Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
File:                     3130332e31312e33312e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          mpB0+Qj8N/pZto9JPpZqRQNmF/ncViqvQen3A3Mjsf4=
Subject key identifier:   95:77:47:A8:88:F7:7E:36:6B:50:B4:CF:FF:E2:FF:C9:46:9A:8C:62
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       3D6EBE7A23FA83788D06BEB5269D66BBC16442BB
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
Signing time:             Sun 03 May 2026 02:36:34 +0000
ROA not before:           Sun 03 May 2026 02:31:34 +0000
ROA not after:            Sun 02 May 2027 02:36:34 +0000
asID:                     58552
IP address blocks:        103.11.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6e:be:7a:23:fa:83:78:8d:06:be:b5:26:9d:66:bb:c1:64:42:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:34 2026 GMT
            Not After : May  2 02:36:34 2027 GMT
        Subject: CN=957747A888F77E366B50B4CFFFE2FFC9469A8C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:50:e8:e0:c6:f3:9d:a5:15:51:95:05:30:21:
                    45:6f:39:05:2a:32:4f:1c:37:ab:05:c3:9e:0b:c1:
                    d4:f7:8a:05:de:f4:37:a0:46:0c:85:52:2b:da:e7:
                    8b:38:0f:e4:c7:b9:9e:12:0b:de:2c:6f:e2:d3:4c:
                    be:0d:66:7e:c6:30:00:20:87:01:f7:ad:32:33:ec:
                    25:d7:f3:41:a6:4b:7b:09:ee:4c:c6:e6:84:0d:05:
                    06:8c:62:9e:0e:1f:fb:a7:65:4b:3d:ae:23:c3:1f:
                    b9:4d:d8:01:5e:2c:40:e0:98:96:61:ba:b7:0e:92:
                    7f:71:82:2c:a4:a8:fd:8d:3c:79:ae:c9:b8:58:63:
                    80:cd:60:3c:c7:f1:32:17:6f:43:1c:e1:9b:1e:b6:
                    a9:dd:88:c1:37:5d:6f:15:2c:16:8b:d7:b5:08:b0:
                    6c:df:b4:ca:4b:9b:6b:b8:c2:54:ae:3b:f7:8a:01:
                    17:5e:6c:d3:d8:ba:ff:7d:01:0c:6f:fd:a9:87:ff:
                    95:31:66:fb:f6:5d:f2:a4:d6:91:2d:2c:0f:b0:66:
                    3e:d4:5e:f5:58:fc:72:ad:eb:40:3c:fc:b3:4c:8f:
                    78:fa:6e:46:ac:ab:2b:27:9d:32:35:e1:3d:09:a9:
                    ee:32:e5:95:34:0f:fb:e2:c0:10:d5:c2:e4:0b:da:
                    8b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:47:A8:88:F7:7E:36:6B:50:B4:CF:FF:E2:FF:C9:46:9A:8C:62
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:00:1a:0f:46:02:f8:89:a2:c5:88:35:bd:e2:cf:f6:27:6a:
         20:97:bc:b3:c0:e4:82:b9:d3:df:75:4d:cf:fb:0f:34:20:fe:
         52:39:55:5a:d1:b4:63:d9:25:b7:8c:23:5f:b9:e6:89:f8:dd:
         0d:75:aa:dc:15:e7:7a:14:34:70:07:43:1f:51:60:77:3d:93:
         f3:e8:9c:62:d4:8c:54:ad:fe:99:65:4c:c1:7f:5f:d0:fd:6d:
         74:d8:11:66:ed:23:c7:e7:0f:02:69:95:0e:6e:93:e4:df:b4:
         10:58:cc:24:25:c9:80:16:b2:b5:a5:04:f6:0b:41:16:7f:6c:
         3d:5d:17:64:9c:13:f9:d2:ca:ff:8e:fd:d0:78:4d:94:e0:b8:
         51:12:69:f5:ca:ac:8b:fa:a2:48:b6:1e:78:e6:98:72:7e:83:
         db:31:1e:8f:22:8a:a3:c9:a7:a3:a0:37:5c:56:f5:fd:e2:b8:
         cb:19:ad:e1:52:2c:db:c7:63:72:1f:dd:e5:c3:60:7f:8f:14:
         61:81:55:07:81:be:b4:fc:68:77:12:fa:c1:6a:c1:5c:2f:66:
         19:fb:5d:64:59:f9:4e:59:a2:3f:0b:55:c6:94:f8:f6:4a:5d:
         4e:07:ce:d4:e9:2f:61:4d:5f:8f:72:de:7e:14:4e:51:66:84:
         bf:ff:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:18 2026 by rpki-client