Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa
File:                     3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa (raw, json)
Hash identifier:          RZQJpTRRgue7IYV2PEsoGXrZll3cpomqzvFUOIs6rno=
Subject key identifier:   D7:73:1E:E2:13:D5:C7:CC:2F:F6:17:CD:40:F9:6E:FF:02:41:10:B1
Certificate issuer:       /CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93
Certificate serial:       7AACE7C7B50ED9670B3474D82C210EB468BC9CAC
Authority key identifier: 25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa
Signing time:             Sun 03 May 2026 03:14:23 +0000
ROA not before:           Sun 03 May 2026 03:09:23 +0000
ROA not after:            Sun 02 May 2027 03:14:23 +0000
asID:                     150263
IP address blocks:        103.31.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl
                          rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:e7:c7:b5:0e:d9:67:0b:34:74:d8:2c:21:0e:b4:68:bc:9c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93
        Validity
            Not Before: May  3 03:09:23 2026 GMT
            Not After : May  2 03:14:23 2027 GMT
        Subject: CN=D7731EE213D5C7CC2FF617CD40F96EFF024110B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:fe:9b:69:56:f1:8e:3b:09:18:11:b0:5d:
                    a5:de:69:75:56:3e:37:31:2f:30:1d:40:b2:b0:f7:
                    d1:da:9d:64:95:91:65:90:4a:3d:67:13:e6:8b:70:
                    19:ad:9b:36:54:db:67:99:29:d7:59:bf:a6:b8:06:
                    af:61:d2:8b:fa:15:1d:c5:94:ce:15:83:54:f2:c0:
                    43:06:22:4f:4e:6f:71:a8:07:26:f3:42:41:0c:5c:
                    2d:0d:40:2d:40:87:ec:0a:e4:5e:3d:f5:b9:7f:48:
                    78:63:9f:23:c8:83:07:95:4e:37:d3:ba:35:2e:14:
                    44:b2:85:10:d3:65:f3:19:7a:94:13:99:65:c7:d5:
                    7e:24:8d:1c:ad:63:40:07:25:c2:ad:c2:99:9a:42:
                    40:bd:18:4d:0f:bc:4c:2e:98:3a:fc:9c:f2:fb:fc:
                    4e:b4:7b:82:d5:01:1a:91:36:a6:36:2c:c0:5e:4b:
                    99:0b:71:44:11:78:c7:c3:60:25:ca:f9:56:c9:83:
                    c0:db:5f:2a:46:f8:9e:a3:95:ad:f7:77:37:90:6d:
                    04:ab:be:77:69:28:27:7a:3f:c2:ab:1f:64:15:d3:
                    de:71:44:9c:6b:dc:d3:4e:7f:84:5d:60:a1:69:ec:
                    3e:f2:5c:96:ce:51:b2:30:4d:3b:54:a3:87:48:fc:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:73:1E:E2:13:D5:C7:CC:2F:F6:17:CD:40:F9:6E:FF:02:41:10:B1
            X509v3 Authority Key Identifier:
                keyid:25:7A:FD:EE:9F:A1:ED:6C:55:AB:F0:C0:CC:F1:73:E7:FC:1E:6F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/257AFDEE9FA1ED6C55ABF0C0CCF173E7FC1E6F93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e6f75021-8368-4481-9269-5980d6f7295e/0/3130332e33312e3131382e302f32342d3234203d3e20313530323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:cc:e8:15:a3:9c:9b:49:6f:90:06:a8:59:6b:06:95:d5:66:
         77:6c:c0:eb:6f:7d:23:cb:75:10:fa:54:b1:47:be:31:60:14:
         2f:50:37:de:60:46:10:8d:25:10:2f:09:69:65:44:12:05:e2:
         f9:ef:fe:54:7f:66:a4:34:34:4e:e2:a9:ae:5f:95:50:3d:8e:
         a3:05:d4:25:17:77:e8:0b:cf:08:aa:94:e7:eb:e7:89:16:bc:
         3c:c4:23:e9:1c:91:ec:a6:d1:0b:ac:b3:20:4a:8f:e0:40:c9:
         b0:d2:b8:f5:a7:db:61:fb:10:95:35:69:c4:53:bc:7e:0d:aa:
         c8:63:73:cf:87:42:b8:18:05:89:a6:b9:b0:98:24:86:a1:0d:
         79:f5:c6:d6:f7:44:a2:52:36:07:e4:01:07:7b:65:94:b2:89:
         10:ae:40:93:7d:58:7a:7f:03:6d:e9:1a:1b:ea:3a:22:3b:94:
         b1:05:35:c3:90:de:d9:ce:65:a5:84:64:75:fa:09:e1:d0:df:
         9f:bc:52:99:a2:2e:20:76:2c:94:70:f9:47:dc:b7:66:05:0f:
         a6:2f:0a:cc:f6:5a:a7:43:fc:f1:70:c5:39:ea:84:7c:3b:b9:
         97:3a:43:7d:52:ab:83:33:e1:ca:63:2b:8c:73:aa:1b:29:2b:
         4d:82:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:47:37 2026 by rpki-client