Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33372e302f32342d3234203d3e203338353030.roa
File:                     3130332e3234342e33372e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          ElZBOFkHVSZN7e2Yzgm2ricclS9q/MxIyO3VfpvoDuw=
Subject key identifier:   F6:30:63:7A:56:9F:7A:9B:3B:64:25:38:A4:8C:6E:C7:61:FC:C5:C0
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       5967904DAA18454E2C36E525F171AD69206F2BF5
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33372e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:55 +0000
ROA not before:           Sun 03 May 2026 02:54:55 +0000
ROA not after:            Sun 02 May 2027 02:59:55 +0000
asID:                     38500
IP address blocks:        103.244.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:67:90:4d:aa:18:45:4e:2c:36:e5:25:f1:71:ad:69:20:6f:2b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:55 2026 GMT
            Not After : May  2 02:59:55 2027 GMT
        Subject: CN=F630637A569F7A9B3B642538A48C6EC761FCC5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:dd:1f:d3:d6:ef:b4:5a:69:da:5f:63:80:
                    60:fc:fc:41:09:a2:1d:89:38:1d:71:35:8c:d6:60:
                    68:ed:6a:18:23:34:5d:65:56:81:de:e1:6f:77:a4:
                    6b:1e:a6:00:cc:8b:dc:cf:07:58:b7:fe:ea:94:5d:
                    7b:fa:91:74:aa:13:5e:d3:2e:b5:c2:40:47:57:d5:
                    b6:bf:99:08:c6:fa:1d:2e:97:14:7a:0b:10:b7:15:
                    bd:36:9f:9e:07:18:3b:3d:7f:e7:2a:3a:b5:96:ae:
                    6f:8d:b7:6d:54:3e:43:2e:01:48:a1:33:cf:d9:da:
                    26:62:8b:53:04:4d:be:31:e8:3b:4e:f0:59:ab:af:
                    f6:df:ce:92:d2:1f:51:3d:f8:a1:6d:b0:a1:0e:93:
                    9f:10:71:87:65:da:96:ba:3f:91:61:9e:e5:a5:d9:
                    de:38:bc:ef:78:5e:a1:47:42:18:10:25:fe:83:2d:
                    ca:da:05:f5:01:59:02:d3:c2:46:b8:d2:26:cc:0c:
                    04:86:b7:8c:95:0f:f7:56:19:11:30:00:71:fc:e1:
                    e4:31:0f:79:cc:de:4b:0c:b0:78:e9:82:64:28:f8:
                    9d:0c:db:81:de:fc:61:9c:40:f4:c0:0c:d6:3f:9d:
                    f7:e9:89:ea:c1:a3:a5:22:5d:04:a4:8d:7d:71:ca:
                    c8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:30:63:7A:56:9F:7A:9B:3B:64:25:38:A4:8C:6E:C7:61:FC:C5:C0
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3130332e3234342e33372e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:b4:0e:75:05:40:36:1b:68:5e:a7:a4:80:e8:b7:56:fe:
         06:20:dd:e2:70:62:fc:79:06:cd:f3:da:30:2a:4f:b8:ec:c9:
         2b:95:70:d6:3b:c5:c1:e8:13:6f:b5:44:da:17:7c:2e:52:44:
         59:82:b9:6a:ae:8e:ca:0c:85:6f:2d:05:ba:5d:78:8d:18:2b:
         b0:f0:07:e6:7a:36:db:ae:73:44:7f:d6:6a:86:41:e1:a4:69:
         b1:59:1f:e7:7b:70:be:97:64:4d:9a:88:ee:1a:b8:2d:0d:27:
         49:22:a0:f4:9d:77:95:a4:6c:6f:cd:77:05:a1:b0:ff:8e:cc:
         b1:6f:20:9d:64:25:9a:a1:53:6a:4f:54:d2:de:1a:9c:b1:3c:
         1c:64:73:b8:26:49:32:b3:1f:d4:cd:1b:7b:5e:5e:48:c4:e2:
         37:46:bd:2a:70:1d:e6:79:4f:69:b1:2f:1c:7a:9d:77:bc:70:
         fb:4f:7f:1e:63:fd:02:0d:01:51:60:1f:6e:e7:a4:d5:7e:7c:
         83:87:d1:b5:58:c8:3e:77:cc:9e:18:07:43:72:d1:21:54:f2:
         b0:c0:10:49:61:59:e1:fb:70:40:75:52:41:72:2f:87:8c:32:
         f7:9e:a9:b6:2f:64:76:e7:55:95:1e:a0:49:51:50:d4:e3:63:
         ea:f8:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:36 2026 by rpki-client