Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa
File:                     3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (raw, json)
Hash identifier:          zK9mKFzDzpwlGdkQliowFwWa9QhCrvBB+XTxzaxzwC0=
Subject key identifier:   4B:46:69:DD:91:53:32:C1:61:B4:68:A5:B6:5A:78:78:E0:A0:AB:08
Certificate issuer:       /CN=0356312D4CC6591488396D24CA6010583AD5DEE8
Certificate serial:       3C104B7202C89A656D4301F4584C2DF6C5601034
Authority key identifier: 03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa
Signing time:             Sun 03 May 2026 02:51:37 +0000
ROA not before:           Sun 03 May 2026 02:46:37 +0000
ROA not after:            Sun 02 May 2027 02:51:37 +0000
asID:                     138102
IP address blocks:        103.125.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl
                          rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:10:4b:72:02:c8:9a:65:6d:43:01:f4:58:4c:2d:f6:c5:60:10:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0356312D4CC6591488396D24CA6010583AD5DEE8
        Validity
            Not Before: May  3 02:46:37 2026 GMT
            Not After : May  2 02:51:37 2027 GMT
        Subject: CN=4B4669DD915332C161B468A5B65A7878E0A0AB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:30:07:f9:38:75:da:a2:0a:22:3a:1b:c7:
                    4d:00:99:bd:72:31:4b:6a:89:43:f8:a8:2b:95:5c:
                    09:d6:f3:73:ee:7c:02:58:95:45:f6:b8:1d:82:54:
                    b5:b7:25:c1:d3:88:fd:8a:61:72:cf:28:c5:50:cb:
                    dc:01:f9:a1:65:57:bc:ec:76:a9:c6:a3:0c:dd:b8:
                    33:90:61:db:5b:cb:d7:ac:52:1a:c6:a8:73:ad:fc:
                    99:ec:ab:15:ab:91:f1:97:d0:03:99:5e:4a:3f:2c:
                    20:7e:9c:c4:fa:01:a4:d0:8b:63:fb:3d:00:12:8e:
                    02:9d:2a:bc:96:05:6e:0b:63:3b:ae:f2:9f:d6:b3:
                    b5:55:be:59:0c:d2:9e:ec:e1:b9:e0:81:6b:cd:f6:
                    f0:f9:96:86:34:6e:2c:eb:17:7d:04:38:87:6b:31:
                    ec:f0:2b:53:86:49:53:ff:59:93:6c:5c:f8:e3:10:
                    49:9b:48:43:44:3d:cd:f6:fb:fd:80:ca:eb:46:87:
                    c3:5b:8d:79:a2:e9:46:36:d5:44:6a:1f:d1:61:75:
                    34:4c:f5:42:85:56:fd:23:c0:56:35:76:15:f2:60:
                    53:b1:e1:8f:b2:e5:e4:07:79:0a:a5:93:1c:85:11:
                    0a:56:8c:c2:f9:43:3d:df:e6:87:a5:f7:35:c3:5c:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:46:69:DD:91:53:32:C1:61:B4:68:A5:B6:5A:78:78:E0:A0:AB:08
            X509v3 Authority Key Identifier:
                keyid:03:56:31:2D:4C:C6:59:14:88:39:6D:24:CA:60:10:58:3A:D5:DE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/0356312D4CC6591488396D24CA6010583AD5DEE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0356312D4CC6591488396D24CA6010583AD5DEE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:03:14:f5:24:84:93:b9:99:0a:f7:e4:d9:6a:58:04:5a:27:
         f6:b8:2c:91:2b:08:a2:45:e8:66:34:de:3a:08:ed:15:ff:ee:
         fe:f6:a7:01:d5:13:9d:ff:aa:7d:59:3a:08:7b:46:b7:3e:ba:
         c5:48:a8:e8:9f:a3:88:8e:41:44:9c:3a:e8:b0:9b:ef:56:47:
         81:6b:bd:5f:43:4f:da:3c:46:31:45:98:2a:cb:29:95:a9:73:
         37:b7:2d:58:99:49:40:7c:c5:02:2a:04:20:e0:77:c0:0c:62:
         86:0f:4a:32:3a:6b:96:09:de:d5:47:72:1e:38:06:26:bb:9f:
         01:50:2f:6b:06:b5:5a:49:cb:e8:a8:dd:0c:61:3c:63:91:b3:
         aa:f7:f1:a3:04:8c:90:1b:9e:10:09:ed:af:ae:43:6a:37:da:
         e4:15:c8:d3:d9:b0:ce:e6:06:50:e2:c4:5f:19:17:87:3e:7e:
         92:2b:10:2b:db:5a:40:71:e8:92:c5:0d:34:cb:93:7c:6b:35:
         70:f1:94:18:03:cf:a9:05:ba:e0:d0:0f:1c:61:26:d2:c1:1e:
         a8:d7:be:fe:02:6b:8b:11:fe:ea:61:b5:3d:88:75:23:c6:36:
         d6:bb:dc:05:00:5b:f9:42:23:76:ae:cc:9e:8c:e0:7a:6e:87:
         ea:13:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:44 2026 by rpki-client