Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa
File:                     3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (raw, json)
Hash identifier:          PHibGveE2Fh1WlKDxDPgNTVGBu2b0OOK4vUxaUOrtrQ=
Subject key identifier:   8C:26:EA:A0:28:39:3C:BE:6C:72:C7:F8:52:8D:90:C2:7F:60:D4:74
Certificate issuer:       /CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D
Certificate serial:       0311BB610DC19F3B24BEC4DDE490B28F9249ADE1
Authority key identifier: BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa
Signing time:             Sun 03 May 2026 02:59:09 +0000
ROA not before:           Sun 03 May 2026 02:54:09 +0000
ROA not after:            Sun 02 May 2027 02:59:09 +0000
asID:                     141137
IP address blocks:        103.105.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl
                          rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:11:bb:61:0d:c1:9f:3b:24:be:c4:dd:e4:90:b2:8f:92:49:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE3A637EF534EC2925122ACCE4874076CAC0F90D
        Validity
            Not Before: May  3 02:54:09 2026 GMT
            Not After : May  2 02:59:09 2027 GMT
        Subject: CN=8C26EAA028393CBE6C72C7F8528D90C27F60D474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:e8:43:b4:e6:97:86:26:61:ee:44:33:dd:
                    5f:4a:95:ff:cf:1e:f8:ae:e9:4c:47:cd:65:87:4d:
                    5e:32:78:a4:0c:f6:b9:77:60:f1:c5:cd:75:de:03:
                    8d:8d:1c:3e:8b:56:17:30:31:f7:b1:47:a4:de:14:
                    05:45:bf:a5:69:b0:3c:1b:56:88:5c:78:c7:38:e0:
                    31:d6:79:26:1c:5c:8c:6f:e1:78:77:14:4a:c1:a3:
                    3b:81:f6:9b:75:54:fd:0f:0b:f6:0e:20:f7:54:e8:
                    de:2e:cc:b4:e9:d5:c1:8e:69:c4:ef:ff:4d:60:04:
                    f8:03:1f:c6:60:54:33:65:21:e0:ef:89:d4:8d:eb:
                    f9:d4:1f:82:3d:f0:5d:f9:ee:ab:ab:de:c5:b4:5d:
                    4c:f4:e4:0a:f6:66:fc:11:d8:17:3a:3e:56:51:42:
                    35:83:95:ac:5c:ae:db:e7:a0:68:9d:cc:91:2e:e0:
                    13:04:29:58:63:a3:e1:2c:2e:3c:d9:57:94:5a:71:
                    09:b4:52:47:4b:d6:d0:2e:65:da:b1:2a:03:fa:eb:
                    cf:56:e2:85:5c:50:4d:31:4d:33:6f:c2:c4:99:c4:
                    37:f5:74:8c:4c:68:cf:90:ee:0b:95:b4:af:47:03:
                    df:2d:48:2d:e2:4c:76:b1:64:bd:fb:f8:74:f7:83:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:26:EA:A0:28:39:3C:BE:6C:72:C7:F8:52:8D:90:C2:7F:60:D4:74
            X509v3 Authority Key Identifier:
                keyid:BE:3A:63:7E:F5:34:EC:29:25:12:2A:CC:E4:87:40:76:CA:C0:F9:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/BE3A637EF534EC2925122ACCE4874076CAC0F90D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BE3A637EF534EC2925122ACCE4874076CAC0F90D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:af:6d:6b:88:5e:01:1f:83:b9:77:03:c6:6c:bb:8c:91:46:
         2e:04:7f:52:34:c6:30:b8:fc:c9:c6:38:36:07:f5:d7:48:78:
         d8:62:84:15:41:54:77:77:e1:6a:e1:17:ef:35:57:af:df:fc:
         f0:31:e0:a5:55:0d:59:f8:4d:3a:c1:fc:d1:43:53:46:a8:f2:
         97:7a:84:da:75:9b:bd:05:87:13:5a:18:50:d2:a9:61:14:89:
         b5:82:c2:64:0e:a1:07:9e:d7:69:c3:54:a1:8a:bb:59:49:6a:
         73:96:22:bb:86:da:46:9c:80:ef:5b:f8:a9:8d:4e:19:19:92:
         4d:a7:7f:d4:23:c8:ff:f2:cf:55:20:48:87:b9:4c:55:ab:ec:
         bb:fb:85:f9:4a:28:7b:1e:75:15:ed:96:a6:75:ab:cd:da:8b:
         3c:d9:9b:8f:43:f1:6f:53:1f:85:b1:ea:df:24:84:b5:89:39:
         89:61:57:f9:4e:73:bf:5f:5d:a2:7e:00:3a:c7:b8:e4:a7:b6:
         6e:b1:de:6c:e5:6b:e8:e8:75:d7:08:0f:5b:3e:6e:90:7b:3a:
         c4:4c:70:eb:6a:b6:01:00:25:cf:71:14:78:b7:fa:74:28:56:
         31:18:8a:2b:7c:4c:64:2a:b4:a4:8f:ee:62:80:7c:82:09:c9:
         ab:ba:c5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:31 2026 by rpki-client