Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa
File:                     3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (raw, json)
Hash identifier:          Jg32b0/22RaThrPVItjxadGotzX77G74NzWz3XkVIKw=
Subject key identifier:   01:D7:06:77:51:A1:D0:23:7B:59:F9:06:20:41:57:AA:6C:7E:DA:5D
Certificate issuer:       /CN=633520AD134E7E67CBB832AE9339B6F7EB07D358
Certificate serial:       1B2E59423A3F833E5F35ECC62B15D4401C9D967F
Authority key identifier: 63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa
Signing time:             Sun 03 May 2026 03:16:38 +0000
ROA not before:           Sun 03 May 2026 03:11:38 +0000
ROA not after:            Sun 02 May 2027 03:16:38 +0000
asID:                     137312
IP address blocks:        103.108.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl
                          rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2e:59:42:3a:3f:83:3e:5f:35:ec:c6:2b:15:d4:40:1c:9d:96:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633520AD134E7E67CBB832AE9339B6F7EB07D358
        Validity
            Not Before: May  3 03:11:38 2026 GMT
            Not After : May  2 03:16:38 2027 GMT
        Subject: CN=01D7067751A1D0237B59F906204157AA6C7EDA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:95:e8:68:62:87:87:1f:ab:e1:d0:8e:e4:
                    94:7e:9b:f1:8d:d8:36:b6:d1:43:fa:1c:26:54:7d:
                    07:b8:7d:e6:e2:4a:57:75:57:11:f5:70:8d:fb:7f:
                    3e:92:c6:04:fa:5e:85:a0:e7:20:6c:7f:27:60:a8:
                    32:00:26:b7:c9:0c:df:dc:f9:45:6d:f7:90:ee:e2:
                    1e:a0:4b:af:33:35:27:7d:c1:fa:e9:6d:98:fd:4f:
                    99:a2:53:ab:92:a9:f5:5f:b7:41:39:af:d5:17:20:
                    4b:5f:e2:2c:94:94:f3:1b:54:e1:bd:c7:03:dd:75:
                    58:04:89:c5:07:fe:17:4b:7d:61:23:e0:a6:9a:6a:
                    8d:84:1c:f1:d7:4c:7f:1b:f1:8a:a8:85:49:3a:66:
                    06:b3:ce:c1:a4:3c:bf:17:a7:3d:36:aa:6f:88:be:
                    51:b7:b3:fe:57:94:71:93:66:50:d0:e4:cd:4a:55:
                    af:55:ae:ae:ce:80:c5:89:de:d2:24:ed:24:8c:95:
                    90:bc:68:d6:2f:35:4b:6a:0f:29:c5:32:ef:13:ab:
                    7f:7d:a4:3c:60:12:0e:ec:3e:da:f2:f4:a8:46:08:
                    ba:da:61:56:43:d7:01:e7:f4:30:e1:6c:a2:a8:6e:
                    e6:8d:6c:e6:c7:16:c3:85:f6:db:1a:c3:26:c7:1a:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D7:06:77:51:A1:D0:23:7B:59:F9:06:20:41:57:AA:6C:7E:DA:5D
            X509v3 Authority Key Identifier:
                keyid:63:35:20:AD:13:4E:7E:67:CB:B8:32:AE:93:39:B6:F7:EB:07:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/633520AD134E7E67CBB832AE9339B6F7EB07D358.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/633520AD134E7E67CBB832AE9339B6F7EB07D358.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f2:cf:5a:f3:16:56:2a:83:73:19:73:0c:18:2b:ec:7b:6a:
         a6:cc:2a:d8:21:c7:bc:03:0f:67:0f:ae:9f:2f:07:58:78:2e:
         9f:34:da:31:5f:2c:11:00:df:06:4d:5c:2e:c2:92:e5:12:95:
         32:e5:a1:7a:57:70:f7:4a:6f:7c:d1:16:39:c5:ea:56:ce:19:
         6e:8a:19:83:cf:b6:d6:af:48:db:b5:df:d1:18:df:6b:63:36:
         fb:73:c1:c9:ef:87:6b:99:60:dc:be:15:36:b8:72:01:8d:3d:
         93:84:ad:2e:ea:a6:27:55:11:39:12:ef:74:48:c3:52:ef:0a:
         79:d2:60:b2:ab:13:72:d3:17:04:50:99:75:b2:8b:a6:01:48:
         3b:ac:14:b7:80:27:db:1e:54:83:e1:05:9d:dd:16:9a:32:2e:
         04:6e:b3:fe:b2:43:f8:ba:b3:9b:9c:3b:14:de:7d:44:41:3c:
         58:ac:7d:de:a2:58:6c:45:27:d5:14:8f:6f:23:5a:e5:24:40:
         0e:db:6c:f8:29:b6:ea:77:d5:4e:41:eb:33:9b:a5:f1:01:54:
         22:ee:a5:ed:f3:37:a0:9e:ac:c2:46:c4:39:61:a3:46:84:49:
         a1:5f:54:be:b0:b6:22:04:29:42:6b:75:92:d3:ec:8a:2f:f4:
         2a:2b:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:13 2026 by rpki-client