Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
File:                     3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (raw, json)
Hash identifier:          RX5pvrelsOfCczsPMOPyTT9EJaPRhnL4ZABJet9eUTU=
Subject key identifier:   34:CC:DC:87:D8:AE:78:4C:C0:E1:22:5E:EC:4C:8C:D8:19:97:20:31
Certificate issuer:       /CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
Certificate serial:       32FA3979E3763CD46DF64AC466F11DC49C672FA9
Authority key identifier: 54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa
Signing time:             Sun 03 May 2026 03:07:04 +0000
ROA not before:           Sun 03 May 2026 03:02:04 +0000
ROA not after:            Sun 02 May 2027 03:07:04 +0000
asID:                     132653
IP address blocks:        103.25.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl
                          rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fa:39:79:e3:76:3c:d4:6d:f6:4a:c4:66:f1:1d:c4:9c:67:2f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54407754A24AF249F0FE6F5C9DD641EBDC929BB7
        Validity
            Not Before: May  3 03:02:04 2026 GMT
            Not After : May  2 03:07:04 2027 GMT
        Subject: CN=34CCDC87D8AE784CC0E1225EEC4C8CD819972031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:cc:31:61:dd:80:7e:08:b1:ee:38:01:ad:
                    4b:24:65:ce:46:af:24:87:f9:4f:ec:be:43:a2:7c:
                    ae:aa:1a:d6:38:ac:11:72:b4:a6:41:04:a8:be:0a:
                    3d:da:9e:ef:e9:ff:2d:fc:e7:fa:3e:56:20:7c:c7:
                    45:31:f1:a9:18:09:40:78:9a:73:1c:a4:c4:97:3f:
                    bf:07:69:6a:c3:e1:61:39:00:80:d7:57:a0:fa:eb:
                    6f:db:ea:c8:fd:7c:9c:18:a9:e0:00:b6:e1:86:c1:
                    8f:62:88:18:3e:28:fd:24:ab:15:e9:e6:2b:06:93:
                    9c:70:e2:70:63:62:74:e5:90:41:09:49:39:56:e9:
                    a2:cc:3f:5a:2f:cd:c4:a9:a6:b7:5b:9b:2f:68:a3:
                    51:fc:59:3c:48:51:0b:3b:90:ca:0e:8a:3b:e3:9c:
                    7e:bd:96:b3:c5:df:87:85:ff:53:4e:6f:03:ec:e8:
                    45:ec:77:a5:d7:27:3b:d2:ab:83:90:37:39:11:62:
                    60:d0:fd:e0:9e:32:4a:d4:ab:9e:dd:21:6c:9b:4a:
                    3b:98:3b:0f:29:e4:7d:cc:c1:b4:df:22:3a:27:f7:
                    99:57:c5:97:ff:3e:7e:c6:3a:96:f1:69:d2:f4:4d:
                    e1:c0:6e:8a:6e:be:df:cf:9a:cd:c3:0f:ba:39:f2:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CC:DC:87:D8:AE:78:4C:C0:E1:22:5E:EC:4C:8C:D8:19:97:20:31
            X509v3 Authority Key Identifier:
                keyid:54:40:77:54:A2:4A:F2:49:F0:FE:6F:5C:9D:D6:41:EB:DC:92:9B:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/54407754A24AF249F0FE6F5C9DD641EBDC929BB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:da:f8:60:c7:1f:21:16:63:d1:6b:9f:39:13:2f:19:fc:
         d0:45:b4:90:cd:31:d4:d8:36:40:36:cf:4a:95:0e:5f:07:ba:
         3c:12:a1:92:6e:82:cb:26:55:2e:d5:f5:f6:2e:b5:5d:dc:86:
         90:75:71:03:34:e7:a9:d5:2b:7c:d2:4a:e6:dc:c6:9c:a2:83:
         f2:a9:40:86:f3:24:45:55:46:f5:6c:95:fc:9f:de:4e:03:76:
         11:c8:7c:52:09:30:e3:15:78:f8:34:dd:26:7b:5b:c0:f4:20:
         33:68:e0:5d:4e:9c:f8:34:cb:00:f1:dc:fa:45:55:81:81:b6:
         3e:1a:aa:7b:d3:a1:1b:bd:c3:ff:07:53:b6:ce:ba:6d:84:08:
         ae:16:c3:ed:c3:17:45:4e:5b:b1:1e:7d:b2:a0:b7:4c:1d:7d:
         a2:a4:84:72:67:e3:3e:0d:27:41:0c:19:f9:20:64:20:d0:f5:
         6a:ad:b7:ba:f6:47:03:e1:50:67:40:fd:59:11:31:15:fa:a3:
         bf:6d:34:51:fa:7c:9d:77:37:d7:87:4c:89:17:33:32:bf:62:
         d1:13:b5:50:88:d4:7a:0f:3e:48:7a:e4:cc:96:72:46:9e:20:
         41:91:f7:f9:e0:36:0f:6d:91:35:f7:74:6d:9a:60:10:b7:a3:
         a0:27:e7:e5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUMvo5eeN2PNRt9krEZvEdxJxnL6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ0MDc3NTRBMjRBRjI0OUYwRkU2RjVDOURENjQxRUJE
QzkyOUJCNzAeFw0yNjA1MDMwMzAyMDRaFw0yNzA1MDIwMzA3MDRaMDMxMTAvBgNV
BAMTKDM0Q0NEQzg3RDhBRTc4NENDMEUxMjI1RUVDNEM4Q0Q4MTk5NzIwMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR2swxYd2Afgix7jgBrUskZc5G
rySH+U/svkOifK6qGtY4rBFytKZBBKi+Cj3anu/p/y385/o+ViB8x0Ux8akYCUB4
mnMcpMSXP78HaWrD4WE5AIDXV6D662/b6sj9fJwYqeAAtuGGwY9iiBg+KP0kqxXp
5isGk5xw4nBjYnTlkEEJSTlW6aLMP1ovzcSpprdbmy9oo1H8WTxIUQs7kMoOijvj
nH69lrPF34eF/1NObwPs6EXsd6XXJzvSq4OQNzkRYmDQ/eCeMkrUq57dIWybSjuY
Ow8p5H3MwbTfIjon95lXxZf/Pn7GOpbxadL0TeHAbopuvt/Pms3DD7o58qvDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNMzch9iueEzA4SJe7EyM2BmXIDEwHwYDVR0j
BBgwFoAUVEB3VKJK8knw/m9cndZB69ySm7cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2JkMjdjMGEtOTc5Mi00Y2JjLTlhOTYtZTcxMDUwYTFkZGUwLzAvNTQ0MDc3NTRB
MjRBRjI0OUYwRkU2RjVDOURENjQxRUJEQzkyOUJCNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81NDQwNzc1NEEyNEFGMjQ5RjBGRTZGNUM5REQ2NDFFQkRDOTI5
QkI3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2NiZDI3YzBhLTk3OTItNGNiYy05
YTk2LWU3MTA1MGExZGRlMC8wLzMxMzAzMzJlMzIzNTJlMzIzMDM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMyMzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxnQMA0GCSqG
SIb3DQEBCwUAA4IBAQAXOtr4YMcfIRZj0WufORMvGfzQRbSQzTHU2DZANs9KlQ5f
B7o8EqGSboLLJlUu1fX2LrVd3IaQdXEDNOep1St80krm3MacooPyqUCG8yRFVUb1
bJX8n95OA3YRyHxSCTDjFXj4NN0me1vA9CAzaOBdTpz4NMsA8dz6RVWBgbY+Gqp7
06EbvcP/B1O2zrpthAiuFsPtwxdFTluxHn2yoLdMHX2ipIRyZ+M+DSdBDBn5IGQg
0PVqrbe69kcD4VBnQP1ZETEV+qO/bTRR+nyddzfXh0yJFzMyv2LRE7VQiNR6Dz5I
euTMlnJGniBBkff54DYPbZE193RtmmAQt6OgJ+fl
-----END CERTIFICATE-----
Generated at Wed May 13 03:15:39 2026 by rpki-client