Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa
File:                     3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (raw, json)
Hash identifier:          NNCIDLB8B5pgD36GvRtcI/+uQ+zL1+/NCHRLyabCKqA=
Subject key identifier:   CE:7B:0E:1E:07:F2:83:21:AE:85:01:67:AA:DC:65:E4:B0:DE:DB:4A
Certificate issuer:       /CN=7445E0A188A89312C5454C032583053AC7510B2E
Certificate serial:       166825924B8453B87E1B4388A465B654578A022D
Authority key identifier: 74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa
Signing time:             Sun 03 May 2026 02:19:39 +0000
ROA not before:           Sun 03 May 2026 02:14:39 +0000
ROA not after:            Sun 02 May 2027 02:19:39 +0000
asID:                     150247
IP address blocks:        103.189.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl
                          rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:68:25:92:4b:84:53:b8:7e:1b:43:88:a4:65:b6:54:57:8a:02:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7445E0A188A89312C5454C032583053AC7510B2E
        Validity
            Not Before: May  3 02:14:39 2026 GMT
            Not After : May  2 02:19:39 2027 GMT
        Subject: CN=CE7B0E1E07F28321AE850167AADC65E4B0DEDB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:10:5b:7b:d9:de:17:53:dd:bf:88:b5:4e:
                    44:1f:c2:c6:74:f6:a6:f1:7c:fd:c0:74:f0:99:01:
                    24:92:c8:72:10:be:98:5e:69:5d:ee:f3:12:5d:2e:
                    a1:6b:23:53:f7:03:d7:2a:a3:51:57:cd:a5:cc:ae:
                    b8:bc:42:46:2d:ea:5b:06:47:7a:cb:06:f3:9d:dc:
                    da:6c:8a:6b:97:16:49:01:ff:25:f4:a8:2e:30:79:
                    ae:0c:13:90:09:e9:ae:19:6f:96:cf:d5:90:92:98:
                    fd:cd:bf:87:ab:b6:52:c2:01:d6:e6:90:f9:e6:cf:
                    de:12:78:3a:1d:5a:7e:cf:02:a6:99:37:5a:2b:55:
                    46:8e:cd:13:85:48:7c:fb:76:ce:b9:59:e2:f5:3b:
                    85:73:f1:c1:0b:7e:b7:21:62:35:1c:87:97:4e:a3:
                    f9:37:b5:58:65:ff:55:ab:3c:d4:47:6f:fa:57:fe:
                    3b:c2:3f:08:9b:25:b2:cc:c9:57:be:09:88:ea:e1:
                    76:05:6e:6c:76:0d:52:78:3a:83:30:80:f7:45:2e:
                    7c:a2:a7:f9:c4:b2:ef:21:a9:4b:cc:93:a8:be:87:
                    26:70:88:eb:93:e9:5a:b6:0b:77:b7:f0:ea:2f:b7:
                    07:44:0e:10:a9:6b:24:c8:dc:09:d3:f6:83:9c:0d:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7B:0E:1E:07:F2:83:21:AE:85:01:67:AA:DC:65:E4:B0:DE:DB:4A
            X509v3 Authority Key Identifier:
                keyid:74:45:E0:A1:88:A8:93:12:C5:45:4C:03:25:83:05:3A:C7:51:0B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/7445E0A188A89312C5454C032583053AC7510B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7445E0A188A89312C5454C032583053AC7510B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:1f:e3:b1:63:b4:e1:33:ef:2e:e0:17:d3:8a:54:8b:d9:bd:
         0f:9c:cd:0c:38:5c:63:a6:35:b0:07:21:d2:24:5f:b1:8d:a6:
         6a:67:3c:ce:2b:16:32:78:b1:07:1c:74:69:26:4f:50:71:4b:
         b6:05:19:63:bf:9c:c0:a7:80:26:54:7f:42:1b:82:12:a5:1f:
         31:e2:c3:0f:04:45:4d:6c:89:43:22:30:26:41:2e:19:a0:8a:
         7e:55:97:7a:c8:53:27:94:07:e2:f5:2d:5d:9d:17:46:82:04:
         ee:8b:e0:36:db:a1:ef:34:5a:07:2d:d1:71:b2:8a:3b:91:92:
         53:41:b6:6b:85:de:f7:fd:67:b4:7f:3a:42:1a:9c:8e:c0:9a:
         28:e6:33:65:a5:6c:06:dd:fe:72:bb:e6:ec:80:71:8d:79:3e:
         78:77:89:a2:eb:33:d8:24:d7:ba:6b:8d:d9:e7:6f:3f:4c:07:
         98:5c:b4:ef:19:7e:e9:5c:04:27:6c:d0:3f:ca:78:a4:3c:2e:
         12:49:65:69:40:d0:53:5c:f9:e5:22:9d:a5:57:2c:c0:79:44:
         81:48:bd:b6:eb:f5:8b:61:7d:4a:c6:76:8e:a7:3c:01:74:1a:
         47:ec:a1:c3:60:4e:bf:ff:c5:65:60:b6:63:0d:81:2e:da:eb:
         ff:09:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:58 2026 by rpki-client