Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa
File:                     3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (raw, json)
Hash identifier:          Yu7TLcR1tuusuhDSrYnM4of9BN5qOWkNLvH5+MvtCeE=
Subject key identifier:   D8:7C:40:9E:3F:37:16:FE:41:52:D4:F8:57:86:F3:56:79:C7:50:C7
Certificate issuer:       /CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
Certificate serial:       0575245E1A9818B52392D3E860D856F8A21C1DEE
Authority key identifier: 2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa
Signing time:             Sun 03 May 2026 02:27:43 +0000
ROA not before:           Sun 03 May 2026 02:22:43 +0000
ROA not after:            Sun 02 May 2027 02:27:43 +0000
asID:                     150233
IP address blocks:        103.71.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl
                          rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:75:24:5e:1a:98:18:b5:23:92:d3:e8:60:d8:56:f8:a2:1c:1d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED
        Validity
            Not Before: May  3 02:22:43 2026 GMT
            Not After : May  2 02:27:43 2027 GMT
        Subject: CN=D87C409E3F3716FE4152D4F85786F35679C750C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:1e:55:46:a2:f2:09:7c:ed:ea:36:d2:13:
                    ac:15:e8:5c:d9:b8:eb:36:04:1b:16:45:0e:70:49:
                    53:9f:a0:88:37:4a:c7:99:3d:bb:1b:e9:73:fb:39:
                    79:81:0c:59:2d:47:7a:4f:d0:1c:ff:78:b2:b4:69:
                    bf:1e:b7:f9:3a:72:66:8b:d6:d4:33:9e:60:8a:5f:
                    b7:a2:65:4a:db:6b:cc:68:63:d2:e0:79:e7:56:ae:
                    58:f6:30:2b:d9:b5:7f:15:57:ab:c5:ba:54:10:49:
                    19:60:c3:a4:31:13:09:9c:73:d4:e7:35:e4:c4:85:
                    86:51:2b:65:75:7d:91:2c:97:b3:95:24:fd:51:62:
                    e0:ec:c9:c4:fd:e5:21:41:28:fb:e0:08:d5:36:ae:
                    b1:8d:6b:3d:0a:37:c5:b1:60:46:6b:d1:b8:a7:86:
                    29:b0:df:b4:3e:19:86:85:72:1a:4b:82:b5:6d:f7:
                    83:53:8c:02:c0:3a:e7:3a:4f:1f:0a:5e:6f:b9:d0:
                    9f:02:b6:a0:2f:13:77:de:8e:ff:9d:9e:71:2c:25:
                    e3:92:e6:3f:92:49:55:02:71:8e:1f:3e:b6:23:88:
                    6f:54:81:c2:d5:6e:b0:85:37:8c:3a:21:a2:24:9b:
                    e5:af:4d:ee:9b:e3:50:ea:50:40:e7:d7:45:1b:96:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7C:40:9E:3F:37:16:FE:41:52:D4:F8:57:86:F3:56:79:C7:50:C7
            X509v3 Authority Key Identifier:
                keyid:2A:C4:B9:21:8D:44:A8:AF:6A:89:3D:00:D5:F2:8F:34:AD:B8:3E:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2AC4B9218D44A8AF6A893D00D5F28F34ADB83EED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/3130332e37312e32352e302f32342d3234203d3e20313530323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:fc:cb:8a:9e:cd:84:c9:f9:82:2d:81:c4:b4:9e:9a:8b:
         6c:c3:31:3a:68:ee:5d:11:35:ff:55:a4:50:ca:6c:16:3d:71:
         62:b2:9f:87:4d:7c:95:80:d8:70:79:b1:94:25:39:9d:b3:94:
         ab:dd:a7:d2:3c:dc:c0:c6:b8:8d:1d:50:cf:85:1a:c2:51:17:
         cb:ba:c8:8d:28:8f:04:d1:48:03:1a:fb:1e:60:e9:46:f0:bb:
         df:d7:ab:50:86:d3:8b:48:56:7a:3f:86:84:c5:b1:5b:23:80:
         9e:6b:40:9f:eb:6d:60:7b:5e:f2:74:ad:d1:44:1b:19:fd:97:
         e7:da:60:06:2e:9e:93:68:0c:dd:c5:7f:3d:3e:99:bf:36:81:
         0c:c2:12:f2:86:e8:69:03:70:2a:1b:0d:9d:1e:ac:12:3e:27:
         ff:06:7d:67:a5:92:4a:0d:0d:de:04:14:3a:bf:d0:bf:40:65:
         38:ba:4e:3b:2f:b5:77:42:28:72:65:fa:29:56:19:bb:4c:e5:
         09:00:f5:7b:dd:cb:c7:48:f8:89:b8:41:09:b0:d9:6b:c1:79:
         40:60:4f:60:a5:e5:ce:04:31:72:96:eb:55:ef:4b:c0:7d:62:
         22:e9:91:58:e3:21:aa:5d:1d:1c:16:17:fc:87:a4:5f:8f:5b:
         52:ce:3f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:44 2026 by rpki-client