Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa
File:                     3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (raw, json)
Hash identifier:          8GvfzVduMFTtGlADd061A8wAjIa0JhN238PnLdk7UyA=
Subject key identifier:   8E:63:7E:E7:49:40:EE:4D:C3:63:08:17:CD:0F:BA:53:A7:7C:5F:C1
Certificate issuer:       /CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB
Certificate serial:       3187417126B548A0C30B5ED5D912505FB7391DEA
Authority key identifier: B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa
Signing time:             Sun 03 May 2026 03:03:06 +0000
ROA not before:           Sun 03 May 2026 02:58:06 +0000
ROA not after:            Sun 02 May 2027 03:03:06 +0000
asID:                     150540
IP address blocks:        103.83.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl
                          rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:87:41:71:26:b5:48:a0:c3:0b:5e:d5:d9:12:50:5f:b7:39:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11D52637DCCB67F8E99DAD80D82C5E273B802BB
        Validity
            Not Before: May  3 02:58:06 2026 GMT
            Not After : May  2 03:03:06 2027 GMT
        Subject: CN=8E637EE74940EE4DC3630817CD0FBA53A77C5FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:84:b9:0b:cb:50:f2:2d:5c:d3:42:83:1c:
                    5a:ef:c5:e4:0e:37:9c:93:aa:85:b3:09:46:30:56:
                    4e:04:e9:19:a2:42:b9:78:93:ed:1f:67:88:19:de:
                    9b:1a:2b:1d:d0:99:b3:10:3b:50:b9:a2:00:53:f6:
                    85:fb:88:3a:13:d9:7c:07:e3:0b:84:1e:62:40:96:
                    15:84:5c:f0:29:ce:fe:ac:a7:7b:df:70:4b:f7:fd:
                    e5:bb:4d:d6:e9:f8:32:65:cf:ba:51:d6:eb:9e:81:
                    bf:50:61:d3:dc:70:aa:44:31:ee:7a:d2:fa:13:9f:
                    d2:a1:83:7f:1c:1a:42:61:c1:4c:84:6c:40:cd:d9:
                    76:31:0e:ad:0b:39:9f:99:33:f6:cd:94:25:7c:5e:
                    92:6c:19:cb:db:f1:2d:7a:28:9a:f5:70:01:d3:61:
                    c9:f0:43:11:5d:d0:4e:6e:90:6d:c7:a1:ed:93:bd:
                    a4:2d:8f:1b:df:2b:30:27:d6:05:2d:15:6f:c6:13:
                    a6:3e:81:de:71:cf:b6:3c:3e:a9:35:9b:2c:31:c6:
                    69:65:cf:61:3b:11:b9:06:65:7c:fc:d6:36:d3:99:
                    fe:59:dd:eb:08:44:8a:d6:b9:4a:c6:f5:ac:27:ec:
                    75:3e:1a:a7:3c:3b:8a:68:eb:dc:de:6e:fd:0f:d3:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:63:7E:E7:49:40:EE:4D:C3:63:08:17:CD:0F:BA:53:A7:7C:5F:C1
            X509v3 Authority Key Identifier:
                keyid:B1:1D:52:63:7D:CC:B6:7F:8E:99:DA:D8:0D:82:C5:E2:73:B8:02:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B11D52637DCCB67F8E99DAD80D82C5E273B802BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d5:bd:4d:b2:9c:da:e3:42:6f:67:3f:f0:a1:d4:76:7f:d2:
         b3:4d:e7:44:a2:90:18:a6:68:e3:ba:3e:e8:b9:38:99:d4:92:
         5b:a8:da:f4:6b:0d:68:64:bf:23:e1:e4:bf:40:33:85:6d:da:
         17:0b:af:db:67:e6:1a:25:b0:19:d9:af:97:af:3b:26:d5:35:
         e2:3c:47:ba:34:b6:44:88:1b:be:17:b9:ef:83:c6:07:31:d8:
         d1:65:18:ff:9b:ee:60:30:17:98:00:70:b4:45:35:41:45:7d:
         ae:ac:8c:11:ad:21:5e:86:8a:cc:4f:f2:06:3f:54:1d:89:04:
         1b:61:40:0f:e9:cd:0e:ce:4f:3d:1f:4c:b8:9e:07:6f:7d:e9:
         c9:2a:64:63:fd:3b:9b:5f:d7:75:c8:a6:05:b3:dd:db:fa:7d:
         04:b0:e6:62:b1:87:34:2a:18:9d:fa:cf:a9:c6:29:36:98:26:
         e9:77:5a:b1:c5:f9:d2:c0:8e:1d:6f:65:fb:75:0b:f5:97:b1:
         0f:23:2d:2b:c5:9e:a4:99:88:5e:51:4c:c4:12:62:3a:7b:49:
         06:d6:11:ae:d6:6e:ee:74:b4:0d:60:02:c1:fa:97:41:b6:77:
         36:79:ad:82:e5:b8:45:70:ca:97:9d:f7:cf:0a:43:85:f1:97:
         0e:44:a7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:57 2026 by rpki-client