Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa
File:                     3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa (raw, json)
Hash identifier:          CZezg3V9YTA7rAg0HQHAWG4rHwKphI57kR4SMjyKwas=
Subject key identifier:   98:F6:D4:33:2C:98:25:B9:63:FA:42:DA:81:CA:72:B4:33:30:0C:DA
Certificate issuer:       /CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
Certificate serial:       266F14BB2EBBEA0E03DC27E9B2312BACB8FB34AA
Authority key identifier: EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa
Signing time:             Sun 03 May 2026 02:52:35 +0000
ROA not before:           Sun 03 May 2026 02:47:35 +0000
ROA not after:            Sun 02 May 2027 02:52:35 +0000
asID:                     138114
IP address blocks:        103.125.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl
                          rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6f:14:bb:2e:bb:ea:0e:03:dc:27:e9:b2:31:2b:ac:b8:fb:34:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEC8298F6351E0D1E9099D89D52C21BDF551073F
        Validity
            Not Before: May  3 02:47:35 2026 GMT
            Not After : May  2 02:52:35 2027 GMT
        Subject: CN=98F6D4332C9825B963FA42DA81CA72B433300CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:73:dd:ed:ab:8d:1f:5c:93:2b:dd:5b:19:f2:
                    53:86:b1:84:12:98:2b:67:56:bb:d3:ce:4a:79:87:
                    ff:bb:f2:90:dd:68:df:cb:84:5c:08:cf:fb:4b:cf:
                    e4:f9:b5:f4:62:5b:93:ce:bb:fd:a2:be:24:73:23:
                    74:f8:57:d7:42:12:8e:e8:39:ec:75:e5:a9:bb:74:
                    03:ff:1d:27:91:e1:ba:1d:2a:b5:6a:1c:5b:f9:ad:
                    d1:17:b0:0b:b8:38:78:0d:29:61:de:4e:48:7a:9c:
                    4c:bf:9c:57:be:43:56:4f:87:d1:a3:c5:e3:31:0a:
                    38:94:b7:55:cb:38:94:7e:06:77:00:39:98:2a:ee:
                    ec:3a:41:8e:6d:b6:18:7e:38:fb:b0:21:b2:40:74:
                    3a:29:2d:62:f7:bc:cb:67:77:fc:48:f4:44:43:8f:
                    d9:08:a6:01:77:49:27:1f:be:90:0f:8d:98:f5:40:
                    01:7a:ac:b0:b3:43:5e:28:df:cd:8e:15:0c:1c:15:
                    8a:c7:fd:69:12:50:0c:33:d0:49:22:6a:40:28:5e:
                    6d:95:62:dc:35:a4:6f:37:cc:3b:d1:cd:7b:43:38:
                    59:d3:39:44:62:ce:cf:c1:99:60:7c:47:0d:5b:b5:
                    be:a0:0c:b3:22:0c:d0:a6:27:92:6d:ba:8d:22:5a:
                    bc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:D4:33:2C:98:25:B9:63:FA:42:DA:81:CA:72:B4:33:30:0C:DA
            X509v3 Authority Key Identifier:
                keyid:EE:C8:29:8F:63:51:E0:D1:E9:09:9D:89:D5:2C:21:BD:F5:51:07:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/EEC8298F6351E0D1E9099D89D52C21BDF551073F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EEC8298F6351E0D1E9099D89D52C21BDF551073F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93d9268b-5e61-43b2-a624-41b01d7d76b2/0/3130332e3132352e3138352e302f32342d3234203d3e20313338313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:33:64:43:fa:cd:89:ca:bf:49:e9:78:9f:25:42:1f:7b:41:
         f2:e7:9a:0c:8e:53:ab:75:d4:7d:c4:1e:a2:fd:0d:33:58:15:
         55:c9:d3:18:6f:0b:cb:50:0e:2d:42:a8:f8:80:e2:18:dc:95:
         d4:f0:b3:ba:44:db:fd:86:91:9c:75:67:68:a2:5d:86:04:69:
         ab:00:bc:f9:45:85:d8:a6:e5:58:20:34:d3:85:ba:29:37:47:
         fb:c7:41:55:85:20:79:f7:70:9f:71:3a:d1:a9:fd:ed:5d:36:
         c6:6d:4e:9c:05:29:7d:8e:cb:ff:1d:d8:ee:07:98:c1:92:8f:
         71:83:c0:0b:1c:3e:d5:66:d8:91:d2:c4:e7:b5:f2:8d:13:36:
         10:e3:ad:76:a8:ac:56:a5:78:e1:fa:22:77:d8:c9:0f:fd:f4:
         eb:8a:49:0b:93:27:cd:3d:d7:c5:5d:d3:a6:9b:ba:d3:92:be:
         37:89:9c:00:37:c0:ec:39:1f:ef:06:1c:78:8a:02:87:4f:f6:
         fe:21:48:f8:a0:59:66:42:05:98:f2:f2:c6:87:f7:98:08:b4:
         e8:90:4f:5f:a1:5c:72:68:15:a4:ec:91:30:70:39:63:94:32:
         43:fe:48:53:44:11:ee:12:a3:12:14:5f:07:43:94:23:cd:cb:
         35:07:22:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:55:55 2026 by rpki-client