Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
File:                     3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (raw, json)
Hash identifier:          tFFR6+x+fpHHrNjo8i5wrXGQVmpCIjPUzPsVU8CszYg=
Subject key identifier:   0B:2C:1E:E7:19:16:A4:E2:91:22:56:79:38:C7:B6:95:A0:7D:5F:41
Certificate issuer:       /CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
Certificate serial:       37FB8CE6FDDDE8C77D4028ED408C09E2D5E0648E
Authority key identifier: 56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
Signing time:             Sun 03 May 2026 02:29:13 +0000
ROA not before:           Sun 03 May 2026 02:24:13 +0000
ROA not after:            Sun 02 May 2027 02:29:13 +0000
asID:                     150262
IP address blocks:        103.27.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl
                          rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fb:8c:e6:fd:dd:e8:c7:7d:40:28:ed:40:8c:09:e2:d5:e0:64:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5663B29705FF9D2D7208CD394C5767D5A2899F1B
        Validity
            Not Before: May  3 02:24:13 2026 GMT
            Not After : May  2 02:29:13 2027 GMT
        Subject: CN=0B2C1EE71916A4E29122567938C7B695A07D5F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:07:a2:ba:47:e5:fd:d8:6a:c6:c4:5e:08:
                    40:f6:67:2f:c1:b1:48:d3:d3:7c:34:42:48:4d:8f:
                    03:a7:11:aa:52:ef:f0:a5:1c:c2:40:1b:2b:2d:44:
                    b7:85:9a:9c:c9:34:9c:55:20:02:03:62:0d:e8:e9:
                    aa:3f:c8:57:3e:ad:9b:f2:fd:32:21:93:42:ab:fe:
                    25:e5:96:07:ca:a7:ea:1a:fb:02:23:99:1e:ce:51:
                    a6:33:ea:b1:bd:cb:e8:f0:9e:a5:50:a1:15:50:4e:
                    a3:17:0d:e8:52:f8:c1:0b:d9:a4:c0:d5:26:aa:5d:
                    84:c1:52:60:b0:bb:9f:d6:64:fe:d5:84:cc:7c:af:
                    25:38:00:b9:b1:c4:e5:92:df:87:a8:c7:2a:28:4e:
                    f8:1c:f7:a3:90:a5:e8:da:5a:98:b6:af:2c:11:74:
                    c4:f2:fc:48:80:23:02:62:5d:5a:bf:b0:d6:de:e2:
                    04:a2:c8:5d:f1:7c:24:be:94:58:ef:3d:d2:10:e7:
                    f9:a3:27:88:cd:35:27:6d:29:43:93:01:5c:2d:02:
                    d9:69:4f:86:80:5b:ed:06:59:34:fc:d1:78:c4:ef:
                    ec:3f:ee:7a:2e:c5:09:42:ef:dd:45:3e:34:40:d4:
                    5c:4f:af:b9:81:55:d0:e4:bd:bd:29:a8:7b:66:13:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2C:1E:E7:19:16:A4:E2:91:22:56:79:38:C7:B6:95:A0:7D:5F:41
            X509v3 Authority Key Identifier:
                keyid:56:63:B2:97:05:FF:9D:2D:72:08:CD:39:4C:57:67:D5:A2:89:9F:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/5663B29705FF9D2D7208CD394C5767D5A2899F1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5663B29705FF9D2D7208CD394C5767D5A2899F1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:65:cb:77:e9:57:54:41:75:14:6c:f4:43:9a:46:9f:ed:ab:
         51:05:73:36:b4:4d:ab:b9:62:7c:78:2d:8d:e8:2a:6d:f9:35:
         61:87:fa:81:7e:f1:b5:7b:51:36:f7:ea:ed:c3:24:df:95:42:
         07:6e:e8:09:b6:2d:aa:45:03:1c:99:ae:c5:b3:e0:f1:88:40:
         50:d7:e6:4d:ce:94:29:7b:96:76:ca:89:35:a4:1e:4f:69:1d:
         34:0b:4f:e8:c9:e0:16:5d:63:e6:be:96:04:8a:a5:6b:a7:a7:
         cb:e7:88:14:78:af:73:52:8c:71:21:ec:98:36:58:04:9b:c1:
         5d:b3:fc:92:a7:50:ad:e1:78:64:c3:fb:65:77:e7:9c:d1:d5:
         9e:fa:71:4a:02:f9:3a:2f:d8:1a:2a:cf:8a:1d:37:74:09:41:
         88:d8:c0:ef:8c:3a:30:00:a1:5d:b9:3b:1a:39:77:5c:98:69:
         69:6c:7f:d5:be:ea:23:c9:c5:c9:70:51:dd:d7:95:3c:5d:78:
         c2:92:cd:0f:a2:43:41:89:da:55:1d:ce:d8:37:da:61:be:e7:
         f3:42:c7:d2:22:ea:32:cb:22:52:37:4f:8c:ca:68:85:92:74:
         cc:fa:5f:3a:c3:ff:e5:01:98:01:f9:62:be:3c:a5:c2:6d:75:
         76:ef:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:41:11 2026 by rpki-client