Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          zaT8QtBX8CWaeAVSKVLb2kSXw2+Ap6i51NDs3hsOZzg=
Subject key identifier:   5A:41:93:F7:44:D9:57:21:71:7C:68:6D:AB:6F:74:C5:EB:08:C9:01
Certificate issuer:       /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial:       59D6936A15458FAB4F4EF34DDA11B4C055719CB3
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:44:52 +0000
ROA not before:           Sun 03 May 2026 02:39:52 +0000
ROA not after:            Sun 02 May 2027 02:44:52 +0000
asID:                     9341
IP address blocks:        103.189.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
                          rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d6:93:6a:15:45:8f:ab:4f:4e:f3:4d:da:11:b4:c0:55:71:9c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
        Validity
            Not Before: May  3 02:39:52 2026 GMT
            Not After : May  2 02:44:52 2027 GMT
        Subject: CN=5A4193F744D95721717C686DAB6F74C5EB08C901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:24:aa:a6:f0:8a:9c:eb:fe:57:b1:21:a7:
                    6c:5d:d7:2f:d9:55:51:35:22:86:3d:f5:74:e6:1a:
                    77:78:37:ac:85:f5:01:44:b0:e9:3c:79:6c:28:77:
                    98:80:43:66:dc:7e:ad:b5:32:48:0e:de:78:37:7e:
                    f5:40:ce:27:cc:b9:2f:ff:d6:ee:aa:c2:ca:eb:2d:
                    ff:10:9e:e2:7f:a3:e8:81:d5:69:26:60:6b:bb:26:
                    7d:be:31:3f:c4:11:8a:a7:c8:a7:b7:62:25:43:5e:
                    2a:32:af:13:03:2c:80:41:b3:ed:c6:d1:0a:82:92:
                    3e:1c:e6:6d:7a:1a:6e:a1:ab:6e:c5:6c:05:4a:52:
                    67:b7:db:88:ae:1f:c6:68:4b:48:59:81:7e:da:ef:
                    76:e6:4e:7e:ce:38:d4:95:12:08:96:86:d9:ab:06:
                    ef:f0:9e:9b:8c:cc:25:e9:e4:54:3e:68:9d:f7:ad:
                    ea:6c:90:c4:48:df:17:7a:5f:53:5c:d2:86:f3:01:
                    cd:cf:fc:ce:7d:1b:a5:62:0e:f1:ab:e5:4c:1f:92:
                    5f:b1:1c:c5:0f:83:f3:c4:cc:fb:3d:45:ec:c5:6d:
                    ed:88:fe:a5:c6:d5:46:61:ab:a6:f1:62:c2:69:71:
                    be:5a:7d:8d:fe:43:be:04:a3:a1:be:72:24:9b:39:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:93:F7:44:D9:57:21:71:7C:68:6D:AB:6F:74:C5:EB:08:C9:01
            X509v3 Authority Key Identifier:
                keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:27:c8:a2:eb:73:29:59:40:af:d2:98:b7:a1:5a:b4:45:
         5e:da:f0:b0:29:31:fd:ad:95:1f:20:38:72:e2:f0:b3:9b:12:
         aa:b5:65:65:88:cb:b6:87:1d:52:ba:22:4d:b9:04:0a:19:60:
         c8:77:9b:2c:0f:24:67:93:b8:72:57:98:6c:91:d2:60:bf:5d:
         12:34:d6:7a:41:fe:e1:9f:e6:28:72:f5:f1:d4:cf:2d:22:67:
         6c:63:28:09:f8:e5:45:b2:3a:db:fc:84:46:d0:49:0f:df:08:
         8e:95:88:d3:26:61:ec:af:cf:4c:7f:ce:14:0b:a4:95:01:1c:
         d7:68:04:ae:b5:c5:3c:62:09:6c:5a:18:f7:22:0d:88:0d:fd:
         b3:3a:a9:33:28:57:f8:a9:1b:82:99:ab:4f:70:72:6a:b6:4d:
         54:f5:be:6b:51:59:55:c7:2e:9d:49:68:60:cb:8c:3c:74:ed:
         3c:9b:40:38:c3:46:72:2c:2e:41:91:0f:3d:58:72:f3:e6:48:
         2f:6b:62:7d:c7:32:4f:58:55:40:c3:1f:33:b4:6a:b3:37:89:
         bf:46:20:c3:f7:a1:a2:09:f4:39:1d:22:35:85:10:e6:1f:85:
         ce:c5:d0:f9:1b:78:f3:80:22:7e:8f:f2:14:39:2d:29:85:30:
         be:5f:7c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:29 2026 by rpki-client