Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          dsSBEZ+RmcKKQ/S8RAk9jCD+91Y66d5ktHEFnBxIwCc=
Subject key identifier:   A7:4C:44:D0:A8:AC:E3:51:59:22:C9:87:D6:3F:F1:59:AF:F7:26:57
Certificate issuer:       /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial:       58C4377A4C7F32C4E6074DBB294F413ED9497266
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:44:51 +0000
ROA not before:           Sun 03 May 2026 02:39:51 +0000
ROA not after:            Sun 02 May 2027 02:44:51 +0000
asID:                     9341
IP address blocks:        103.189.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
                          rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c4:37:7a:4c:7f:32:c4:e6:07:4d:bb:29:4f:41:3e:d9:49:72:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
        Validity
            Not Before: May  3 02:39:51 2026 GMT
            Not After : May  2 02:44:51 2027 GMT
        Subject: CN=A74C44D0A8ACE3515922C987D63FF159AFF72657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d0:9a:0f:18:3e:44:5b:dc:1a:3a:3a:da:9a:
                    66:6d:5a:d5:65:b7:36:af:a5:57:ed:c2:28:f9:c4:
                    a4:bb:94:f5:cf:eb:a9:8e:99:04:46:ef:8e:7d:86:
                    26:aa:81:18:0a:9a:57:e8:84:37:2e:31:da:65:c0:
                    d6:95:f1:21:2f:62:c2:f9:fd:15:5c:58:7f:19:87:
                    c5:bd:59:88:75:c4:d6:9d:fc:26:1a:fe:b3:01:35:
                    ff:6c:70:7b:e7:ef:50:c9:bb:f5:40:c7:73:65:7b:
                    09:44:e7:59:aa:e6:9b:a8:75:8a:3f:8e:7a:93:e0:
                    60:f5:dc:94:0d:8b:1c:ed:22:6d:9d:1b:86:f7:7f:
                    93:53:ee:ba:07:fd:1b:10:03:43:53:78:9c:c8:d9:
                    ca:0b:f0:9a:11:80:84:cd:8b:b9:d1:a4:9a:42:33:
                    5f:3a:9f:f7:13:c6:a3:91:ab:86:15:3e:22:9e:17:
                    de:83:a7:2c:d5:69:64:23:70:f8:7b:3d:f2:30:cf:
                    c3:a3:2d:18:f5:76:4f:8f:22:fc:4b:1b:8a:42:8d:
                    ea:9e:bf:e3:94:9d:ac:ca:46:c9:c4:de:91:89:47:
                    3f:6e:c6:bb:9f:6d:7a:66:23:65:85:ba:76:6d:ae:
                    e4:fe:35:47:87:48:a2:00:91:39:aa:d5:d2:7b:35:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:44:D0:A8:AC:E3:51:59:22:C9:87:D6:3F:F1:59:AF:F7:26:57
            X509v3 Authority Key Identifier:
                keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:62:bf:d7:f6:33:7d:13:7e:60:28:54:6a:7f:e0:aa:d0:
         3f:ab:d9:5d:25:8a:79:75:f9:41:fa:b9:bb:fa:c7:0a:71:3b:
         34:e8:40:1a:4c:83:a3:38:d9:4d:98:cf:86:19:fa:64:c4:a1:
         0e:c3:45:0a:77:45:9c:46:ee:64:1e:1d:17:4d:c8:36:c1:af:
         02:80:54:97:dc:ec:ce:d2:54:17:53:df:5b:2d:84:0b:9d:5e:
         75:66:26:81:98:c0:cc:69:03:64:02:29:36:36:24:3d:22:0e:
         fd:92:30:84:56:05:b9:27:ff:9a:91:f2:6a:27:03:ee:c3:e8:
         fd:37:de:39:51:15:86:64:9a:cf:0b:c0:89:ad:de:a2:a7:a2:
         6b:5c:06:6a:f5:6a:fa:88:44:06:ff:a9:b8:8b:68:70:74:fe:
         9e:c2:35:13:7d:79:fb:4a:06:ea:6b:fc:e6:5c:99:74:1e:cb:
         b9:ff:8e:46:03:c3:b7:1a:5c:2d:60:b8:93:8c:d8:8f:04:a2:
         36:89:d6:12:64:20:43:d3:26:cc:bf:c4:18:68:43:8f:fd:7c:
         f3:0f:ed:e8:d5:e5:f5:fd:12:a7:88:4b:88:be:48:7c:2d:7d:
         b2:f3:7f:d3:d9:ef:7c:8e:c7:0e:ce:f7:24:91:a2:94:29:14:
         eb:42:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:24 2026 by rpki-client