4a:
                    35:0c:bb:0d:92:9c:39:f9:99:11:5b:3e:39:de:8f:
                    17:cf:bc:2e:2d:71:59:8f:19:db:ba:d0:bb:3e:52:
                    c7:8d:9e:3c:ba:cc:0c:55:5d:99:ef:bd:71:49:7c:
                    8c:4b:e3:e7:a2:2e:33:9a:c2:85:df:03:d7:37:bf:
                    cb:88:9e:69:14:7e:e6:c7:5a:f6:33:ff:d2:af:51:
                    d4:d1:c8:bc:ef:0d:47:c3:94:c8:9c:5e:17:9e:7d:
                    c3:8e:4a:39:c1:e7:c5:15:74:cc:ed:14:5f:0c:f5:
                    c2:53:80:85:06:21:29:81:07:fb:96:6b:f3:40:66:
                    0b:50:4e:8d:27:c1:2d:12:9b:20:e8:b6:f4:32:02:
                    bf:57:b0:58:17:d2:1c:e6:39:c3:5c:79:a7:d5:80:
                    b1:06:0d:84:6e:13:45:40:8e:74:d5:53:ea:7a:f4:
                    bd:16:05:71:44:f5:77:24:19:c4:3a:ff:53:66:fa:
                    74:09:43:b7:70:eb:d3:ad:f3:00:31:61:e0:f1:33:
                    cf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A9:CE:6F:8F:E8:D4:D7:93:C0:68:33:F6:05:C9:AC:E1:C7:E6:E7
            X509v3 Authority Key Identifier:
                keyid:37:CD:F1:E9:4B:DA:EC:13:9C:C5:23:6C:AC:31:B5:BC:C9:69:88:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37CDF1E94BDAEC139CC5236CAC31B5BCC9698801.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/3130332e3139372e39352e302f32342d3234203d3e20313334363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:c6:1a:10:e6:19:78:e5:96:81:d8:4d:ef:5c:86:7a:94:
         5d:54:a0:03:db:0a:82:ce:89:57:dc:44:38:c5:1f:54:33:d0:
         e5:8f:fa:14:59:d2:a7:1d:13:f1:a6:cd:47:37:93:28:fe:8e:
         b8:71:97:eb:9b:c5:9a:ca:64:f4:d9:db:db:5d:ca:97:ed:9e:
         93:45:20:4c:11:d7:30:2a:20:a9:01:65:44:83:5f:10:1c:71:
         f8:2f:43:0a:d3:9e:a7:94:b6:7f:4a:ff:a8:66:1a:30:6e:57:
         32:44:fc:f2:57:e1:41:16:76:2c:a2:0e:97:39:55:18:60:cc:
         5f:54:dd:c1:10:3b:ee:6d:64:dd:89:fe:76:a6:df:34:3c:2f:
         a0:9b:9b:cb:b5:e5:b2:3c:ce:33:78:f0:38:51:ce:27:28:2c:
         42:db:99:2f:df:fe:cc:0c:ba:82:eb:97:23:e3:fe:b6:38:f7:
         47:8f:c8:93:de:53:eb:08:21:53:da:39:f4:17:4d:46:24:fa:
         90:47:b4:7d:c7:61:9b:56:85:b8:6f:3c:24:e2:8e:f7:c7:ab:
         66:87:02:be:9c:62:1c:73:26:b7:69:e9:1d:ea:97:73:20:af:
         f2:a1:e5:9b:b9:3b:7b:2f:d2:ae:27:9b:df:43:a0:44:df:64:
         05:9e:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:56:40 2026 by rpki-client