Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
File:                     3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier:          WTrF0cDS2UOT2PvqICS4rHLAPEa2DituaEKy6TilvQo=
Subject key identifier:   6F:47:C5:F2:A6:1C:B6:56:CB:42:48:55:C1:01:09:E0:55:5B:FA:EA
Certificate issuer:       /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
Certificate serial:       2C72BA93FCA63A60183ABB5A48E17E2AFD22F6B3
Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa
Signing time:             Sun 03 May 2026 03:09:49 +0000
ROA not before:           Sun 03 May 2026 03:04:49 +0000
ROA not after:            Sun 02 May 2027 03:09:49 +0000
asID:                     139427
IP address blocks:        103.31.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl
                          rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:72:ba:93:fc:a6:3a:60:18:3a:bb:5a:48:e1:7e:2a:fd:22:f6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
        Validity
            Not Before: May  3 03:04:49 2026 GMT
            Not After : May  2 03:09:49 2027 GMT
        Subject: CN=6F47C5F2A61CB656CB424855C10109E0555BFAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:47:d9:f4:9e:69:6f:1b:83:c7:50:9a:30:
                    a5:13:51:d0:91:ad:e4:79:60:de:88:7e:68:1e:8f:
                    6d:65:98:82:fa:a9:c4:df:c3:b1:dd:53:69:43:13:
                    ab:30:9e:26:a9:33:2c:7e:c0:33:33:24:e8:96:34:
                    bf:45:27:db:f4:c4:2c:f6:e2:21:c0:d8:74:4c:10:
                    a1:89:12:95:cf:46:f9:2f:c7:57:ed:09:9b:89:f0:
                    10:7b:82:08:9a:82:ca:72:d8:ae:fb:16:0c:be:26:
                    5d:d6:c8:dd:f6:75:33:04:a4:a4:a0:4a:4e:15:af:
                    cc:48:9e:4d:3a:94:7e:25:44:00:af:b7:30:08:d5:
                    4f:71:2f:26:8c:e1:6e:9c:69:bc:24:11:38:bd:ed:
                    a9:15:b1:d0:a6:3e:a1:3c:26:da:7c:de:ca:be:69:
                    45:07:fe:8c:39:b3:55:02:39:8d:73:1b:24:97:ec:
                    74:b8:f8:53:12:09:0f:6a:d0:df:8f:7f:2b:9b:b8:
                    3b:17:46:b0:10:72:f9:a0:02:22:a4:8b:6f:ab:16:
                    c8:62:01:f6:7f:17:33:4a:98:fc:8f:c1:90:49:a2:
                    31:17:43:dd:45:0d:e7:48:d7:3f:86:32:78:f4:d5:
                    b1:f3:af:e4:25:80:34:f3:84:9c:91:ae:84:94:b6:
                    7f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:47:C5:F2:A6:1C:B6:56:CB:42:48:55:C1:01:09:E0:55:5B:FA:EA
            X509v3 Authority Key Identifier:
                keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:46:d2:5a:d2:42:ee:21:2c:ad:bd:5c:6b:53:36:58:7a:5e:
         61:2d:f5:e0:ec:09:d1:68:32:c1:75:c9:bd:23:87:64:6a:34:
         13:b9:b4:a8:0e:8e:d3:e4:dc:6f:f5:fd:88:c4:3d:34:da:2e:
         1c:74:7e:eb:00:71:1f:9b:e8:d4:76:96:10:a6:00:75:b9:d7:
         81:12:b8:d7:f6:86:ec:0a:d1:20:e1:98:df:61:70:23:88:60:
         b4:f7:e2:69:d6:13:85:a9:c3:e7:09:ef:de:31:44:52:e1:1a:
         da:10:ec:7b:3c:20:99:d9:f0:5d:d2:ae:cc:ee:16:c6:e9:78:
         f6:ed:ea:1b:b0:32:a8:45:de:68:60:f0:f4:b7:21:9e:7f:b2:
         9d:bf:0e:66:a9:ae:73:31:33:b3:c2:31:75:3d:36:b1:5c:c4:
         4e:cd:a6:a0:5e:f1:20:cc:af:21:c1:b0:06:9f:24:a1:90:01:
         40:d0:ee:da:f4:74:92:ab:7a:8d:b3:67:e0:73:86:7e:01:db:
         1a:1e:f8:aa:dc:1b:73:3c:6a:ad:e8:7f:18:00:da:86:13:7b:
         0f:6c:f5:3a:c8:46:45:10:d8:2d:f1:11:b5:45:ee:b8:d0:0c:
         4e:50:28:35:9d:ad:c3:12:58:1d:5b:a7:17:ae:85:d1:17:bd:
         10:5e:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:06 2026 by rpki-client