Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa
File:                     3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa (raw, json)
Hash identifier:          mS9PRPKBDmGv104t2c/uWFhRF9qgpc8OIooHFMXaEg4=
Subject key identifier:   3C:1E:9D:AE:99:CE:F2:DF:1B:BA:46:07:D0:0E:B6:66:8E:9C:AE:CA
Certificate issuer:       /CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
Certificate serial:       68C88F1E7DBEF70F5493DEE45FFD781F96498D40
Authority key identifier: CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa
Signing time:             Sun 03 May 2026 02:48:34 +0000
ROA not before:           Sun 03 May 2026 02:43:34 +0000
ROA not after:            Sun 02 May 2027 02:48:34 +0000
asID:                     139432
IP address blocks:        103.225.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl
                          rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c8:8f:1e:7d:be:f7:0f:54:93:de:e4:5f:fd:78:1f:96:49:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE866CA7A48F4270D861141E8DB83F09E2EF39F6
        Validity
            Not Before: May  3 02:43:34 2026 GMT
            Not After : May  2 02:48:34 2027 GMT
        Subject: CN=3C1E9DAE99CEF2DF1BBA4607D00EB6668E9CAECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:14:5d:02:5e:98:4b:4c:8f:70:59:a4:10:
                    da:59:c9:5a:0f:3a:3a:f5:61:ec:52:68:d3:55:a3:
                    10:a8:58:b1:95:58:b3:81:bb:e5:57:f9:01:d0:6c:
                    01:18:b0:b0:7c:4a:5f:45:be:35:38:12:db:f6:51:
                    10:ef:20:b7:81:80:a9:78:2b:cf:02:f2:e0:32:b6:
                    43:89:ad:22:a0:70:31:04:f3:9c:fb:cf:08:7c:c4:
                    83:70:60:66:eb:10:2d:01:54:ab:11:73:c4:bc:b9:
                    3d:40:70:a5:05:7d:47:0a:e4:47:38:56:6d:cf:95:
                    89:b8:2f:af:d3:21:25:99:05:9c:ee:6a:72:8d:55:
                    00:e5:f5:d8:8d:f2:e0:a8:42:a9:7c:22:87:89:26:
                    ab:7c:05:16:ce:c4:d4:c3:bf:0b:bd:69:12:22:a8:
                    43:a1:0d:a6:52:72:96:f0:09:27:bd:43:9c:3c:7c:
                    f7:c6:a6:2a:ec:36:8d:a8:14:51:2d:c9:df:38:94:
                    93:e6:94:0f:a1:09:80:72:2f:b0:81:9e:c6:f4:53:
                    a1:b6:4b:58:84:b5:9b:66:3b:bd:fc:43:12:9a:31:
                    86:b5:9d:6d:23:47:54:61:6a:b7:b3:9e:a3:62:82:
                    38:3a:c2:2e:be:4b:80:f2:96:2d:af:45:6e:ea:de:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:9D:AE:99:CE:F2:DF:1B:BA:46:07:D0:0E:B6:66:8E:9C:AE:CA
            X509v3 Authority Key Identifier:
                keyid:CE:86:6C:A7:A4:8F:42:70:D8:61:14:1E:8D:B8:3F:09:E2:EF:39:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CE866CA7A48F4270D861141E8DB83F09E2EF39F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e3232352e39372e302f32342d3234203d3e20313339343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:62:0d:6b:1b:9f:8c:88:14:03:9f:c8:d4:e9:43:49:7a:44:
         9c:ef:0f:98:17:fd:13:50:b6:81:75:a2:d4:8a:52:d0:88:39:
         fe:a8:75:86:2f:c6:5f:f6:c6:97:80:b6:de:53:06:c3:0b:e7:
         76:d3:86:2b:6b:86:e5:c6:08:2a:be:b2:da:f5:f3:4f:df:ed:
         41:25:bb:75:a2:67:35:41:d3:80:39:4d:a6:c4:d1:8d:cf:3c:
         71:f7:6a:a7:a1:d6:0b:3c:35:15:e8:44:0e:43:1f:d6:67:ed:
         2c:d0:76:c8:8d:ee:d4:3a:3c:3c:0f:db:3f:ec:8c:2d:83:92:
         fd:a0:c9:8b:41:ae:e4:8e:ec:28:a7:6b:7f:d4:0a:3e:89:13:
         db:bd:84:c9:c8:2e:a2:75:e0:35:cf:bf:64:d3:98:f0:1b:cb:
         9a:15:59:63:4c:ce:ed:5d:09:cf:28:94:f3:57:98:0d:d1:ca:
         1c:23:6c:ec:2a:7a:20:9d:a7:c8:af:9d:c9:6a:b2:78:63:99:
         d7:b6:cc:0a:6f:2b:79:15:97:b6:0b:7a:21:20:9c:29:a0:4b:
         f6:cd:a8:a0:31:2e:50:ba:bf:75:10:a1:ba:84:d1:cb:8c:40:
         c1:13:9d:e4:51:7a:40:9e:62:7e:16:91:47:82:4b:f7:0b:6a:
         6d:d9:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:38 2026 by rpki-client