Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa
File:                     3130332e33372e3232342e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier:          5iKsngZjg/l5di0MQ+AlFhBsTwnY2MGxKfhU9yL6oXQ=
Subject key identifier:   62:44:DC:71:00:AA:44:98:74:C8:02:BC:2D:74:59:61:45:78:26:90
Certificate issuer:       /CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
Certificate serial:       632A5DC2F98CFDBF35A4E8FD01C1702610EA52ED
Authority key identifier: 12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa
Signing time:             Sun 03 May 2026 02:46:00 +0000
ROA not before:           Sun 03 May 2026 02:41:00 +0000
ROA not after:            Sun 02 May 2027 02:46:00 +0000
asID:                     56241
IP address blocks:        103.37.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl
                          rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 07:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2a:5d:c2:f9:8c:fd:bf:35:a4:e8:fd:01:c1:70:26:10:ea:52:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D
        Validity
            Not Before: May  3 02:41:00 2026 GMT
            Not After : May  2 02:46:00 2027 GMT
        Subject: CN=6244DC7100AA449874C802BC2D74596145782690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:fc:1a:23:d7:69:87:97:62:0a:ce:d5:68:
                    da:53:2a:67:95:72:29:8c:1d:c2:6a:ee:c8:21:91:
                    2e:c4:4f:c3:8f:46:ed:5f:ba:6c:7f:ba:f9:a6:b1:
                    58:86:3e:1d:7e:d9:cd:60:cd:f3:57:3c:a5:bf:b8:
                    41:77:52:2b:92:82:83:d2:2f:b2:ff:a5:c1:06:9e:
                    cb:d5:d0:48:70:59:9f:99:a0:04:d2:55:33:9b:76:
                    81:c7:19:70:64:df:25:35:eb:c6:91:57:02:73:d2:
                    1d:0b:77:fb:61:e1:2a:0f:ac:b5:c8:d3:3d:a8:7a:
                    fb:c1:a9:35:0c:90:30:fa:c7:83:df:88:a7:b4:f2:
                    74:dd:d8:75:75:3b:ec:9a:39:09:bb:15:bc:eb:c1:
                    5a:f2:37:4e:c2:fe:0d:16:f1:71:23:b7:ca:38:24:
                    43:19:f9:da:8e:0b:3d:e5:29:29:30:6b:7e:7d:8b:
                    62:0e:bd:ab:10:e0:4e:4d:5a:15:4e:ee:e7:80:d2:
                    9a:14:85:be:bf:fa:0c:d1:27:72:c3:a6:90:5d:47:
                    cc:0e:7b:09:b2:5b:2f:1f:74:c8:bb:b5:dd:82:79:
                    97:f9:05:c0:ad:21:0b:b8:b1:9b:76:6f:2f:c9:46:
                    d8:05:0c:db:5e:60:84:56:55:84:0d:ca:4b:b2:d5:
                    5b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:44:DC:71:00:AA:44:98:74:C8:02:BC:2D:74:59:61:45:78:26:90
            X509v3 Authority Key Identifier:
                keyid:12:BD:5F:3F:6C:5A:B1:A9:F4:E3:12:A7:DA:FA:AC:BC:22:22:94:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/12BD5F3F6C5AB1A9F4E312A7DAFAACBC2222946D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232342e302f32342d3234203d3e203536323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:29:93:68:ef:6a:a1:55:40:9c:fc:74:0f:1e:e6:d5:be:7c:
         9d:bf:ab:c8:5f:3b:cd:e4:72:52:f7:dc:9f:a4:e1:2f:02:eb:
         c8:45:8f:49:1a:5f:20:4c:91:34:e2:c1:52:57:0f:d2:35:e9:
         e6:c9:a3:87:f7:f5:d9:e0:19:9b:dd:52:3c:9c:c2:3b:85:54:
         51:9b:21:e1:3e:ef:8b:8b:6b:b8:25:54:3d:98:4e:24:79:00:
         f8:0f:79:97:d0:b2:8f:88:f9:a8:24:49:71:ab:33:9d:d5:b8:
         fe:5f:fa:7e:fa:28:a0:70:60:68:3a:cf:23:e8:dc:fb:77:3e:
         be:83:4b:64:a0:fa:c2:2d:f0:5f:86:38:19:9d:e0:93:7f:2b:
         72:c1:78:f8:3b:f3:c2:dd:81:8b:1f:2d:c5:9f:e6:9d:32:d0:
         1e:9d:13:0c:85:01:34:4d:f5:1b:33:b8:da:10:3c:da:dd:05:
         2e:a1:4b:1f:87:4e:a5:24:df:b8:9e:43:09:1d:7a:08:99:96:
         08:c6:d1:2a:5a:5a:2a:b3:38:bf:45:47:90:c9:cf:05:28:3a:
         c2:d0:af:76:a6:a3:92:43:62:fd:cc:3d:61:29:0d:13:01:d2:
         5c:6e:75:c7:05:7e:ff:6c:6b:73:07:0c:82:6c:57:58:f6:db:
         14:7c:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:11 2026 by rpki-client