Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa
File:                     3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (raw, json)
Hash identifier:          rpaRQ6pLcg3h8lZWS5mZP3KVaWJuOAbOO/JXcmWKPAY=
Subject key identifier:   41:6C:7F:73:7C:AA:BA:54:11:3B:33:A3:68:AD:32:F9:BB:EA:91:6E
Certificate issuer:       /CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
Certificate serial:       72E63039007F874615EBAE1CCA7D11911D99EAF4
Authority key identifier: 2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa
Signing time:             Sun 03 May 2026 03:09:50 +0000
ROA not before:           Sun 03 May 2026 03:04:50 +0000
ROA not after:            Sun 02 May 2027 03:09:50 +0000
asID:                     139427
IP address blocks:        103.31.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl
                          rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e6:30:39:00:7f:87:46:15:eb:ae:1c:ca:7d:11:91:1d:99:ea:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CBD81295EA3FA3867082072D1BDE41CBFB3FB32
        Validity
            Not Before: May  3 03:04:50 2026 GMT
            Not After : May  2 03:09:50 2027 GMT
        Subject: CN=416C7F737CAABA54113B33A368AD32F9BBEA916E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:72:92:21:fa:1b:08:ac:e3:a1:94:a8:d7:f5:
                    19:5a:f3:94:eb:57:b4:71:2e:c9:41:29:5e:8e:4c:
                    bb:5d:9e:48:5c:3c:7b:0e:06:0d:24:be:21:8b:9d:
                    1a:dd:e5:48:1e:4d:a5:16:eb:f4:89:89:fc:54:25:
                    6e:94:91:75:f3:38:d8:b0:d5:81:ed:37:1d:05:1b:
                    6e:bb:02:f1:75:bc:77:6a:97:08:0a:74:54:a9:cc:
                    80:0d:6f:8f:b6:f8:6a:42:38:b5:1f:84:46:c4:a7:
                    cf:85:70:6c:a8:87:34:2a:20:24:c5:d0:0e:63:3e:
                    ae:82:84:e8:b6:8f:8a:d2:55:4d:56:e6:f5:8f:1f:
                    e8:06:3a:a4:68:9f:37:56:36:9b:55:54:bb:07:47:
                    e5:e1:27:4a:ec:d2:74:34:cd:8d:5a:e0:53:65:4a:
                    d2:74:b2:49:07:61:40:88:fe:2c:38:43:2e:12:20:
                    d8:63:25:7f:2f:95:84:ac:e7:a8:9d:c9:37:b4:b6:
                    92:6d:1d:77:69:5c:83:15:d8:9d:d6:2d:54:a2:bf:
                    0f:e1:50:62:82:5e:68:61:35:78:bf:f0:fc:64:29:
                    1d:58:4d:95:07:47:f6:5d:00:f1:69:18:cb:6f:41:
                    c9:76:5d:a2:6e:9a:b7:3e:fe:2d:a6:14:db:5d:66:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6C:7F:73:7C:AA:BA:54:11:3B:33:A3:68:AD:32:F9:BB:EA:91:6E
            X509v3 Authority Key Identifier:
                keyid:2C:BD:81:29:5E:A3:FA:38:67:08:20:72:D1:BD:E4:1C:BF:B3:FB:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2CBD81295EA3FA3867082072D1BDE41CBFB3FB32.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:d6:71:36:67:65:68:0d:52:c4:0e:8c:d1:0a:d0:a1:38:bf:
         ff:aa:22:6b:de:4e:f4:54:ef:d6:db:d0:97:88:83:b2:32:48:
         d4:4e:5e:0e:28:36:5a:ad:dc:ba:b3:81:d0:80:8a:89:6d:42:
         38:77:13:e0:7f:a4:34:fe:1f:b3:bd:fa:9f:61:08:e2:7e:bb:
         01:fa:b4:97:61:f5:13:34:ac:77:4d:99:91:9d:bb:72:60:88:
         1e:83:49:39:81:82:69:56:27:68:e7:d2:cb:55:f5:37:18:3b:
         ae:76:ca:64:b9:97:02:07:68:53:a4:f8:8e:89:cd:9e:0d:1e:
         95:99:3b:13:d0:85:fd:f0:47:c8:19:ff:78:4d:56:28:8d:d9:
         b7:89:79:ff:a4:64:68:86:00:51:d9:f8:f9:d0:52:83:f6:bc:
         50:e2:67:09:7e:19:a5:bf:42:74:4a:e7:a1:32:e2:7a:83:0f:
         38:97:14:cf:b4:2e:9e:87:cb:2f:ef:5e:2b:6d:ea:53:16:f1:
         98:5f:c3:3f:4d:01:fe:d3:59:f4:e5:49:4c:fe:12:f3:0c:ec:
         d4:41:e2:86:b2:4f:b8:1e:62:a6:75:1d:81:0a:13:0e:35:59:
         e8:07:3c:d1:9c:41:1b:56:ea:36:67:15:66:9a:d7:41:2d:78:
         d3:06:77:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:56 2026 by rpki-client