Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier:          TN3/E7Y5c/nedOyTgYgff8HK90H5iShgi5mk+WZX5nw=
Subject key identifier:   D4:60:D8:58:F4:36:69:FC:A9:36:66:E5:F0:A8:86:D2:A7:74:DA:0E
Certificate issuer:       /CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
Certificate serial:       549BCECC87EA30DBE31F1A6199E6CC1AFDB62ADF
Authority key identifier: F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time:             Sun 03 May 2026 02:23:42 +0000
ROA not before:           Sun 03 May 2026 02:18:42 +0000
ROA not after:            Sun 02 May 2027 02:23:42 +0000
asID:                     131749
IP address blocks:        103.31.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl
                          rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 13:54:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9b:ce:cc:87:ea:30:db:e3:1f:1a:61:99:e6:cc:1a:fd:b6:2a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9
        Validity
            Not Before: May  3 02:18:42 2026 GMT
            Not After : May  2 02:23:42 2027 GMT
        Subject: CN=D460D858F43669FCA93666E5F0A886D2A774DA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:7f:5a:77:75:24:51:23:17:d3:bf:f6:d8:
                    af:20:ae:f6:05:fb:4a:fc:bd:8c:43:c4:69:ea:a7:
                    34:82:d6:ea:91:f8:a6:58:46:ca:10:d4:d2:f1:e7:
                    4f:50:ab:96:e5:5c:28:42:7d:21:8e:46:b8:16:61:
                    52:bf:bd:90:dd:cb:e6:b8:4b:5d:f0:c4:9c:17:63:
                    c6:2a:a4:89:b3:89:75:bd:9a:97:af:fb:9e:f7:be:
                    5b:d3:61:2d:1c:7e:99:00:15:94:c9:e8:4e:b1:2b:
                    e6:7d:1e:d8:a3:b4:e1:e2:5f:8f:2e:c5:94:79:04:
                    7a:07:33:68:c3:48:1a:d3:97:ef:0f:a6:18:b8:f2:
                    60:1d:c8:59:c8:c0:b4:20:0a:e5:79:1b:8e:71:0f:
                    91:58:b0:f0:7c:ae:ed:37:54:18:33:81:f9:19:71:
                    b1:8e:37:fa:d9:fa:c6:fb:18:5d:76:5f:98:fb:cc:
                    6a:bf:18:fe:43:d8:5c:09:23:e6:7d:21:4a:d1:ec:
                    60:e5:fa:53:26:1c:f8:de:8c:cc:8b:25:b7:6b:f1:
                    1c:c6:19:36:29:0e:50:40:d9:62:1c:5f:2b:b0:82:
                    2a:a9:29:24:f5:25:06:0f:fd:9f:f2:70:60:c1:66:
                    ad:4f:33:6d:97:11:b0:30:68:53:aa:70:e9:35:6d:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:60:D8:58:F4:36:69:FC:A9:36:66:E5:F0:A8:86:D2:A7:74:DA:0E
            X509v3 Authority Key Identifier:
                keyid:F8:EB:6F:4E:91:DD:D4:7F:A8:E0:48:1B:60:D4:C1:80:86:A8:32:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F8EB6F4E91DDD47FA8E0481B60D4C18086A832C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:85:05:41:9f:9b:5e:99:11:8d:8e:07:c7:e7:5b:6c:42:
         52:fb:33:75:0d:72:6c:e9:20:62:b9:6d:33:90:a6:88:ab:41:
         9f:ae:da:15:b3:3e:f8:9d:03:57:c1:47:d4:f5:4c:97:d9:ce:
         20:da:6f:fb:91:a6:08:a2:58:bd:c6:af:60:51:bf:fc:49:46:
         4e:d9:3b:e7:ba:50:aa:c2:c4:7f:a0:2a:2d:17:a3:57:cb:d1:
         0c:c9:c9:75:07:11:2d:37:55:63:e2:8a:81:08:34:b1:5d:53:
         9c:c8:8f:5e:d8:62:52:ee:76:e4:df:d0:13:d7:22:5a:74:8f:
         44:a4:5d:43:2f:d0:63:56:31:c9:17:60:b4:f3:45:2e:63:b5:
         10:ee:bb:31:13:85:c8:2b:b7:c4:41:66:3e:f2:e7:d9:26:b6:
         3d:01:8c:f2:14:01:0c:1a:db:d8:a8:bc:1e:53:b4:73:6a:bf:
         44:ef:e8:1f:58:2b:4d:d1:86:68:97:0b:39:9c:5b:e5:b9:b6:
         01:c5:a1:98:1a:28:13:d5:6b:19:e0:97:38:44:6c:18:98:c2:
         3a:e4:c1:9b:4b:36:e7:7b:cb:30:c2:69:3b:bb:82:94:83:e9:
         ae:7f:ee:f2:53:72:e6:11:af:a7:d0:d0:f9:84:19:7f:52:e4:
         4d:d6:a1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 07:10:35 2026 by rpki-client