Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          8YrdvedqGs1zZAIQAtRZi80VSrXLRsF6zbtnQUstSsA=
Subject key identifier:   CD:EC:2E:44:C0:CA:A8:64:52:9E:15:7C:AE:EF:D2:70:81:A3:89:10
Certificate issuer:       /CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
Certificate serial:       1D398E6793032D0FDDF4779D3F56F84CF9F1ACD3
Authority key identifier: A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 May 2026 02:13:01 +0000
ROA not before:           Sun 03 May 2026 02:08:01 +0000
ROA not after:            Sun 02 May 2027 02:13:01 +0000
asID:                     135636
IP address blocks:        103.125.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl
                          rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:39:8e:67:93:03:2d:0f:dd:f4:77:9d:3f:56:f8:4c:f9:f1:ac:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5336FEFF111D5B925A8954E53C4C9C5E22AB800
        Validity
            Not Before: May  3 02:08:01 2026 GMT
            Not After : May  2 02:13:01 2027 GMT
        Subject: CN=CDEC2E44C0CAA864529E157CAEEFD27081A38910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:00:25:8e:4f:a5:eb:ca:15:ec:c7:b1:4c:
                    db:2a:ab:a3:be:22:66:3c:62:7d:4f:54:5c:54:28:
                    6f:a2:33:3c:41:45:70:34:63:a0:ae:b0:54:b1:92:
                    11:7b:e5:cb:a2:d8:e8:da:34:43:0c:f5:22:b3:a8:
                    c7:cf:d5:a9:38:16:02:81:35:81:6a:b5:73:f1:e1:
                    ce:49:00:47:f2:79:03:6e:eb:59:47:f3:46:35:c4:
                    9e:20:19:0b:c0:a4:04:c5:a9:53:75:ac:f8:68:9a:
                    cd:83:57:34:88:c7:53:0d:02:b0:a9:e5:e7:3f:ce:
                    83:23:8b:70:bb:89:44:5e:8e:fd:c3:c8:da:3b:09:
                    36:86:57:71:02:62:d7:b3:71:b6:ee:5d:23:5a:58:
                    91:a8:73:3e:5b:9d:d1:d3:bb:a5:08:4c:c5:7f:dc:
                    82:bd:9a:19:11:85:a3:cf:f0:7e:11:23:44:12:a3:
                    dd:6b:cc:4a:83:61:73:2b:d5:51:c7:df:a3:ab:b7:
                    19:e0:eb:f2:87:2b:a8:28:8c:42:35:66:08:e6:36:
                    fd:e4:02:c9:7d:30:5c:f5:22:da:47:0d:a9:b1:21:
                    01:fa:eb:b3:3e:06:8c:f0:a6:66:af:69:a7:69:03:
                    bb:e7:60:7f:c8:41:1e:52:c0:4f:be:82:16:d2:df:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EC:2E:44:C0:CA:A8:64:52:9E:15:7C:AE:EF:D2:70:81:A3:89:10
            X509v3 Authority Key Identifier:
                keyid:A5:33:6F:EF:F1:11:D5:B9:25:A8:95:4E:53:C4:C9:C5:E2:2A:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A5336FEFF111D5B925A8954E53C4C9C5E22AB800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:1f:40:6c:c8:3f:39:95:b1:af:7e:c2:b2:06:a6:a1:82:
         8a:87:23:dd:94:9f:64:7b:07:d9:2c:2c:40:50:50:50:2c:fa:
         65:43:07:0a:2b:07:ef:62:14:b0:fe:aa:a3:16:06:00:8e:05:
         0d:66:c4:ef:0f:f7:62:2b:5b:30:cc:87:a0:22:42:c0:ac:da:
         54:c5:4a:c1:4e:c4:c7:84:fd:80:79:65:5a:c9:19:17:8c:84:
         15:fc:8d:6d:7b:08:b4:b1:c3:21:4d:d8:08:cd:78:04:c8:80:
         fa:61:1a:40:af:b5:7a:25:92:b5:cf:8a:f6:fe:1a:f0:ee:4c:
         6d:64:8e:22:34:09:e9:ca:bd:d2:31:e4:43:ce:37:4e:ce:1f:
         ed:ea:d0:7a:ca:2a:08:42:d5:c9:d6:aa:b5:6f:a5:6f:ab:64:
         a1:38:6d:23:b2:2a:f0:8f:8b:42:0e:10:f3:d6:f0:12:ff:c5:
         ef:30:95:04:a0:69:03:fb:c5:16:c5:1c:2c:1d:1e:68:c4:8b:
         97:61:50:2e:d9:e3:32:52:4f:e5:c5:80:e3:9b:4b:cb:00:e7:
         f3:29:af:65:95:c0:b8:a2:97:30:e1:bc:f2:29:3d:93:e2:87:
         2a:36:82:42:83:f5:b9:34:eb:f7:6a:93:51:ca:62:3d:50:f6:
         83:62:04:cd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHTmOZ5MDLQ/d9HedP1b4TPnxrNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTUzMzZGRUZGMTExRDVCOTI1QTg5NTRFNTNDNEM5QzVF
MjJBQjgwMDAeFw0yNjA1MDMwMjA4MDFaFw0yNzA1MDIwMjEzMDFaMDMxMTAvBgNV
BAMTKENERUMyRTQ0QzBDQUE4NjQ1MjlFMTU3Q0FFRUZEMjcwODFBMzg5MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqQAljk+l68oV7MexTNsqq6O+
ImY8Yn1PVFxUKG+iMzxBRXA0Y6CusFSxkhF75cui2OjaNEMM9SKzqMfP1ak4FgKB
NYFqtXPx4c5JAEfyeQNu61lH80Y1xJ4gGQvApATFqVN1rPhoms2DVzSIx1MNArCp
5ec/zoMji3C7iURejv3DyNo7CTaGV3ECYtezcbbuXSNaWJGocz5bndHTu6UITMV/
3IK9mhkRhaPP8H4RI0QSo91rzEqDYXMr1VHH36Ortxng6/KHK6gojEI1ZgjmNv3k
Asl9MFz1ItpHDamxIQH667M+BozwpmavaadpA7vnYH/IQR5SwE++ghbS30wZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzewuRMDKqGRSnhV8ru/ScIGjiRAwHwYDVR0j
BBgwFoAUpTNv7/ER1bklqJVOU8TJxeIquAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MGM1NGJlOWEtOWI1ZC00YzY0LWI0ZTgtNjFjNzRlOWVjZWRjLzAvQTUzMzZGRUZG
MTExRDVCOTI1QTg5NTRFNTNDNEM5QzVFMjJBQjgwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNTMzNkZFRkYxMTFENUI5MjVBODk1NEU1M0M0QzlDNUUyMkFC
ODAwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzBjNTRiZTlhLTliNWQtNGM2NC1i
NGU4LTYxYzc0ZTllY2VkYy8wLzMxMzAzMzJlMzEzMjM1MmUzMTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ30NMA0GCSqG
SIb3DQEBCwUAA4IBAQBAxB9AbMg/OZWxr37CsgamoYKKhyPdlJ9kewfZLCxAUFBQ
LPplQwcKKwfvYhSw/qqjFgYAjgUNZsTvD/diK1swzIegIkLArNpUxUrBTsTHhP2A
eWVayRkXjIQV/I1tewi0scMhTdgIzXgEyID6YRpAr7V6JZK1z4r2/hrw7kxtZI4i
NAnpyr3SMeRDzjdOzh/t6tB6yioIQtXJ1qq1b6Vvq2ShOG0jsirwj4tCDhDz1vAS
/8XvMJUEoGkD+8UWxRwsHR5oxIuXYVAu2eMyUk/lxYDjm0vLAOfzKa9llcC4opcw
4bzyKT2T4ocqNoJCg/W5NOv3apNRymI9UPaDYgTN
-----END CERTIFICATE-----
Generated at Wed May 13 01:45:04 2026 by rpki-client