Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa
File:                     3130332e332e3233322e302f32342d3234203d3e20313531353238.roa (raw, json)
Hash identifier:          Im3o8YUekrl4UUhItVyydZhi8GU6lVLXxpRk9EL/+Ow=
Subject key identifier:   51:B5:44:00:CD:17:79:74:C3:BD:5A:CD:7C:59:1F:BF:79:A8:4D:72
Certificate issuer:       /CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4
Certificate serial:       699D48C4854EF0FA4F825BCE62AB39939CB8ADDD
Authority key identifier: 37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa
Signing time:             Sun 03 May 2026 02:35:10 +0000
ROA not before:           Sun 03 May 2026 02:30:10 +0000
ROA not after:            Sun 02 May 2027 02:35:10 +0000
asID:                     151528
IP address blocks:        103.3.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl
                          rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9d:48:c4:85:4e:f0:fa:4f:82:5b:ce:62:ab:39:93:9c:b8:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37BB70919604AC31A2423FE2DD1F9B79CB59F7F4
        Validity
            Not Before: May  3 02:30:10 2026 GMT
            Not After : May  2 02:35:10 2027 GMT
        Subject: CN=51B54400CD177974C3BD5ACD7C591FBF79A84D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:43:d4:00:50:ab:70:42:12:dd:5e:6b:e0:
                    61:d4:3f:d8:26:fa:80:72:0b:0a:f9:d0:2c:b2:b0:
                    59:cf:7d:1f:73:eb:7f:95:85:3d:c3:a8:d9:77:40:
                    97:89:e8:56:4e:fc:1e:4f:44:9c:85:a1:1b:b2:06:
                    76:16:48:dd:59:e0:e5:8d:20:bc:8a:27:f9:49:a9:
                    55:eb:a3:ef:25:e6:0b:15:38:82:82:4f:05:1a:cb:
                    54:d1:b1:1e:eb:d7:64:fb:23:22:f4:9d:f9:6c:88:
                    ef:2f:ed:c9:25:81:dc:3c:d8:59:0e:c7:8c:45:0c:
                    0d:59:b5:f1:98:31:ee:d2:4c:22:26:77:aa:15:33:
                    98:80:3c:aa:8e:e1:67:80:a3:09:6d:d5:d9:10:6c:
                    69:57:32:74:60:0f:97:60:af:f6:45:bd:50:64:08:
                    db:34:80:c5:69:ba:cf:13:7c:77:75:8b:5e:71:76:
                    1d:1a:0a:07:a4:b1:66:64:e0:64:80:6c:b9:0d:99:
                    09:9a:ea:13:c1:58:50:61:8c:67:0a:db:b4:bf:78:
                    45:c2:11:a7:7c:34:d7:02:c9:36:d9:13:b3:8d:16:
                    aa:ad:0c:96:2b:fc:2c:2c:9a:e7:fe:f5:86:13:60:
                    9c:0b:63:b3:08:61:8a:a4:90:01:75:9a:29:c2:d2:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B5:44:00:CD:17:79:74:C3:BD:5A:CD:7C:59:1F:BF:79:A8:4D:72
            X509v3 Authority Key Identifier:
                keyid:37:BB:70:91:96:04:AC:31:A2:42:3F:E2:DD:1F:9B:79:CB:59:F7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37BB70919604AC31A2423FE2DD1F9B79CB59F7F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59e7ca39-8dbc-4282-a0d3-848023726862/0/3130332e332e3233322e302f32342d3234203d3e20313531353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:58:3f:ee:3a:69:37:d6:02:7d:0f:df:05:ef:4e:2e:a7:
         e0:b6:b0:e4:ed:fa:d2:1d:dd:be:fb:e1:02:8e:be:4c:7a:e5:
         aa:93:dd:cc:57:4b:18:6a:98:0b:63:4a:62:24:65:2d:fe:a3:
         c3:82:bd:57:21:93:97:c9:01:5b:70:68:06:2b:f3:04:70:b0:
         23:64:f7:b3:f4:57:f6:c0:c7:a1:39:14:51:75:af:2b:66:c9:
         02:87:14:dd:f5:f7:20:01:91:71:5c:bb:c1:f3:d6:b1:b2:a7:
         40:9a:3c:33:9e:bc:d5:24:a8:8a:f6:d8:1d:01:1b:33:dc:b5:
         41:84:d0:42:6a:bf:a5:0b:41:ba:a2:51:b5:4b:85:54:4c:70:
         80:d5:02:e0:83:8b:a9:96:3e:0a:91:96:ec:9c:c7:86:02:f3:
         24:97:81:9b:ec:f8:2a:09:dc:05:6d:b1:31:94:57:58:29:40:
         8f:ac:dd:70:83:43:be:e5:7a:52:02:50:97:57:7b:7b:32:eb:
         93:b4:f4:93:dc:7f:fa:55:e7:4b:9e:41:0a:4c:ef:87:02:bc:
         05:38:d7:13:fd:bb:cb:7a:d3:a1:5a:ee:5e:b6:f5:ca:67:db:
         dc:d7:c9:7e:fe:dd:36:8a:1d:0a:08:2f:f1:e0:2d:dd:53:72:
         0b:78:2c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:57 2026 by rpki-client