Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa
File:                     3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          HJc5JvMy8GHohXvfOoaZGX6TD+10pfnhOdLgXA7YFDo=
Subject key identifier:   75:18:F0:DF:CA:7E:F1:3B:3F:FA:50:0D:00:54:97:67:EE:F5:B0:E5
Certificate issuer:       /CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
Certificate serial:       13A966DB2175E76DD2C4C7F2AE9CC9D5FE511952
Authority key identifier: 2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa
Signing time:             Sun 03 May 2026 02:52:12 +0000
ROA not before:           Sun 03 May 2026 02:47:12 +0000
ROA not after:            Sun 02 May 2027 02:52:12 +0000
asID:                     131736
IP address blocks:        103.132.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl
                          rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a9:66:db:21:75:e7:6d:d2:c4:c7:f2:ae:9c:c9:d5:fe:51:19:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EAB22DEDA17C8633520C765C1BECE6852B8BD70
        Validity
            Not Before: May  3 02:47:12 2026 GMT
            Not After : May  2 02:52:12 2027 GMT
        Subject: CN=7518F0DFCA7EF13B3FFA500D00549767EEF5B0E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:af:c4:6b:0b:40:92:88:ed:2b:64:9b:98:d1:
                    25:e0:0f:74:a4:7f:4a:4d:06:1e:9b:a5:ec:cf:03:
                    c2:51:2f:36:08:ad:5c:2b:4e:cf:5a:5b:3f:e8:22:
                    53:47:c0:30:ed:82:00:b2:3e:fa:cf:03:2b:86:ba:
                    b4:6c:19:6a:b6:65:55:bd:1f:47:0a:91:10:d5:37:
                    f0:a1:fc:2e:a1:e7:54:6b:75:12:73:47:93:3a:0a:
                    9e:fb:75:85:11:67:1c:04:dc:64:3d:95:90:0f:c7:
                    ce:5d:63:ef:51:d1:08:1e:97:b8:2c:96:b0:e3:f2:
                    01:d4:90:11:48:f5:a4:b0:2b:ae:bf:8f:9b:92:4d:
                    18:b8:ec:50:6c:41:fe:ae:ee:1a:67:24:57:5b:49:
                    2c:29:6d:63:01:88:2a:24:c7:e0:87:c8:f7:0f:13:
                    49:10:6c:a5:a3:82:c5:14:14:56:ed:a6:d1:c4:34:
                    ab:18:cc:96:5b:74:94:1f:69:d4:53:94:ef:38:2f:
                    cd:3c:86:17:a7:06:16:27:2f:a8:9f:b7:98:ec:28:
                    85:d5:7d:52:a9:dd:ea:03:78:66:13:96:48:b2:51:
                    73:f2:9b:40:80:94:d7:56:9a:42:c0:63:02:2e:94:
                    9c:96:94:e7:b2:5f:3b:a0:69:e4:88:e5:bf:6f:9e:
                    ce:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:F0:DF:CA:7E:F1:3B:3F:FA:50:0D:00:54:97:67:EE:F5:B0:E5
            X509v3 Authority Key Identifier:
                keyid:2E:AB:22:DE:DA:17:C8:63:35:20:C7:65:C1:BE:CE:68:52:B8:BD:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2EAB22DEDA17C8633520C765C1BECE6852B8BD70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:0f:96:cc:63:b9:da:1e:0b:bb:c1:a4:e7:72:34:0a:5e:
         dd:b1:d9:8a:19:27:c7:33:4a:cc:25:65:89:bf:dd:1d:11:9a:
         da:ae:ff:2a:58:22:a6:cf:9a:6d:bf:07:b9:b5:b7:c6:3d:49:
         54:87:00:62:d6:dc:64:d9:4c:17:74:f9:2f:d2:0f:b1:c9:c3:
         af:57:58:62:7b:64:9d:11:a1:5f:e1:c2:8a:ce:30:91:2c:f7:
         67:e1:b8:36:d5:76:aa:71:6d:6a:ce:9d:d9:7b:63:88:74:fa:
         d6:8f:f7:6a:01:b4:b1:c6:af:97:cb:ef:6d:e9:2d:7b:c1:64:
         c0:1c:82:7f:c4:31:e9:f3:f3:45:0a:08:c8:d1:9f:e7:a8:60:
         c6:b6:39:a4:12:96:c3:bc:87:48:4c:40:11:b8:59:c6:3f:83:
         57:de:85:70:de:b1:ca:31:53:9f:38:29:fc:62:98:a8:29:f1:
         cc:cc:fd:83:db:65:01:9f:8b:da:25:9c:17:9f:91:18:6c:dd:
         d9:0d:40:c5:f1:ce:77:04:5f:f5:f3:cf:f3:7a:52:66:e5:61:
         ab:7e:bf:37:d7:7b:18:a0:6a:10:f0:99:91:62:86:9b:85:7a:
         9d:a6:3c:d1:7c:76:2f:5d:e1:33:20:cc:11:39:85:31:2e:df:
         62:db:3d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:11:58 2026 by rpki-client