Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa
File:                     3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa (raw, json)
Hash identifier:          f1SJQsx9nWUKUwBQBAdqsLt2lHNLlTlJwU4N68CRn+4=
Subject key identifier:   55:8C:1D:7D:C4:26:89:22:DB:3E:52:F0:91:68:DD:8F:E2:D4:BF:B5
Certificate issuer:       /CN=6C522A0D52C49C10792E181CCBBD22B72AF10088
Certificate serial:       5843532F75933E2CB7E50C92CA125E2F2B04009F
Authority key identifier: 6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa
Signing time:             Sun 03 May 2026 02:51:06 +0000
ROA not before:           Sun 03 May 2026 02:46:06 +0000
ROA not after:            Sun 02 May 2027 02:51:06 +0000
asID:                     133337
IP address blocks:        103.225.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl
                          rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 May 2026 18:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:43:53:2f:75:93:3e:2c:b7:e5:0c:92:ca:12:5e:2f:2b:04:00:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C522A0D52C49C10792E181CCBBD22B72AF10088
        Validity
            Not Before: May  3 02:46:06 2026 GMT
            Not After : May  2 02:51:06 2027 GMT
        Subject: CN=558C1D7DC4268922DB3E52F09168DD8FE2D4BFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:67:02:de:1e:21:5e:5d:a6:19:04:fe:d1:
                    08:02:44:a1:54:2f:10:c4:e3:69:96:08:76:b7:fe:
                    85:c2:11:f6:cc:91:13:dd:b5:29:64:ce:56:f9:ce:
                    c9:ec:1f:26:d1:63:54:a2:c3:cc:b9:cb:ab:b4:e1:
                    a8:76:5d:8b:16:62:bf:5e:ab:4e:b0:e8:dd:60:3e:
                    eb:b6:1f:dd:dc:af:84:b4:12:6e:12:15:9a:42:c8:
                    f3:8c:2d:4d:d4:fe:22:a2:82:f0:85:f5:19:8e:25:
                    01:21:dd:87:ce:cf:0c:28:20:98:5d:8c:21:63:74:
                    16:f3:8f:56:11:b9:03:31:8c:70:9a:02:0b:45:e4:
                    48:c2:8c:2c:a4:72:fd:1a:80:a9:17:b9:ba:d4:d6:
                    3f:0b:79:f3:3f:d1:6b:76:2f:27:30:9b:08:c3:69:
                    49:8f:06:01:24:78:fc:22:4a:25:8d:61:af:f0:30:
                    ed:51:43:e6:df:cd:ea:78:16:6c:58:d9:ef:fb:9d:
                    bb:27:88:42:2a:88:8a:15:f3:fa:da:c0:39:b0:d0:
                    a2:06:44:14:0c:12:3f:ca:df:ed:5a:0c:78:d2:e0:
                    9b:e3:f3:ed:a5:25:ad:54:71:8f:1c:6a:5d:1c:00:
                    3e:35:38:06:60:98:14:f9:1e:25:9c:38:30:be:c4:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8C:1D:7D:C4:26:89:22:DB:3E:52:F0:91:68:DD:8F:E2:D4:BF:B5
            X509v3 Authority Key Identifier:
                keyid:6C:52:2A:0D:52:C4:9C:10:79:2E:18:1C:CB:BD:22:B7:2A:F1:00:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/6C522A0D52C49C10792E181CCBBD22B72AF10088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/6C522A0D52C49C10792E181CCBBD22B72AF10088.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/3130332e3232352e3230392e302f32342d3234203d3e20313333333337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:56:67:37:84:ed:75:93:30:7b:75:76:3a:b6:93:7d:25:1e:
         59:08:33:53:ff:66:a7:1f:87:d0:7e:5e:98:21:0a:56:4a:c6:
         cf:e6:16:97:66:e8:e1:99:dc:81:1c:dc:8e:6e:c8:87:d5:0a:
         f4:ff:4b:52:70:aa:c8:61:38:83:47:1c:3a:ca:37:47:b5:8e:
         ac:d7:84:ec:cc:e4:7e:8e:b5:3f:e1:60:da:f8:f7:a8:13:a1:
         ae:73:0c:f8:74:eb:36:2a:56:fe:70:0e:b0:0a:d4:26:b9:68:
         ed:d2:5a:15:4f:1f:56:a6:d7:11:b6:30:c1:fe:70:05:6d:00:
         58:ea:e6:1c:43:e3:2e:89:96:ff:6c:29:08:18:df:1b:85:2f:
         f9:12:88:e8:fd:ae:cd:31:da:ee:c0:1e:8f:c4:72:17:78:14:
         69:43:73:66:bc:f3:b8:45:34:29:14:f4:6d:6b:27:82:5b:75:
         d6:87:0f:bd:fd:1b:c6:13:2e:c4:c2:69:0a:6c:b2:db:5f:ad:
         03:3d:6d:cc:67:fd:57:a2:4a:07:94:ae:29:6d:41:74:6a:b7:
         1d:ea:d8:16:24:5c:82:a3:18:a1:74:ee:9d:94:9b:00:d0:4f:
         3b:f1:b0:8c:09:4a:a0:02:9c:0e:f9:6f:7e:43:75:92:c1:cb:
         f4:aa:c5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 05:41:50 2026 by rpki-client