Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa
File:                     3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (raw, json)
Hash identifier:          rJymyxqg0yYd/qLogMjBNWCI6Y2pRs8774lc/fbXKrw=
Subject key identifier:   51:B8:0A:0D:B7:8A:09:F7:DA:DF:2C:9B:81:15:0D:5B:5A:21:58:5C
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       2DE1969914DAA229BEF812A486C2639C955C8EE3
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:16 +0000
ROA not before:           Sun 03 May 2026 02:34:16 +0000
ROA not after:            Sun 02 May 2027 02:39:16 +0000
asID:                     45725
IP address blocks:        103.245.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e1:96:99:14:da:a2:29:be:f8:12:a4:86:c2:63:9c:95:5c:8e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:16 2026 GMT
            Not After : May  2 02:39:16 2027 GMT
        Subject: CN=51B80A0DB78A09F7DADF2C9B81150D5B5A21585C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d8:9d:e7:4e:d2:9a:0d:57:e0:23:fb:9c:dc:
                    b1:13:13:4b:45:b7:c6:fe:3e:07:c8:d2:96:91:b9:
                    09:41:41:a8:96:d6:70:7c:ed:8a:41:fc:e3:7a:89:
                    ad:39:a0:01:c1:06:cc:4c:84:12:7b:ae:0c:8a:45:
                    02:fe:c6:2e:5f:14:2b:8e:da:bb:b6:71:01:8f:13:
                    71:68:48:89:2b:7f:f2:6e:23:39:01:1e:06:05:fe:
                    1f:f4:bc:f3:b5:93:74:5b:70:a1:62:1e:84:d9:77:
                    40:f4:b5:6e:3b:8d:d7:76:63:d9:d9:1a:b4:b3:49:
                    5f:e6:5a:33:a6:b1:8d:4f:00:de:1b:f0:b3:db:de:
                    57:6d:6f:a5:14:9b:b3:1d:6f:5b:9f:05:c0:d3:59:
                    18:7d:da:28:fa:b9:e8:09:aa:83:e8:28:6e:1d:3b:
                    0f:39:0d:cf:5c:21:f7:a8:05:92:da:a1:a5:70:48:
                    7b:b0:d7:9b:a4:74:4f:7c:e7:8a:bb:14:35:c6:35:
                    e7:b3:c4:87:f0:d4:ec:d6:84:79:40:bc:45:3f:26:
                    67:2f:6a:ef:2b:61:d2:d2:8a:ed:f5:e5:56:e8:04:
                    bd:fd:97:ab:1b:90:83:61:59:d2:91:ae:bb:ed:37:
                    a2:77:e2:83:7d:01:bc:f1:20:ab:a7:d6:48:64:5a:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B8:0A:0D:B7:8A:09:F7:DA:DF:2C:9B:81:15:0D:5B:5A:21:58:5C
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:94:f7:b1:53:28:bb:64:d4:03:5f:de:1e:be:89:3a:00:82:
         1a:74:3a:e6:9a:10:a2:c4:df:29:98:1b:2d:96:2f:89:07:c6:
         59:c8:ed:95:fe:79:43:65:e3:43:84:a1:b7:c9:01:49:15:7d:
         6d:82:27:ba:71:30:99:a6:eb:dd:09:53:f5:ac:09:6a:68:1a:
         b0:22:54:6e:6c:24:07:33:b9:9a:2c:d9:ad:8f:42:fe:86:5b:
         c4:bf:c1:be:a4:95:79:d9:81:c1:e2:e8:b3:2e:f5:c9:50:41:
         82:b3:d4:34:7f:a1:7b:22:ea:55:64:e1:2b:1a:7f:98:a1:40:
         7c:03:f4:e7:5a:93:3b:54:5a:cc:50:3a:0e:9d:28:81:cd:72:
         52:9d:ba:47:2b:43:67:ca:c9:fa:21:d9:9e:a2:87:b1:56:0c:
         ce:34:20:11:76:92:b1:76:a2:5e:1c:62:25:00:db:a3:5e:8a:
         83:e9:cd:09:74:a8:95:af:d2:92:02:bb:21:59:b4:2b:6d:03:
         63:b8:8e:d7:fe:ab:8c:fc:f4:91:e8:2a:19:8f:bc:c1:75:ec:
         b2:10:c4:e4:63:50:ec:ee:97:3c:ff:5f:51:eb:de:1b:6c:01:
         1a:1c:27:a4:be:93:bf:7c:2b:1e:00:8d:33:91:ba:41:44:25:
         d7:65:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:35 2026 by rpki-client