Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa
File:                     3130332e33312e34322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          hrdfr2TRiO52apNfgacLA8RJIeVUyTA2DCEK6uEcGVs=
Subject key identifier:   F7:F8:47:25:A2:07:88:77:8F:6B:69:A4:59:FA:E0:8D:63:77:FB:5B
Certificate issuer:       /CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6
Certificate serial:       273779696A8631A636FEEF7878391AAD185A74AC
Authority key identifier: 6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:19:33 +0000
ROA not before:           Sun 03 May 2026 03:14:33 +0000
ROA not after:            Sun 02 May 2027 03:19:33 +0000
asID:                     9341
IP address blocks:        103.31.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl
                          rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:37:79:69:6a:86:31:a6:36:fe:ef:78:78:39:1a:ad:18:5a:74:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6
        Validity
            Not Before: May  3 03:14:33 2026 GMT
            Not After : May  2 03:19:33 2027 GMT
        Subject: CN=F7F84725A20788778F6B69A459FAE08D6377FB5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:9f:85:b5:45:0e:1c:4f:63:25:c3:af:d9:
                    97:21:c2:98:7d:6f:0f:09:a4:4b:5e:13:9d:5c:88:
                    80:08:22:25:26:c8:61:91:7e:d5:7f:a5:89:cf:b7:
                    98:40:e5:a2:6f:76:48:d5:ab:53:eb:46:65:68:f3:
                    81:6d:b8:13:65:83:ac:1b:9a:70:49:86:52:81:50:
                    42:91:4f:f6:3b:60:d7:7c:fc:ad:12:af:2f:64:64:
                    32:d3:4a:1d:cd:04:43:54:0d:93:56:6b:00:ce:43:
                    b3:0a:1b:50:15:8f:4c:a4:d5:db:2c:60:72:7b:a7:
                    2e:6b:8c:44:5d:6e:22:d6:fe:62:cf:79:ce:e0:a3:
                    76:6f:2f:02:5a:ea:6e:45:50:14:f1:3a:10:c9:a3:
                    16:56:48:ec:b4:99:a6:59:95:a0:96:59:0e:01:2d:
                    38:6a:60:cf:5e:c0:46:67:44:49:9c:72:ed:8e:57:
                    09:a5:a4:2a:e7:b7:3b:ed:52:22:85:6c:21:ec:aa:
                    ff:66:3a:7c:a5:f2:52:c2:40:22:1b:55:1e:51:86:
                    41:cd:08:87:cd:e2:dc:3d:55:20:71:6b:22:cc:27:
                    78:74:3a:4e:b8:47:cb:f7:fc:67:68:3d:6a:f5:1d:
                    ff:96:a1:5f:69:76:eb:63:a0:a3:3a:9d:e3:94:2f:
                    35:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F8:47:25:A2:07:88:77:8F:6B:69:A4:59:FA:E0:8D:63:77:FB:5B
            X509v3 Authority Key Identifier:
                keyid:6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:c8:74:f3:df:d7:7b:0a:d1:fa:cc:1e:b9:37:fe:f9:86:
         80:2f:96:82:f8:22:cb:41:f8:7c:56:9b:aa:4c:6b:df:de:f2:
         6e:22:e2:40:1d:2e:6d:28:4d:68:15:9c:41:b0:7e:e8:92:a4:
         ce:3b:62:8a:84:0e:f2:b2:7d:a0:6f:9a:b0:2e:1f:ca:ab:de:
         33:1b:33:ad:98:35:9f:54:4b:24:4f:e2:ca:ec:25:b1:1d:d2:
         0a:39:1d:bd:9b:4d:f2:8b:0c:24:b5:af:2f:1d:3c:68:ed:a9:
         83:dc:5e:58:96:38:0f:1f:43:2a:83:a1:0c:53:06:05:45:d5:
         4a:5b:b0:48:65:5c:90:a8:72:c9:99:9d:4b:d3:14:43:70:60:
         fe:51:a8:d4:5c:d5:60:d9:d9:69:f1:7c:a8:3c:63:08:56:f8:
         9a:78:b4:28:72:a3:e4:b1:7d:31:01:83:bd:56:10:ac:53:03:
         f3:c1:f9:33:91:79:27:f9:84:e3:29:3f:44:8c:b1:51:c2:c7:
         36:0b:d3:ed:50:39:db:16:a7:9a:23:64:24:e0:3f:4b:b2:9d:
         9a:eb:8d:5a:80:c3:67:97:4f:c4:ba:70:ce:e9:6c:c9:82:9e:
         0d:2f:f3:2a:4a:e3:a5:78:07:fc:3f:e5:19:a1:e8:26:4e:2d:
         0d:73:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:29:04 2026 by rpki-client