Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa
File:                     3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa (raw, json)
Hash identifier:          2FI3DRw6poz7+/6DZetNhGhzUS2lCGKW4XFdtiSijVE=
Subject key identifier:   52:78:AE:25:8A:A0:94:2F:D4:56:4D:6E:DD:AB:10:9A:18:11:C6:28
Certificate issuer:       /CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870
Certificate serial:       0DA2DACD63097FB91F20099C1BABA91382559AAE
Authority key identifier: 26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa
Signing time:             Sun 03 May 2026 02:57:14 +0000
ROA not before:           Sun 03 May 2026 02:52:14 +0000
ROA not after:            Sun 02 May 2027 02:57:14 +0000
asID:                     138126
IP address blocks:        103.131.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl
                          rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a2:da:cd:63:09:7f:b9:1f:20:09:9c:1b:ab:a9:13:82:55:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2695C5870A025EF2E5D57AEAE0601914A8CB8870
        Validity
            Not Before: May  3 02:52:14 2026 GMT
            Not After : May  2 02:57:14 2027 GMT
        Subject: CN=5278AE258AA0942FD4564D6EDDAB109A1811C628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:e1:46:b7:d0:3b:07:3a:29:0f:b8:f3:9d:
                    98:9d:8b:72:cb:3e:d8:a6:a2:07:42:e2:19:8a:22:
                    4b:98:86:90:76:b1:8f:5d:7e:2e:c2:a9:96:ef:f2:
                    6e:3e:5d:bf:c4:96:db:7a:b5:66:b6:2b:9a:11:c8:
                    61:86:7b:af:4f:2e:71:d4:5a:ca:23:00:85:99:74:
                    e1:a8:7e:db:82:16:62:04:9e:be:32:9d:09:58:e4:
                    8e:4e:f5:72:e0:51:61:9f:5b:d8:55:29:be:b8:d4:
                    1b:fd:d5:b7:ca:c1:fb:88:e7:34:31:86:8d:93:bd:
                    37:57:ab:7d:99:3c:19:31:77:c8:94:7f:00:a8:cc:
                    b0:12:5a:f4:99:4f:52:b7:91:00:04:c2:87:d6:0e:
                    9a:f7:ae:a9:b5:99:ef:11:7b:82:c1:ba:bc:5e:47:
                    1a:58:20:b9:cb:15:ea:88:9c:55:f1:d1:88:cf:62:
                    98:01:23:56:d9:79:42:73:46:4b:e0:26:e5:b1:4c:
                    ac:05:6c:2c:83:96:fc:ab:14:f9:9f:a4:71:f5:cf:
                    de:a0:9b:0e:fd:1a:ee:0c:73:e3:ce:56:d0:34:c9:
                    a6:5b:f0:29:40:82:c7:f5:b8:1a:36:45:7d:ca:23:
                    4a:b5:9c:06:d8:7c:46:1a:9f:a0:b0:3e:9f:0d:60:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:78:AE:25:8A:A0:94:2F:D4:56:4D:6E:DD:AB:10:9A:18:11:C6:28
            X509v3 Authority Key Identifier:
                keyid:26:95:C5:87:0A:02:5E:F2:E5:D5:7A:EA:E0:60:19:14:A8:CB:88:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/2695C5870A025EF2E5D57AEAE0601914A8CB8870.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2695C5870A025EF2E5D57AEAE0601914A8CB8870.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/3130332e3133312e36312e302f32342d3234203d3e20313338313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:e7:c2:c3:c9:b2:d5:9f:82:36:3b:1e:41:22:cc:ca:85:
         f1:4a:ec:5e:56:0b:56:2f:1d:78:4d:b9:61:5a:ef:2d:76:31:
         4a:cc:68:59:18:a3:e5:9a:0b:3c:aa:2b:a5:af:91:f0:aa:39:
         74:38:4d:66:c3:d6:db:28:23:9b:7a:cb:7e:52:3e:65:ed:43:
         10:95:2d:43:95:c9:59:77:58:88:cc:a2:be:68:fe:b4:91:0c:
         74:3e:7d:04:1b:c6:05:1c:46:d2:26:21:c3:02:10:eb:07:dc:
         ca:98:d5:5f:3a:49:80:9c:4e:cf:8e:9b:2e:b7:a3:ca:cc:c1:
         49:2f:c4:46:3e:83:73:d5:77:a2:a5:05:11:d7:58:a5:2c:c6:
         dd:61:67:d5:1b:c3:db:0e:d2:8c:ae:2b:4c:65:80:f1:bd:7f:
         b6:c8:c1:12:8a:f5:2a:fe:72:0c:f2:e2:12:10:d6:44:5b:1e:
         f4:fa:7f:93:2c:b0:01:2e:f7:95:16:3f:d8:66:bd:1f:ce:5a:
         b6:4b:c7:71:5d:79:ba:e4:52:03:0f:f1:28:ad:77:41:84:75:
         cd:15:2f:99:32:7d:f0:da:34:bb:35:fc:0e:0e:f0:5d:1c:22:
         21:21:23:48:b3:dd:6e:5e:03:15:ef:21:a6:5a:0d:46:b2:fc:
         9e:76:09:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:04 2026 by rpki-client