Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa
File:                     3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (raw, json)
Hash identifier:          4cPVakwVMjFAfG7saToZJr0gJzWEaBpwBZY2LPcL9EA=
Subject key identifier:   A4:6A:F2:B6:DC:4A:12:CB:10:66:07:62:8E:84:5D:B1:95:5C:40:3F
Certificate issuer:       /CN=0356312D4CC6591488396D24CA6010583AD5DEE8
Certificate serial:       77F0DFD19FC2220E6AB0B44725ABE9EB00B18FD9
Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa
Signing time:             Sun 03 May 2026 02:51:37 +0000
ROA not before:           Sun 03 May 2026 02:46:37 +0000
ROA not after:            Sun 02 May 2027 02:51:37 +0000
asID:                     138102
IP address blocks:        103.125.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl
                          rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f0:df:d1:9f:c2:22:0e:6a:b0:b4:47:25:ab:e9:eb:00:b1:8f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8
        Validity
            Not Before: May  3 02:46:37 2026 GMT
            Not After : May  2 02:51:37 2027 GMT
        Subject: CN=A46AF2B6DC4A12CB106607628E845DB1955C403F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:72:be:a0:97:33:07:c3:27:68:cb:ef:d5:
                    06:13:b4:72:2a:70:3f:02:69:37:ab:e5:1d:c8:98:
                    ed:12:14:29:c4:20:86:b2:6d:bd:0d:84:80:7d:33:
                    e8:fd:4c:f4:ed:d9:c8:a7:20:c6:86:b4:95:d3:c1:
                    e5:48:b3:81:0c:32:43:50:35:a5:3c:c6:9b:87:99:
                    4e:fa:43:16:b2:37:7a:e8:f1:bc:13:88:de:d2:34:
                    ff:db:aa:25:68:4b:7f:ff:42:57:e7:7f:ab:de:51:
                    c5:99:9d:68:5a:5d:35:f9:5f:98:2a:5f:46:e5:bf:
                    dc:4a:75:93:b8:84:d1:1e:ae:2b:0e:4f:f1:8c:26:
                    8a:39:6c:e6:9f:a7:6c:e2:e4:3d:02:5e:ec:8c:b9:
                    94:50:c3:d0:4f:b0:ee:f8:72:8a:32:cf:8a:cf:0f:
                    d9:e6:51:e8:e0:c9:2a:fe:54:ff:7f:a6:66:fe:8f:
                    64:9c:74:66:15:91:7a:89:38:46:4b:1e:eb:29:e4:
                    1f:ca:ef:86:91:e1:47:b8:50:e3:93:86:8e:3c:73:
                    6b:c8:e6:dc:5c:d8:8d:7b:f0:44:cf:d7:40:be:59:
                    dd:1c:36:98:90:4c:0e:0b:82:f1:96:4d:4f:dc:e8:
                    f2:8a:b1:e4:be:5f:d8:a6:d9:92:09:1c:be:c5:e0:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:F2:B6:DC:4A:12:CB:10:66:07:62:8E:84:5D:B1:95:5C:40:3F
            X509v3 Authority Key Identifier:
                keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:65:79:68:ca:75:27:b0:c4:ca:20:d8:f9:fc:e7:f5:41:
         f5:2c:c8:f2:ea:e8:ed:ee:96:27:6e:e7:f7:a7:1d:76:26:cc:
         4d:07:78:91:9a:0d:a7:62:ef:32:ce:a9:e7:b1:9b:61:09:5f:
         4a:01:92:58:c5:e7:27:d1:8d:c8:f6:3f:49:5e:93:4c:f0:77:
         00:88:c8:35:9e:59:29:66:17:7a:74:fb:f4:5b:af:8d:21:54:
         d7:4d:99:cf:15:7b:c9:60:ac:b7:f4:60:62:7d:ed:6a:9d:70:
         fb:85:2d:b1:e2:b9:86:09:ba:31:ef:c4:6e:68:b4:be:7e:0a:
         be:04:ed:b1:a1:67:cc:ba:12:4f:58:e7:c0:ae:67:84:b5:bf:
         51:90:64:b0:f0:ba:ea:78:e7:ed:65:09:3b:c5:d3:e9:0c:3d:
         92:b3:ff:a9:75:a3:57:7d:09:d5:bb:21:5a:ad:5f:bd:8c:98:
         7d:bb:0c:a0:c5:a9:af:86:98:23:e6:79:88:d4:90:31:ec:24:
         59:bd:14:3b:f2:ab:23:ec:b9:19:28:bf:6d:f3:cd:9b:21:10:
         c0:2f:01:ec:a1:e0:ed:64:ab:f2:27:3c:c4:3f:b0:f9:72:15:
         79:ac:63:03:7d:c6:db:61:9c:82:79:28:10:e0:f9:23:5a:91:
         43:db:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:32 2026 by rpki-client