Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa
File:                     3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa (raw, json)
Hash identifier:          QFfNhq0siSwOs18xtBIQVVrABzIP0gTxhbpkKx5UaAs=
Subject key identifier:   25:AB:A9:43:B2:08:56:0D:BC:1A:E3:6F:B5:36:5F:C9:43:67:64:A2
Certificate issuer:       /CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
Certificate serial:       151FDD24D2FCCEE5164E8E86C098BEABC42CD07C
Authority key identifier: 5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa
Signing time:             Sun 03 May 2026 03:00:25 +0000
ROA not before:           Sun 03 May 2026 02:55:25 +0000
ROA not after:            Sun 02 May 2027 03:00:25 +0000
asID:                     135360
IP address blocks:        103.235.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl
                          rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1f:dd:24:d2:fc:ce:e5:16:4e:8e:86:c0:98:be:ab:c4:2c:d0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10
        Validity
            Not Before: May  3 02:55:25 2026 GMT
            Not After : May  2 03:00:25 2027 GMT
        Subject: CN=25ABA943B208560DBC1AE36FB5365FC9436764A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5b:dc:d6:28:5d:6d:d2:6a:34:9d:31:08:c3:
                    2f:a0:4f:48:c3:94:27:a2:56:50:05:e6:81:a7:ed:
                    65:da:d3:78:6b:90:e7:0e:7a:4a:32:34:e2:14:06:
                    e7:4f:fd:2a:e6:c6:86:f6:61:12:0f:e9:48:ea:bb:
                    fb:d5:ec:48:c6:23:21:d5:f5:04:7c:9b:c4:be:49:
                    b1:0d:58:40:e1:34:c3:bd:3e:a7:b8:30:e0:b8:47:
                    41:f9:c3:92:a5:46:18:0c:f7:e4:66:5b:60:24:f1:
                    b0:47:2b:7f:98:9c:32:db:f1:93:e4:c7:69:af:f4:
                    69:2d:27:2f:18:56:9e:65:67:72:05:5b:f1:d8:61:
                    25:50:98:35:61:53:46:c9:49:c6:20:7e:2e:4f:8a:
                    a9:ba:81:0f:ac:6d:c5:3d:21:a2:81:6d:5e:51:75:
                    c1:1e:68:25:ae:da:e8:18:86:7c:76:f8:83:c2:7c:
                    30:e9:e5:e3:14:03:f3:1c:e9:25:a3:47:ab:0f:8a:
                    2a:44:99:59:66:5a:df:5e:3c:44:3f:de:fa:9a:b8:
                    b6:f9:dd:ef:35:59:da:ca:f6:d1:a5:20:96:71:ba:
                    c3:ce:25:7d:0e:db:90:c7:e3:d2:4a:8d:b3:ac:92:
                    14:2b:6c:e4:8b:72:0c:5d:3c:1e:73:c1:d2:7c:fa:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AB:A9:43:B2:08:56:0D:BC:1A:E3:6F:B5:36:5F:C9:43:67:64:A2
            X509v3 Authority Key Identifier:
                keyid:5D:13:BF:84:B8:D9:1A:8A:1A:C8:08:62:27:D5:9F:1D:C1:EA:3F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D13BF84B8D91A8A1AC8086227D59F1DC1EA3F10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b1a77add-a49a-4c8f-a735-ef96c33ab29f/0/3130332e3233352e37332e302f32342d3234203d3e20313335333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:77:9d:6a:3c:c7:6e:dd:42:d0:be:95:b8:51:73:e2:3b:
         48:3b:93:03:24:ef:1f:bb:6a:f8:c9:b5:2f:b8:0b:8d:b5:bc:
         32:15:b8:61:6a:0a:e6:33:1a:36:13:cb:bb:4f:83:0a:54:93:
         32:7d:c6:bd:62:12:1c:36:a4:28:6b:11:83:c4:ef:43:9c:17:
         85:59:71:8a:7a:e1:00:ca:07:a0:c7:e6:1a:af:c5:40:1a:72:
         5b:83:e4:55:f4:b8:04:6d:0d:eb:75:76:2f:e1:2b:84:5b:05:
         5c:cb:af:ae:65:1c:73:02:ac:f3:d7:c9:fc:4b:7e:c9:75:f4:
         1e:c4:74:da:fd:69:f9:13:e6:69:19:3d:da:14:d4:90:70:ee:
         ae:da:c9:51:86:38:68:3a:6c:54:87:95:ac:64:64:58:ba:7c:
         4b:76:55:d2:12:58:fd:19:a9:92:18:9b:99:32:7c:2f:e8:43:
         bc:37:e6:bf:40:87:c3:fe:e7:47:f3:b3:7b:38:89:30:2e:b9:
         81:1d:78:2d:3d:64:e6:5b:2b:e3:eb:e0:4c:b9:c8:d9:da:de:
         8d:7e:95:f5:a8:60:e5:47:a7:b7:b5:40:57:3a:ee:cc:b9:98:
         f3:5c:b3:70:70:87:6a:e5:27:b0:3e:d1:69:da:18:6c:34:87:
         55:c6:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:11 2026 by rpki-client