Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa
File:                     3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa (raw, json)
Hash identifier:          gRWK/0YFVmnxzlTGh51A5dqs3NFdvCJxXgz/joszlok=
Subject key identifier:   32:41:16:5E:EC:4B:CA:1D:7D:AA:F2:29:8F:1A:84:CB:D5:CF:72:94
Certificate issuer:       /CN=BC56CE0B357E1A9036243CAE454739729AD6633C
Certificate serial:       3FE48433E2C884A414B900872125E96D849AAAB4
Authority key identifier: BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa
Signing time:             Sun 03 May 2026 03:16:48 +0000
ROA not before:           Sun 03 May 2026 03:11:48 +0000
ROA not after:            Sun 02 May 2027 03:16:48 +0000
asID:                     150281
IP address blocks:        103.97.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl
                          rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e4:84:33:e2:c8:84:a4:14:b9:00:87:21:25:e9:6d:84:9a:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC56CE0B357E1A9036243CAE454739729AD6633C
        Validity
            Not Before: May  3 03:11:48 2026 GMT
            Not After : May  2 03:16:48 2027 GMT
        Subject: CN=3241165EEC4BCA1D7DAAF2298F1A84CBD5CF7294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:b8:ea:60:1c:a5:6c:a8:41:50:45:3a:eb:
                    a7:5a:0b:90:b0:99:f6:d1:c5:0e:6a:79:56:7e:af:
                    0e:6e:e2:16:59:84:63:ae:9c:54:56:b3:fd:03:54:
                    95:b5:05:24:2c:57:7d:4e:10:68:dc:dc:e1:d0:6e:
                    34:bf:a0:fb:99:e0:bc:70:eb:2f:54:66:a9:a9:e3:
                    a6:4f:59:27:15:e0:d9:ab:a8:2f:3b:76:f0:9b:81:
                    63:63:0b:f2:7c:05:0f:40:8c:df:75:60:ae:ca:4e:
                    69:4a:15:f2:94:71:8a:20:79:be:2c:46:1d:df:6c:
                    4a:79:d1:1e:3d:5a:32:00:bf:d8:99:62:a2:e3:6b:
                    c2:f9:85:b3:d3:c5:ad:eb:b9:c3:c6:b2:57:ee:18:
                    a1:4f:92:5d:f6:5b:e7:00:40:4e:d7:e3:e2:5a:1d:
                    42:82:4a:6c:64:e6:3a:a7:2b:2a:42:cc:bc:14:f6:
                    ed:ef:4a:7b:26:0f:62:08:b6:ba:9b:14:12:d1:37:
                    07:16:13:63:83:cc:cc:46:61:66:af:40:f5:f9:5b:
                    d3:26:cc:44:ae:18:1d:31:c5:e6:25:2f:1d:bc:79:
                    b8:1e:61:15:58:bd:cc:9b:c1:e6:6f:a8:16:6f:53:
                    47:4d:4f:5b:b8:29:a1:07:86:37:88:19:ca:d6:de:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:41:16:5E:EC:4B:CA:1D:7D:AA:F2:29:8F:1A:84:CB:D5:CF:72:94
            X509v3 Authority Key Identifier:
                keyid:BC:56:CE:0B:35:7E:1A:90:36:24:3C:AE:45:47:39:72:9A:D6:63:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/BC56CE0B357E1A9036243CAE454739729AD6633C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BC56CE0B357E1A9036243CAE454739729AD6633C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f239fdcb-c417-4f3f-b1c9-7e369cde21fd/0/3130332e39372e3233312e302f32342d3234203d3e20313530323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:d6:52:b6:4b:ed:7d:b6:b2:24:ee:79:c2:35:3d:00:8b:9e:
         5b:a3:a3:3a:1e:b2:4b:0e:c9:4e:e4:a9:da:33:2b:8f:6d:44:
         e1:32:dc:e8:f3:4c:9a:d2:1e:43:c5:6e:1e:d0:bf:32:57:fe:
         ad:f1:23:ba:6e:79:ae:e5:8a:f8:04:ee:a6:a7:db:b1:aa:de:
         d4:9e:fc:93:d5:1c:34:fb:a3:ac:ae:50:2d:ea:09:18:82:23:
         1e:f6:1b:8f:1f:88:3b:68:d5:6a:16:36:52:71:55:c2:79:cc:
         fb:5f:12:74:dc:ce:1e:d1:bc:dc:42:23:f8:cd:a3:80:f8:dc:
         57:30:51:eb:ba:98:29:6b:c9:d6:c5:70:02:8d:b6:e5:42:64:
         5b:b6:a3:53:f6:36:d4:b9:df:a8:48:3e:d7:1d:af:47:a4:4b:
         96:b7:10:0d:66:13:a3:81:17:8d:57:0d:cc:4f:30:4c:34:e2:
         a7:d4:4a:5d:7b:80:4c:ca:e4:85:1b:28:14:3d:72:cb:47:f3:
         86:5b:be:6a:fd:cb:0c:fb:5b:c1:d6:70:13:e4:17:58:76:6a:
         43:6d:ea:10:0b:6a:a8:db:45:56:38:1b:99:50:1a:d1:23:3c:
         45:8f:cd:64:44:66:39:46:fb:4a:fe:5c:5f:94:ef:aa:10:31:
         90:52:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:35 2026 by rpki-client