Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa
File:                     3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (raw, json)
Hash identifier:          PWHfuvJISm/0HGRYS1rgkQyVd8LnOVyJKU3uYwSY5nY=
Subject key identifier:   7C:26:DF:79:FB:2B:79:97:00:69:92:2C:3F:EC:EE:58:A7:FB:97:7F
Certificate issuer:       /CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
Certificate serial:       1B07060738250043B2B07ED056AEB5F467946A6B
Authority key identifier: EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa
Signing time:             Sun 03 May 2026 02:27:51 +0000
ROA not before:           Sun 03 May 2026 02:22:51 +0000
ROA not after:            Sun 02 May 2027 02:27:51 +0000
asID:                     140025
IP address blocks:        103.149.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl
                          rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:07:06:07:38:25:00:43:b2:b0:7e:d0:56:ae:b5:f4:67:94:6a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EECD640133988CFFC0BF1D58079BA5921C041DB9
        Validity
            Not Before: May  3 02:22:51 2026 GMT
            Not After : May  2 02:27:51 2027 GMT
        Subject: CN=7C26DF79FB2B79970069922C3FECEE58A7FB977F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b0:6a:e9:37:5f:51:0f:34:73:bd:a0:fa:0c:
                    0a:e0:ab:c9:09:cb:b4:aa:db:4a:0f:38:0b:fb:66:
                    45:15:4c:f2:b8:28:7f:ed:01:d8:d8:be:a8:97:ad:
                    cb:a4:b4:80:81:a4:b5:ee:b6:a6:5b:3e:69:84:37:
                    ea:97:c9:f1:68:dc:01:2f:c3:d1:f0:24:e6:28:69:
                    01:ea:0d:27:c0:b9:7e:53:2d:80:2e:62:69:3e:40:
                    19:db:5d:cf:ee:6b:9b:07:10:0e:8b:3e:ca:32:7e:
                    e4:d1:e4:97:25:1a:49:d9:37:b0:61:d2:18:b9:0e:
                    ba:c8:39:12:e5:f4:ec:e4:93:ed:bb:a0:94:79:45:
                    21:76:4f:8b:9f:a1:b7:6a:f8:64:1b:1d:a5:4a:2b:
                    80:2e:99:cb:85:a4:ee:44:88:56:1c:0d:64:2b:5d:
                    56:42:a1:d2:27:1e:a3:9c:1b:7d:92:be:25:7c:89:
                    cd:c9:a7:c7:ec:78:ab:b2:65:56:dd:d9:c4:6b:6b:
                    46:da:c6:ed:78:55:65:05:a5:64:48:4d:f8:be:99:
                    67:1c:4e:d6:69:b4:8d:70:2e:75:f7:0e:6a:73:a3:
                    49:81:39:0c:3d:71:73:03:17:d3:21:be:74:81:d7:
                    0e:f9:b4:0b:eb:42:b9:46:12:01:18:0a:ea:c9:25:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:26:DF:79:FB:2B:79:97:00:69:92:2C:3F:EC:EE:58:A7:FB:97:7F
            X509v3 Authority Key Identifier:
                keyid:EE:CD:64:01:33:98:8C:FF:C0:BF:1D:58:07:9B:A5:92:1C:04:1D:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/EECD640133988CFFC0BF1D58079BA5921C041DB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EECD640133988CFFC0BF1D58079BA5921C041DB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:7a:23:96:77:91:25:1e:b1:d9:21:d4:1a:a4:28:8f:f3:14:
         c2:1c:98:4f:7f:d2:17:9f:78:cf:fd:9e:4f:d5:c5:ea:18:20:
         dd:41:e6:a4:af:35:30:63:38:02:8a:f2:53:38:13:54:ef:33:
         14:63:67:d4:1f:f5:1d:7c:d0:90:e1:4c:33:bd:9c:75:e4:a0:
         88:2c:33:68:94:95:50:05:b7:49:49:cd:63:a1:5b:51:e8:1b:
         dd:b8:be:02:a6:6f:99:6b:fd:c4:3e:69:47:a5:86:d4:10:b8:
         c2:0a:c5:d2:df:90:35:0d:38:99:5e:20:61:a4:f5:51:91:59:
         79:7e:41:91:ee:a0:b7:a2:49:b4:cf:b8:cc:7f:b9:61:6e:d0:
         e9:65:74:51:fc:3d:8c:c4:b4:eb:05:55:8f:4c:d9:e8:33:8f:
         41:5c:f9:53:ed:d6:1a:85:b1:f5:55:85:38:b6:32:32:39:92:
         d5:ac:c5:51:31:43:43:2f:f2:c3:6d:dd:26:ff:c4:85:cd:18:
         ae:97:fd:a3:d8:d8:ea:90:74:54:a8:ee:96:85:4d:69:d9:0e:
         c3:3d:1a:c2:f0:39:9a:3f:20:b6:03:83:de:13:59:d7:fc:4e:
         0b:46:dd:be:31:0d:6d:7e:ed:78:ec:41:43:1a:34:b3:38:2f:
         48:f7:0a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:57:59 2026 by rpki-client