Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          VEdnUCKoac/4e3F+B8uGYgqASxpfvU2DOLkdnZz4anY=
Subject key identifier:   C6:CB:A7:54:F7:48:A3:BC:31:A1:F4:84:81:83:22:0E:52:42:C5:1E
Certificate issuer:       /CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579
Certificate serial:       544039A6B6344AE745AD2B9D9FE954DABD30C681
Authority key identifier: 92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 03 May 2026 02:41:44 +0000
ROA not before:           Sun 03 May 2026 02:36:44 +0000
ROA not after:            Sun 02 May 2027 02:41:44 +0000
asID:                     139952
IP address blocks:        103.175.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl
                          rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 16:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:40:39:a6:b6:34:4a:e7:45:ad:2b:9d:9f:e9:54:da:bd:30:c6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579
        Validity
            Not Before: May  3 02:36:44 2026 GMT
            Not After : May  2 02:41:44 2027 GMT
        Subject: CN=C6CBA754F748A3BC31A1F4848183220E5242C51E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:2d:7c:67:d2:71:63:ee:2c:42:3d:10:3d:
                    96:65:3a:9d:d1:87:e5:ef:63:34:a3:9e:77:bc:a1:
                    55:a4:57:46:c2:a6:d1:cb:bf:c1:3f:50:d5:5a:23:
                    df:32:0e:88:1f:44:1f:4e:55:34:0b:6f:bf:62:ad:
                    d2:43:1a:33:61:35:94:ba:9e:00:d6:ab:f5:f5:e1:
                    db:92:84:4a:78:1e:99:f0:14:9c:45:2c:93:92:bc:
                    22:2c:8b:f7:5c:c3:e1:c0:3b:ec:f6:cd:92:21:89:
                    5a:17:2c:53:c8:8f:00:c9:9b:2a:38:94:00:60:4d:
                    9d:ca:5e:2a:d7:06:be:6b:61:c1:b8:c4:70:41:52:
                    c3:7a:2e:52:8d:93:da:cc:d4:65:6e:85:b6:86:98:
                    29:9f:a4:7f:05:3e:2d:61:d1:84:93:98:57:5c:74:
                    8a:00:67:82:cf:17:92:e7:25:90:b1:60:8a:3d:23:
                    a0:4d:56:70:33:21:8d:0e:c5:32:fa:ec:9f:82:eb:
                    b2:4a:9a:ce:f2:44:f7:63:d0:95:f1:7a:07:3a:2d:
                    06:2b:d1:6d:f0:20:11:28:98:6c:0c:0d:98:5f:d3:
                    2f:a4:09:3a:09:81:4d:bf:df:59:af:f5:00:17:89:
                    fb:2a:ad:23:a9:b8:cc:94:00:be:5f:cf:8b:79:9d:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CB:A7:54:F7:48:A3:BC:31:A1:F4:84:81:83:22:0E:52:42:C5:1E
            X509v3 Authority Key Identifier:
                keyid:92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ab:4c:e1:3f:62:bc:fe:27:eb:c7:6f:59:2e:90:23:cc:de:
         42:62:fa:9a:08:cb:e7:3c:f8:56:f3:cf:26:dd:97:3b:eb:47:
         10:d0:5d:a0:0e:e3:46:ca:34:42:36:de:bf:f2:f0:4c:5d:7c:
         44:4f:88:ef:5c:d7:bb:0f:f5:e9:79:6f:04:3e:fb:68:bd:f8:
         ad:74:71:53:99:32:91:9f:bc:86:fa:66:ea:90:74:1f:3c:31:
         60:3b:fa:5d:b4:05:1b:2e:bb:9e:65:fb:a1:d3:3a:9e:1f:db:
         67:be:ea:64:4e:7f:dc:a0:48:da:9e:da:79:08:6c:4c:fc:bd:
         d1:bd:e4:65:46:29:fd:49:24:ec:5b:d2:a6:d0:2a:19:16:6c:
         77:23:5e:c6:b9:fa:32:d2:db:d0:02:93:5b:aa:b2:33:17:8a:
         72:8c:48:2c:c2:2f:ee:1f:a5:e8:42:88:51:ca:c6:58:0a:9f:
         ce:35:9c:c6:81:22:e7:45:48:8c:6c:cd:02:51:46:f9:0c:28:
         b2:d2:d6:64:5f:27:77:b2:32:e4:22:56:00:9f:31:9f:6e:16:
         16:50:22:d1:38:c4:50:b9:62:0b:ed:2b:66:09:d1:1d:d3:44:
         45:b4:e2:d9:53:2e:61:c0:0d:35:1f:06:b1:e1:9f:14:0b:c2:
         da:b8:56:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:43 2026 by rpki-client