Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa
File:                     3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier:          jbUXyMJGAUe8ArHS1H74yui1bmkFdiNku010i13gDLM=
Subject key identifier:   FD:43:88:EB:7C:3E:CE:34:E9:52:64:96:5C:75:BF:02:63:9E:D7:67
Certificate issuer:       /CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA
Certificate serial:       05B17ACA4B70CF0AD8B9E12EEA037AAA1227EA59
Authority key identifier: 9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa
Signing time:             Sun 03 May 2026 02:29:08 +0000
ROA not before:           Sun 03 May 2026 02:24:08 +0000
ROA not after:            Sun 02 May 2027 02:29:08 +0000
asID:                     139419
IP address blocks:        103.43.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl
                          rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:53:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b1:7a:ca:4b:70:cf:0a:d8:b9:e1:2e:ea:03:7a:aa:12:27:ea:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA
        Validity
            Not Before: May  3 02:24:08 2026 GMT
            Not After : May  2 02:29:08 2027 GMT
        Subject: CN=FD4388EB7C3ECE34E95264965C75BF02639ED767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:10:67:18:36:d7:46:53:86:57:c6:72:1f:
                    99:c7:a7:2d:77:9c:79:78:f6:3e:ca:02:a6:54:d8:
                    49:a8:b8:5e:6b:cd:1e:15:bf:73:39:e2:cc:f0:80:
                    26:f0:99:28:8d:24:5e:3b:89:fa:c9:1c:e5:4a:57:
                    bb:03:9e:68:3a:ba:75:97:29:41:ae:0c:2d:27:16:
                    cb:e8:05:d4:90:96:d2:01:48:12:62:c8:92:d2:07:
                    fa:27:86:41:0f:76:f6:3b:ac:b0:6c:73:19:10:98:
                    09:0b:04:19:e9:74:1c:8d:69:79:97:4e:df:ea:a3:
                    d2:6c:b8:86:6d:5c:8e:08:3d:fd:d2:38:50:54:1c:
                    c3:f3:b3:1a:a8:c8:66:17:d6:a7:09:5c:dc:cb:81:
                    b2:55:f0:cf:0e:8f:e4:7a:ce:51:9f:b7:6f:43:a2:
                    23:f2:ef:8e:52:23:6e:74:4a:78:10:57:e9:94:3c:
                    3c:a9:03:ca:f0:c0:8a:51:24:c6:20:13:09:9f:3c:
                    1c:7b:60:f8:a2:4b:29:df:3d:6a:bc:b7:72:94:01:
                    3d:46:d0:52:a1:9f:fd:ed:a9:ef:34:db:c6:a9:f8:
                    c1:cb:43:8e:69:f1:40:32:8e:e1:aa:77:82:e6:38:
                    8a:b8:16:2d:8f:2e:5d:e0:21:04:f8:de:9b:24:b9:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:88:EB:7C:3E:CE:34:E9:52:64:96:5C:75:BF:02:63:9E:D7:67
            X509v3 Authority Key Identifier:
                keyid:9B:61:7E:3E:89:75:C5:E8:37:FD:E8:E7:E3:A6:F7:F2:B0:7D:F2:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9B617E3E8975C5E837FDE8E7E3A6F7F2B07DF2FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/3130332e34332e32352e302f32342d3234203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:10:18:55:07:7f:f2:4a:cb:8f:d5:9a:bd:5e:f0:21:c4:58:
         d0:42:64:60:58:7c:2a:8b:78:80:2b:e8:73:33:7c:fe:d8:46:
         88:64:e7:42:93:e3:0f:fd:30:fc:df:ba:02:e2:49:e5:b6:e3:
         8d:b8:c5:5a:23:19:db:e3:e4:42:d6:1e:db:7a:3e:ee:b9:49:
         fe:be:f9:2a:e2:d8:ee:78:6e:15:74:e0:20:fb:7b:51:13:34:
         6d:2b:65:9b:b9:32:6f:18:76:e7:6f:31:e2:c9:72:c5:71:25:
         4f:cd:58:fd:19:06:6c:71:f9:d2:0f:7a:c6:86:2c:04:68:5e:
         af:a3:5a:a5:31:74:13:58:a0:a8:2e:02:58:b4:32:85:d4:1a:
         ba:6b:b8:4f:24:5c:74:8e:15:b7:89:48:79:13:3e:e4:f0:c1:
         72:8b:3f:5d:06:d1:b9:48:c5:ca:65:5a:c8:22:dd:f3:20:6b:
         4f:62:66:71:40:ea:8d:d2:95:99:36:2c:fb:d9:58:6d:b2:98:
         92:93:e2:c4:40:75:3c:22:f8:75:13:6a:5d:cb:0f:3f:c9:30:
         c0:8c:bf:e6:84:b1:18:fe:15:1e:77:5a:00:16:2f:77:f4:40:
         dd:54:4b:73:a7:85:1a:a4:f2:44:76:9d:ea:53:24:60:b7:17:
         45:ca:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:48 2026 by rpki-client