Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (raw, json)
Hash identifier:          hVG5QJJlsbYPr5L1RCfsG/I/X2H5aI8Xq7RBOYv0G3o=
Subject key identifier:   FC:AA:4D:AD:97:52:C7:11:98:25:DC:9A:DC:93:85:59:C6:6F:22:24
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       7EFF5831226120C8D29C5947C8E7F5C58A02E846
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa
Signing time:             Sun 03 May 2026 02:23:44 +0000
ROA not before:           Sun 03 May 2026 02:18:44 +0000
ROA not after:            Sun 02 May 2027 02:23:44 +0000
asID:                     131749
IP address blocks:        103.31.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 13:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ff:58:31:22:61:20:c8:d2:9c:59:47:c8:e7:f5:c5:8a:02:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: May  3 02:18:44 2026 GMT
            Not After : May  2 02:23:44 2027 GMT
        Subject: CN=FCAA4DAD9752C7119825DC9ADC938559C66F2224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:c7:57:4a:50:b4:ed:78:b0:be:ed:89:73:
                    0a:2d:e4:ac:e8:00:75:1d:52:f8:a3:8a:de:20:b8:
                    86:b3:3e:2e:6b:dd:c9:90:bf:17:18:c9:d4:a1:76:
                    b6:65:d8:98:35:f5:9a:e2:2a:55:15:35:87:0a:87:
                    b8:61:9b:24:bb:f3:c7:04:79:13:f9:d1:58:06:82:
                    02:39:31:16:af:69:84:0d:48:eb:ae:5e:3d:8a:76:
                    cd:4e:2c:f9:88:b7:4f:20:d7:18:6b:3e:55:60:1f:
                    c4:40:2f:4c:6c:2f:8b:03:3c:a5:7c:89:94:78:c5:
                    cd:99:a0:aa:60:62:b1:53:91:7c:35:43:ee:8b:b8:
                    50:a6:4d:da:53:79:76:94:22:ec:d8:6d:e8:44:f3:
                    0e:46:bb:56:99:8b:2d:b7:4f:fc:e2:c1:7f:ac:48:
                    81:14:92:64:96:02:22:d4:51:f0:f5:87:1f:4a:80:
                    54:08:cf:b3:46:f6:56:c3:0b:90:e7:a4:cd:06:ef:
                    f4:af:a9:68:ab:2d:48:86:ee:91:5d:1c:db:49:f3:
                    57:62:90:7d:c3:a8:84:9d:fe:49:4c:0e:5d:3b:34:
                    6d:02:d7:72:f8:0c:48:a2:76:94:92:7e:fc:cc:b3:
                    16:d0:f3:c6:a8:1d:41:fd:10:f5:11:8c:71:6a:22:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AA:4D:AD:97:52:C7:11:98:25:DC:9A:DC:93:85:59:C6:6F:22:24
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:30:59:e1:6f:1d:7b:fa:d2:c6:63:e5:fa:75:80:fb:41:a3:
         0a:bb:1f:d3:86:a8:52:23:03:3f:5b:2e:79:eb:ac:2f:ff:88:
         71:b9:32:0a:4e:4d:d2:a1:3e:19:02:f8:4b:61:10:77:7b:62:
         60:28:37:84:e0:44:83:e3:62:f7:0b:20:1f:15:ee:2a:a5:7c:
         99:66:66:a7:e7:75:2a:14:ca:45:0d:5c:dc:c4:b6:20:e1:72:
         fd:13:86:ae:ec:a8:57:09:5a:c5:53:e7:ec:65:cc:bf:81:df:
         79:34:e6:e1:af:cb:98:3c:16:8f:23:f7:01:92:cb:29:a6:29:
         12:4b:b1:5a:b0:31:ef:a8:41:ec:4e:4d:66:5d:1f:ed:db:0b:
         ed:0b:40:f0:91:2d:d0:b5:2d:41:04:a5:53:a5:aa:20:2e:fe:
         19:18:d5:92:1b:ee:95:80:3f:ec:39:b6:19:65:de:28:82:3d:
         b9:39:29:9a:22:33:7f:55:10:df:a5:a7:b4:28:58:7f:4f:05:
         81:e7:ad:86:56:ad:44:da:e5:10:6f:43:5b:74:08:cb:87:61:
         fd:1a:f6:08:e5:a9:7b:d1:17:f7:92:46:06:45:53:41:a8:dd:
         d9:83:0d:c5:cd:ec:8e:44:19:5d:53:ff:c4:e1:6d:e1:c6:7d:
         3e:66:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:10:40 2026 by rpki-client