Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
File:                     3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa (raw, json)
Hash identifier:          i56VPm8geIM7DmKA6wVbD62/QX+ViWuBIOqGaxDkwxE=
Subject key identifier:   92:72:FA:48:B7:5F:E0:B7:FE:97:DB:3B:39:4B:CF:BA:9A:D2:06:AA
Certificate issuer:       /CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
Certificate serial:       6FF58FBFAFD860004E474096C7510179201B912A
Authority key identifier: 3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa
Signing time:             Sun 03 May 2026 03:07:09 +0000
ROA not before:           Sun 03 May 2026 03:02:09 +0000
ROA not after:            Sun 02 May 2027 03:07:09 +0000
asID:                     150537
IP address blocks:        103.81.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl
                          rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f5:8f:bf:af:d8:60:00:4e:47:40:96:c7:51:01:79:20:1b:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B740E02ADF50A090229B5DFEE5D48777D442C83
        Validity
            Not Before: May  3 03:02:09 2026 GMT
            Not After : May  2 03:07:09 2027 GMT
        Subject: CN=9272FA48B75FE0B7FE97DB3B394BCFBA9AD206AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:2a:d2:54:c3:89:74:05:d5:aa:c4:b7:c3:
                    0a:49:dc:91:f0:e9:31:47:20:f3:15:b3:04:5c:5d:
                    46:cc:85:37:dc:4f:0c:5a:bc:c1:9a:a6:9b:04:17:
                    4c:06:1e:44:32:35:42:f5:2b:83:95:06:46:87:37:
                    5b:a9:f6:3d:f1:b2:a9:66:fa:a8:98:ac:4f:47:a9:
                    ab:be:8a:62:75:54:2d:a4:78:72:d5:c1:b4:d7:a4:
                    f1:98:f7:e4:fd:07:94:d3:56:11:fe:39:81:fd:b8:
                    f1:9c:07:ff:6a:81:8c:73:40:ad:aa:d4:46:da:06:
                    9e:e2:6e:b5:91:fa:f4:63:10:57:ce:f3:ab:f7:2d:
                    5a:16:52:24:b2:f0:ab:c4:b4:c9:44:21:a3:d5:e2:
                    ea:3b:b9:8a:54:bb:83:22:86:8b:de:ea:5e:b7:df:
                    8a:9f:fd:47:49:d2:c1:57:b5:d0:9d:df:7f:5b:74:
                    f0:88:9c:85:4f:fc:b3:30:c3:1d:f9:3b:cc:49:20:
                    40:5c:b8:37:a3:b8:3a:df:6d:1a:bd:0e:39:29:ef:
                    ad:ba:4a:6d:e8:ff:62:b5:7f:68:82:72:53:90:80:
                    5d:02:33:8e:e2:fe:57:5d:87:f2:dd:76:72:48:d6:
                    1a:fb:86:18:f8:5f:d2:c2:f8:39:8a:c2:e2:2e:b5:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:72:FA:48:B7:5F:E0:B7:FE:97:DB:3B:39:4B:CF:BA:9A:D2:06:AA
            X509v3 Authority Key Identifier:
                keyid:3B:74:0E:02:AD:F5:0A:09:02:29:B5:DF:EE:5D:48:77:7D:44:2C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3B740E02ADF50A090229B5DFEE5D48777D442C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3B740E02ADF50A090229B5DFEE5D48777D442C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc0d40bc-93c8-415b-b6a8-aef088d7f4d4/0/3130332e38312e3235332e302f32342d3234203d3e20313530353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:89:c7:f1:53:5f:bd:ad:9b:d1:ef:53:d8:bc:40:44:c9:
         2e:ac:3c:f4:76:80:1a:e4:e4:31:28:73:2e:2d:e1:37:27:00:
         bb:40:0f:14:e7:93:b1:de:77:e0:25:fe:c6:75:24:c6:06:46:
         80:de:50:f4:cb:d2:b8:9d:b5:53:b0:41:ef:b1:e0:cc:f1:07:
         30:8a:fc:9e:f1:4a:0f:52:03:5d:85:32:24:bc:21:08:ed:51:
         87:e4:bd:1c:88:64:7c:59:ac:d0:92:22:ba:90:75:2c:24:70:
         03:6d:7a:26:16:9d:eb:67:eb:8a:5d:91:98:21:e0:34:e6:4e:
         ad:8b:b1:a8:20:28:92:e9:f6:f7:dc:63:a5:4b:5f:00:2f:8a:
         45:b3:f0:cf:80:68:22:91:b0:29:15:8d:f8:86:96:74:83:2a:
         fd:03:60:e6:59:12:62:4b:7d:73:aa:c0:a8:43:61:cd:0b:b3:
         cb:af:70:35:8b:af:15:7b:8b:d7:24:9a:07:09:ca:1a:98:80:
         dd:42:58:8f:8b:7a:bf:02:1c:e9:ca:b7:a8:1c:47:58:e9:e8:
         a6:0f:a1:3c:85:33:52:4c:cd:54:71:97:4b:84:a9:18:fa:14:
         d8:02:25:ef:01:b1:23:a0:ee:4e:3c:a8:e5:c6:cc:b3:3a:04:
         24:c3:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:21 2026 by rpki-client