Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa
File:                     3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa (raw, json)
Hash identifier:          38tHcC/t7dfxoKy3b2Q3TXm2WXDZWbTD7Vr8HTgP8Ys=
Subject key identifier:   2D:D3:6A:2F:6E:93:AD:61:C0:B2:F0:F6:5F:C5:E9:B5:5A:52:EB:A8
Certificate issuer:       /CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
Certificate serial:       508B50AC3F55ED03602EA28287F1F6EEA07EC049
Authority key identifier: CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa
Signing time:             Sun 03 May 2026 03:08:10 +0000
ROA not before:           Sun 03 May 2026 03:03:10 +0000
ROA not after:            Sun 02 May 2027 03:08:10 +0000
asID:                     131717
IP address blocks:        103.25.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl
                          rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8b:50:ac:3f:55:ed:03:60:2e:a2:82:87:f1:f6:ee:a0:7e:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0A606FD0642E68B5212AE751953E0B9A92959F
        Validity
            Not Before: May  3 03:03:10 2026 GMT
            Not After : May  2 03:08:10 2027 GMT
        Subject: CN=2DD36A2F6E93AD61C0B2F0F65FC5E9B55A52EBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:25:f7:e7:08:b1:47:2b:ef:76:62:45:f6:52:
                    de:46:71:f3:c9:a8:83:f2:df:62:ec:6d:aa:a9:e9:
                    e8:5b:dd:64:63:11:b3:b6:6e:77:81:df:de:2e:d8:
                    e0:24:3f:29:36:4a:bb:40:72:fc:a5:ae:4e:16:e1:
                    be:b4:d6:13:eb:4e:9b:5d:ae:17:6f:af:3d:6d:7b:
                    ee:2a:93:63:07:c6:4c:f2:a3:d1:9b:13:e9:b7:08:
                    56:42:ae:92:a1:69:1c:5d:a0:24:fe:9d:5a:03:b3:
                    85:7d:fc:34:e4:84:e7:25:81:65:af:07:51:92:7c:
                    38:78:34:77:69:e8:8c:77:be:b9:6c:a0:c2:42:d1:
                    28:04:23:39:6c:9b:fd:0e:c5:f5:5a:bf:a4:69:d3:
                    26:f3:f0:fd:e0:e0:d8:a7:3a:6b:33:8f:36:f6:36:
                    3f:d1:f3:93:ee:5e:81:54:ae:a6:a0:22:c7:dd:0e:
                    33:3e:9f:93:56:0b:49:98:82:47:9e:e2:88:bb:77:
                    a8:2d:2f:2a:f2:7e:74:04:69:97:b1:07:9e:03:f2:
                    60:10:6e:e9:47:ea:1a:6c:88:e1:91:6c:64:a6:ba:
                    b2:c6:cc:b1:17:a4:90:41:a6:d4:86:2f:3a:19:19:
                    31:68:60:c4:2f:0d:09:e6:28:a0:9f:e6:4e:09:80:
                    1c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D3:6A:2F:6E:93:AD:61:C0:B2:F0:F6:5F:C5:E9:B5:5A:52:EB:A8
            X509v3 Authority Key Identifier:
                keyid:CB:0A:60:6F:D0:64:2E:68:B5:21:2A:E7:51:95:3E:0B:9A:92:95:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/CB0A606FD0642E68B5212AE751953E0B9A92959F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB0A606FD0642E68B5212AE751953E0B9A92959F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d07471a3-ee53-499c-9f2d-cf16b1e4a353/0/3130332e32352e3136362e302f32332d3233203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:8d:90:78:c4:59:aa:2e:59:23:1c:e5:23:e4:a9:85:b1:
         63:b6:d5:80:a1:e1:d1:1d:63:e8:40:cf:f5:75:c6:26:96:c3:
         a3:6e:4d:3c:3b:c2:6e:7d:ed:48:78:f7:8d:3a:91:a2:10:e6:
         c6:75:c7:0b:fd:48:96:64:ad:54:d4:76:11:9c:01:93:e9:df:
         82:d7:14:37:4f:ab:1c:0c:65:51:d8:3f:c4:b3:a7:46:3e:2c:
         8b:be:a0:ff:60:77:7b:ab:85:aa:43:e6:1d:f3:b4:ed:85:58:
         80:fe:b6:68:38:89:88:8c:8a:33:78:63:e6:48:01:a6:b1:6e:
         15:c6:5a:f9:e8:8e:e4:cd:2b:2d:25:62:b6:99:44:4b:41:91:
         82:0a:d2:54:d5:1d:a7:cb:85:f7:89:d8:e6:ff:d2:2b:71:ef:
         de:27:94:10:76:ab:4b:2f:e5:e6:05:40:cd:0b:ff:2a:0c:a6:
         f3:68:bb:ac:66:28:22:1f:fa:75:a2:32:e4:3a:42:db:42:1c:
         46:7a:75:ff:35:17:ec:77:7b:3b:cf:cb:1a:0f:bf:e6:ed:0f:
         0c:4c:12:04:9d:b5:07:57:83:38:b4:4a:08:23:b5:63:d2:f9:
         ff:1c:7e:09:b0:74:67:6c:f8:ef:ce:66:f8:75:04:3e:cb:14:
         03:ae:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:24 2026 by rpki-client