Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
File:                     3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa (raw, json)
Hash identifier:          snuRd2FLKphVUDvlFnX09PH6IwbbuDmn+rzInTKTCXg=
Subject key identifier:   D9:38:C4:71:FF:A7:2F:5B:A9:CF:55:8D:94:7B:3C:61:6F:2C:CA:92
Certificate issuer:       /CN=E037136E2AAC9F6693BBACBC3C65801649522C3C
Certificate serial:       747780BD520B1FA1BF2EB248C4D76785F1450327
Authority key identifier: E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa
Signing time:             Sun 03 May 2026 02:34:41 +0000
ROA not before:           Sun 03 May 2026 02:29:41 +0000
ROA not after:            Sun 02 May 2027 02:34:41 +0000
asID:                     150500
IP address blocks:        103.131.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl
                          rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:77:80:bd:52:0b:1f:a1:bf:2e:b2:48:c4:d7:67:85:f1:45:03:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E037136E2AAC9F6693BBACBC3C65801649522C3C
        Validity
            Not Before: May  3 02:29:41 2026 GMT
            Not After : May  2 02:34:41 2027 GMT
        Subject: CN=D938C471FFA72F5BA9CF558D947B3C616F2CCA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:6a:07:b8:50:ff:84:a7:09:e9:94:ba:8b:
                    17:f1:2b:e6:be:a7:4b:0c:f6:15:f1:62:45:b3:78:
                    83:c8:a4:54:27:04:9a:d2:22:8b:cc:10:af:27:fa:
                    6d:4b:85:c9:a8:4f:a7:bd:90:e2:3e:38:a0:18:56:
                    ad:6c:17:0e:63:fd:6d:1a:7d:80:6b:fe:13:84:9e:
                    d1:ee:ff:2b:e0:35:48:6f:17:35:9c:e0:e2:3a:23:
                    dc:d7:7a:c3:62:87:ed:3a:98:cb:a7:17:01:94:0e:
                    76:bc:84:b7:7b:9d:95:1f:a1:b7:47:a7:00:7e:d1:
                    19:17:69:21:18:f4:8a:05:58:78:18:b2:da:16:7e:
                    2a:ca:a5:6e:43:ac:bc:f9:4b:d9:ff:05:dd:dc:3f:
                    3e:fb:44:77:98:9f:60:55:c0:99:f4:fa:02:33:3e:
                    1c:df:ea:ea:d0:e2:f9:46:ea:4c:52:72:74:85:f9:
                    55:9c:f1:e6:71:cb:52:6a:f1:07:73:c5:58:0b:91:
                    09:6f:ea:17:a6:49:36:a5:9c:70:27:49:fb:e9:ca:
                    ef:90:2c:6b:5c:13:4f:44:85:3b:54:a5:c8:df:92:
                    91:82:9f:79:cf:80:44:bf:41:e5:e2:4f:0a:48:b7:
                    c9:4f:95:b3:9b:96:0b:60:bc:12:06:ab:e2:a7:cb:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:38:C4:71:FF:A7:2F:5B:A9:CF:55:8D:94:7B:3C:61:6F:2C:CA:92
            X509v3 Authority Key Identifier:
                keyid:E0:37:13:6E:2A:AC:9F:66:93:BB:AC:BC:3C:65:80:16:49:52:2C:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/E037136E2AAC9F6693BBACBC3C65801649522C3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E037136E2AAC9F6693BBACBC3C65801649522C3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57cd1d2d-7364-481b-978e-0a854a9cff4f/0/3130332e3133312e32382e302f32342d3234203d3e20313530353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:6d:3c:2a:6d:dd:9c:b8:f2:75:9a:b4:d5:ff:2f:d1:5b:fb:
         64:ec:39:d4:2e:d2:c6:17:69:3f:a6:ed:e3:3d:4e:a7:35:5c:
         2f:08:96:50:5c:43:45:c9:db:5c:ea:e9:2e:86:d8:cc:e9:85:
         4a:0b:c9:98:0d:96:f5:9b:93:ee:2e:09:1a:53:cf:12:a7:b9:
         6d:73:90:80:dd:02:24:95:e4:85:5e:25:e9:9b:17:e6:56:46:
         4d:80:8b:71:df:c1:2b:7e:f8:95:7e:83:f1:73:1f:82:b8:bc:
         15:db:da:30:3c:05:7a:dc:b2:58:86:5c:03:86:22:55:bf:7c:
         5b:6e:bb:ae:d6:68:b9:ac:bd:67:d7:31:ff:99:9b:73:db:6e:
         7c:a4:56:48:54:19:2a:8a:00:7a:c1:fe:8b:8c:37:81:fa:6f:
         a1:50:75:65:26:64:6e:49:e9:f1:c6:6d:9e:21:1e:0b:9e:43:
         8d:70:7f:2b:45:d0:b5:e7:50:94:3b:e4:f7:77:cd:de:18:5b:
         98:49:95:b1:14:93:6e:9c:d2:15:bf:d3:33:68:00:6d:64:b4:
         aa:bd:ca:72:5b:1c:a8:aa:d1:d6:47:f9:f9:71:a4:07:4b:a5:
         14:dd:4e:fe:e3:20:61:f7:c8:a3:59:14:ac:f5:50:23:62:ef:
         4a:92:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:22 2026 by rpki-client