Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa
File:                     3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (raw, json)
Hash identifier:          Wb6gH+JiAvO+ARbeGk8L44agijONRst7EWLeoO4CUoU=
Subject key identifier:   74:62:5E:9F:0C:46:E1:3E:F5:7B:EF:82:3B:1B:A3:C9:B0:BC:F3:A6
Certificate issuer:       /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial:       62336BBC6551779E1EDBFC3ABC2786B257F32E39
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa
Signing time:             Sun 03 May 2026 02:29:12 +0000
ROA not before:           Sun 03 May 2026 02:24:12 +0000
ROA not after:            Sun 02 May 2027 02:29:12 +0000
asID:                     150262
IP address blocks:        103.27.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
                          rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:33:6b:bc:65:51:77:9e:1e:db:fc:3a:bc:27:86:b2:57:f3:2e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
        Validity
            Not Before: May  3 02:24:12 2026 GMT
            Not After : May  2 02:29:12 2027 GMT
        Subject: CN=74625E9F0C46E13EF57BEF823B1BA3C9B0BCF3A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e6:b4:57:ae:c6:d7:fc:92:a1:4e:26:60:a6:
                    e4:f3:00:ea:e2:57:06:af:a6:2d:a0:cf:6d:2d:01:
                    bb:3a:62:b1:ab:7c:de:54:c3:f2:48:ce:cf:1f:18:
                    40:16:a8:a2:b6:7e:b2:cb:a2:79:2a:23:51:0f:2d:
                    82:70:d2:12:76:8f:c0:e4:b3:e9:2d:64:f6:37:22:
                    d5:9c:71:ac:55:e9:67:0d:64:ee:de:7a:b5:1a:36:
                    43:5d:8e:63:15:11:71:a8:6b:30:70:70:be:77:ae:
                    7f:7d:60:15:4a:7a:64:a9:ef:38:af:c2:34:56:70:
                    af:bf:71:77:d1:ae:4f:c5:67:1c:86:95:b5:7f:84:
                    06:4a:91:cb:1f:a6:bc:e2:0d:f9:4f:c8:53:6f:3b:
                    48:5f:06:45:66:70:e8:84:47:97:c5:fa:c0:e7:39:
                    53:fc:7d:c1:8d:61:20:e1:0c:bb:83:48:a6:dc:df:
                    e9:ee:06:bb:11:31:22:ed:d7:6f:2d:47:f0:2f:87:
                    cd:c0:35:3b:13:49:d2:25:df:41:26:d6:17:e5:b8:
                    45:56:9b:a3:9b:3a:e5:fd:4c:2e:f1:f7:16:04:69:
                    5e:37:b6:64:45:f5:26:d2:1f:16:7f:a3:bb:b9:70:
                    dc:fd:df:7b:97:95:95:3c:0f:bd:97:9c:7a:71:5b:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:5E:9F:0C:46:E1:3E:F5:7B:EF:82:3B:1B:A3:C9:B0:BC:F3:A6
            X509v3 Authority Key Identifier:
                keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:66:fb:bc:3a:ee:fa:f9:f2:03:78:ee:9e:69:3b:af:c4:f7:
         4e:23:86:b5:75:a1:75:74:cb:41:cb:e0:70:45:e8:dd:1c:7c:
         72:0b:5a:be:19:3a:8b:a7:0c:4b:ff:41:34:4e:22:9e:f6:b4:
         81:f3:fa:ad:3f:0b:bd:24:21:c1:e6:bd:72:15:14:0a:29:7c:
         96:3b:a9:fc:1a:fc:bf:fe:0a:b9:b8:b5:0e:f3:20:e2:ac:ef:
         b5:43:6a:c5:1b:b6:b3:5e:ef:f9:61:35:dd:09:47:a2:c5:c7:
         82:6d:39:7f:9c:42:54:d4:2f:39:29:a1:3a:e7:5d:83:a8:db:
         1a:0e:32:9a:f6:e4:91:60:e8:f5:b0:d1:51:7e:93:e6:60:0d:
         85:36:dc:e6:06:aa:c6:64:ff:c1:db:f6:e8:3a:c6:a8:2e:bd:
         7e:c5:51:1c:a5:dd:4d:42:0c:c4:f7:c1:dc:73:b4:89:1f:27:
         c2:88:bb:07:a2:a9:a5:e7:7f:bb:8e:f2:4e:3c:49:ef:5c:59:
         b7:21:10:43:06:02:d1:73:65:c8:e1:f8:68:93:6f:0f:80:d2:
         cf:b3:db:9a:03:00:95:e2:75:6a:c1:b6:3c:4e:4a:ad:61:02:
         37:92:2a:d3:1b:20:50:c5:d1:1a:f1:df:d6:5b:7b:aa:8b:27:
         6f:e8:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:11:02 2026 by rpki-client