Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          p+akLfy0WmwcWwKoICEgVlXEAKS1XaUc7gLYGzrKupw=
Subject key identifier:   75:23:8C:B1:5F:11:F3:30:F9:32:31:DC:EB:18:65:2D:EA:77:83:CD
Certificate issuer:       /CN=37F03E3124DF827AEC6F617458716798083055BC
Certificate serial:       75397DB638D7D939ACCA9AA2381860C2448D8444
Authority key identifier: 37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 02:44:51 +0000
ROA not before:           Sun 03 May 2026 02:39:51 +0000
ROA not after:            Sun 02 May 2027 02:44:51 +0000
asID:                     9341
IP address blocks:        103.189.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl
                          rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 19:34:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:7d:b6:38:d7:d9:39:ac:ca:9a:a2:38:18:60:c2:44:8d:84:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F03E3124DF827AEC6F617458716798083055BC
        Validity
            Not Before: May  3 02:39:51 2026 GMT
            Not After : May  2 02:44:51 2027 GMT
        Subject: CN=75238CB15F11F330F93231DCEB18652DEA7783CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:bc:be:74:d1:12:06:81:a4:ad:ce:ad:6f:
                    e1:ab:dd:c7:5b:c9:67:ea:82:bb:7f:5b:d3:3d:86:
                    05:c1:09:5a:02:97:5f:83:7e:f5:ea:57:33:1d:47:
                    15:19:9e:8e:8b:0e:fa:44:18:99:f4:28:bb:63:8f:
                    c2:62:3a:d4:7f:14:50:0e:b3:86:3e:2a:ae:f2:76:
                    08:f1:94:17:ef:42:64:c2:b2:eb:ed:a9:78:2b:f7:
                    9b:9f:bc:30:56:36:24:02:84:ab:3d:8e:18:1c:dc:
                    eb:48:99:ef:63:42:38:1c:17:93:ad:ef:ed:95:38:
                    ea:23:3a:db:92:2b:28:b1:e9:d2:4f:25:c2:d1:82:
                    b5:df:25:0a:b5:70:f1:6f:c9:2d:d8:6e:29:87:75:
                    57:61:46:c1:0f:58:45:a9:66:50:cd:ba:ac:36:88:
                    bb:05:3f:d9:9e:b7:f2:76:35:a8:49:87:fb:cf:8e:
                    6f:1b:70:1e:70:03:20:15:f5:9e:1e:78:dd:d1:4a:
                    ad:75:3a:b9:1f:74:11:b6:a5:2e:37:c6:c9:58:b5:
                    88:87:27:64:83:dd:69:d0:7e:b1:12:1e:f6:c8:03:
                    f5:4f:f5:54:e4:f6:23:78:0e:37:43:0c:50:14:c5:
                    d4:92:92:66:dc:ba:88:15:33:f9:62:cb:5a:81:2d:
                    28:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:23:8C:B1:5F:11:F3:30:F9:32:31:DC:EB:18:65:2D:EA:77:83:CD
            X509v3 Authority Key Identifier:
                keyid:37:F0:3E:31:24:DF:82:7A:EC:6F:61:74:58:71:67:98:08:30:55:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/37F03E3124DF827AEC6F617458716798083055BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/37F03E3124DF827AEC6F617458716798083055BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:fd:74:7a:33:d3:81:fa:e4:92:61:39:17:52:7a:57:88:a9:
         54:22:ca:d6:60:a3:61:01:5c:b9:f0:6d:62:db:e1:95:e8:85:
         8c:bb:13:0c:45:7c:96:75:bd:74:ab:5f:4c:81:54:ef:55:c6:
         70:ec:3c:89:35:fa:3f:64:26:5c:d7:7a:9b:75:ca:81:52:24:
         0d:82:04:2e:7f:30:ae:12:73:98:3e:15:17:2d:4e:d4:d0:9e:
         5c:74:a3:5f:d1:c0:ec:bf:1d:5b:54:d5:c0:b0:53:0b:2f:59:
         8f:01:14:e2:80:fc:06:c6:76:5f:50:7c:8b:de:22:7b:48:41:
         5c:7b:8b:e8:74:7b:68:a1:98:27:aa:7b:9c:29:97:bd:ec:21:
         e8:18:76:84:1c:c5:ae:11:60:57:3e:75:60:79:3e:cd:23:cd:
         79:fe:64:57:ba:d5:fa:f6:0e:a4:0b:68:94:b0:05:17:4d:ad:
         45:56:f6:b8:13:2c:a0:1f:24:b5:06:49:2a:8e:49:31:6c:b4:
         01:96:30:ab:ce:8a:45:51:98:42:6b:e7:d3:82:4b:af:11:de:
         65:aa:89:06:98:ea:57:45:2d:2c:84:5b:05:eb:f6:81:a8:f2:
         40:58:cb:37:ed:c0:8a:5f:05:6a:46:2e:82:99:fa:56:8d:01:
         af:a7:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:30:07 2026 by rpki-client