Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33312e34332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          8q2j3tRiCSRC9Gc9YgqPefi0jllhnuKq7xV3+fKHJB0=
Subject key identifier:   18:DC:CE:6F:4A:CB:6F:3F:6E:E6:5C:D8:FC:C9:7E:5F:F5:33:57:28
Certificate issuer:       /CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6
Certificate serial:       7248259F77128D154118C05EB573C7AB30D3CC05
Authority key identifier: 6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
Signing time:             Sun 03 May 2026 03:19:33 +0000
ROA not before:           Sun 03 May 2026 03:14:33 +0000
ROA not after:            Sun 02 May 2027 03:19:33 +0000
asID:                     9341
IP address blocks:        103.31.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl
                          rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 10:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:48:25:9f:77:12:8d:15:41:18:c0:5e:b5:73:c7:ab:30:d3:cc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D31A573DDCC9E2C71AAB2614AE715DB44453EC6
        Validity
            Not Before: May  3 03:14:33 2026 GMT
            Not After : May  2 03:19:33 2027 GMT
        Subject: CN=18DCCE6F4ACB6F3F6EE65CD8FCC97E5FF5335728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:35:a0:04:46:24:bc:92:6e:13:59:ba:dc:e3:
                    c9:d9:aa:8a:78:5e:3d:47:68:18:d4:e5:7a:6d:f1:
                    f2:66:d3:38:d2:de:26:dd:56:39:a9:3a:ef:e6:7b:
                    ba:d2:eb:03:48:01:f1:b4:e8:68:2e:64:6f:9f:7b:
                    05:7d:77:80:a4:80:15:f5:df:65:87:0f:79:f0:d0:
                    03:5b:e6:42:15:81:5d:dd:50:a8:2c:e2:4a:4a:09:
                    cf:ab:ac:fd:01:c2:1d:da:4e:32:60:b3:38:9c:45:
                    22:0e:10:2b:fc:e8:35:84:97:dd:c0:36:e1:fd:41:
                    2c:34:97:06:6e:b2:db:f5:42:72:69:f1:9e:7f:d8:
                    ef:69:3e:20:26:5a:d0:36:50:87:64:d5:c5:88:c2:
                    33:26:17:12:f6:62:4e:49:60:82:c5:6b:8b:cc:19:
                    de:00:e1:c2:6b:83:eb:7e:a2:78:e5:ea:d3:01:d9:
                    4e:7f:51:a5:e7:42:64:e0:a2:7b:7b:72:ae:09:e1:
                    f8:4c:31:59:85:99:f4:65:5f:d3:39:75:ee:16:a7:
                    6f:16:58:82:e0:fa:cb:a6:57:4c:2e:b6:c9:47:7c:
                    66:71:fd:58:db:d2:d0:2a:0b:c2:85:47:b2:18:8e:
                    c6:45:c2:3f:7e:45:01:8b:77:db:74:36:c6:f9:e6:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:CE:6F:4A:CB:6F:3F:6E:E6:5C:D8:FC:C9:7E:5F:F5:33:57:28
            X509v3 Authority Key Identifier:
                keyid:6D:31:A5:73:DD:CC:9E:2C:71:AA:B2:61:4A:E7:15:DB:44:45:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6D31A573DDCC9E2C71AAB2614AE715DB44453EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:a6:65:75:33:52:6a:20:e9:8e:3d:97:c6:43:f1:70:4c:ff:
         d6:c5:27:af:5d:13:83:52:1e:02:28:7d:62:98:46:3d:e1:ea:
         e4:1b:44:32:7a:97:71:22:ba:b9:b9:0a:9e:b6:f5:45:2e:96:
         3f:91:da:cb:f2:80:a5:cb:cb:6a:0d:a0:ac:05:72:00:72:92:
         e4:2f:bc:2c:29:3c:fa:60:52:3b:c1:0e:f2:15:3c:e2:f0:8a:
         64:64:88:29:4e:8f:11:55:11:10:a6:08:ec:fa:de:2e:64:cd:
         8a:51:79:58:39:8f:3f:60:46:19:9a:e8:7f:40:ce:83:58:0f:
         f4:fb:e5:b1:8d:04:32:32:87:ac:3c:0f:51:95:9f:ed:bd:af:
         bd:74:30:8d:4f:3b:41:a5:35:67:0c:ea:e0:de:91:28:ca:7a:
         0c:74:87:a7:29:32:9f:7f:de:95:38:d9:73:13:50:29:4c:f1:
         2d:21:30:74:b0:a0:2c:e1:f4:16:ea:6c:06:cc:c6:3c:98:d5:
         27:6e:36:0c:60:b8:6e:0a:47:fd:8e:e3:ac:a8:b1:12:86:81:
         c6:2e:9e:93:dd:41:26:79:a4:35:50:8c:48:eb:24:dc:b3:c9:
         db:38:3e:a7:1b:9a:5b:41:79:de:92:7d:18:70:3e:f5:01:d6:
         07:7e:90:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 13:28:25 2026 by rpki-client