Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa
File:                     3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (raw, json)
Hash identifier:          uOtz6g5qg2b0Mq9y0JcqpA7Deerz3gBwTjwNnKYf7wM=
Subject key identifier:   AB:7C:96:E2:85:10:5F:20:F9:91:C6:DF:B7:AF:3E:70:B0:BF:1D:96
Certificate issuer:       /CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
Certificate serial:       24F675E42128543A98E7C8EE2C7FE6F84AC524AB
Authority key identifier: 62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa
Signing time:             Sun 03 May 2026 02:39:08 +0000
ROA not before:           Sun 03 May 2026 02:34:08 +0000
ROA not after:            Sun 02 May 2027 02:39:08 +0000
asID:                     45725
IP address blocks:        103.245.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl
                          rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f6:75:e4:21:28:54:3a:98:e7:c8:ee:2c:7f:e6:f8:4a:c5:24:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62258C46C7EEF9427331E24A2D1EB9B699C68A9E
        Validity
            Not Before: May  3 02:34:08 2026 GMT
            Not After : May  2 02:39:08 2027 GMT
        Subject: CN=AB7C96E285105F20F991C6DFB7AF3E70B0BF1D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ab:d2:c8:15:88:cd:e1:9d:d1:c3:a3:c2:c8:
                    8c:87:89:51:cc:8d:5a:6b:69:a1:80:25:4f:ad:82:
                    b5:48:36:de:48:7e:ed:2f:ab:9c:9a:d3:47:43:3f:
                    b1:88:aa:9c:3a:b3:26:e4:eb:b9:9a:6f:27:13:24:
                    38:78:a1:ed:2a:22:2b:66:5e:0a:fe:c7:6b:63:3e:
                    b0:b0:45:ff:45:d8:ad:64:8a:d3:fa:5f:22:80:f7:
                    15:75:8e:e2:9b:35:da:3d:68:3c:b4:e0:64:63:0f:
                    8b:31:89:3e:c9:91:e5:5c:78:19:67:ed:fa:c5:ff:
                    a9:4f:d6:d8:2c:77:c4:9c:d6:9b:46:c3:16:f3:6a:
                    7d:ab:d3:eb:a7:1c:9c:b9:99:71:06:b1:03:ef:65:
                    67:02:e7:5a:df:3f:44:2d:e3:6c:dd:95:d3:c3:ad:
                    5d:01:54:d2:40:d9:b5:09:e8:b6:37:f7:c8:d8:bd:
                    8b:71:c3:3d:80:ee:9f:72:07:f0:c7:15:70:f6:37:
                    a8:82:50:62:79:eb:2f:78:2c:14:1f:e3:ac:83:0c:
                    24:b9:b3:a2:fa:e1:bd:2a:f1:d3:88:14:67:c8:c9:
                    4e:7b:82:84:85:c4:2d:fd:f3:0f:88:97:6f:35:4b:
                    48:d5:1d:5d:ad:bf:68:82:aa:25:4b:4f:ba:b1:a3:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:96:E2:85:10:5F:20:F9:91:C6:DF:B7:AF:3E:70:B0:BF:1D:96
            X509v3 Authority Key Identifier:
                keyid:62:25:8C:46:C7:EE:F9:42:73:31:E2:4A:2D:1E:B9:B6:99:C6:8A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/62258C46C7EEF9427331E24A2D1EB9B699C68A9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:45:1b:67:15:f5:70:4c:cb:f0:6d:5a:50:4d:ae:e2:2e:
         c4:02:ca:8d:57:ab:05:e6:3f:59:59:0e:13:ff:38:ca:91:e9:
         43:76:0d:2b:b4:81:c1:dd:78:86:3a:9d:c3:49:7d:1e:de:1e:
         82:f5:e2:1a:4f:36:25:da:01:ed:4c:82:cf:b7:07:fc:e0:68:
         e6:98:c0:e4:a6:e2:ce:0e:40:1c:cb:83:ab:9d:bb:a7:e3:96:
         87:19:16:f5:45:68:85:62:9d:1c:9a:6e:b8:0e:41:a4:b7:b3:
         4d:b5:4f:6d:21:e7:f5:2a:fd:24:af:85:c3:83:14:76:01:38:
         06:44:b9:a4:26:11:44:13:38:01:53:1f:16:30:8c:67:6c:d8:
         49:ff:c0:42:b7:15:18:5a:76:9a:45:ce:ec:bb:26:5b:93:94:
         23:e5:2b:e2:c4:9c:dd:f9:97:41:99:81:2d:b4:29:86:c8:e2:
         36:03:82:a7:2c:97:8a:69:52:fd:28:29:67:9e:17:39:9d:d9:
         9b:b7:0a:e2:56:c4:1d:86:1d:71:ab:d2:c2:b2:6e:9b:92:46:
         ba:77:f0:30:9d:e4:0a:1d:6c:d0:25:f7:b4:3e:8f:ad:a3:f6:
         ae:ac:a6:3d:a4:1e:4e:b5:52:87:6f:1e:ef:78:4d:3f:ec:0f:
         bf:d1:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:43 2026 by rpki-client