Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa
File:                     3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa (raw, json)
Hash identifier:          J9RbUPOqUx6qGs/3TSnBbVnRso5umnmyOklAgJwt1Js=
Subject key identifier:   C8:F0:E6:CA:1C:07:A3:43:C9:3F:E5:B9:D5:A2:00:02:77:27:A4:2C
Certificate issuer:       /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial:       702C7F324C02FC73FA65CB9E2FB3279E6E83FE66
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 02:31:22 +0000
ROA not before:           Sun 03 May 2026 02:26:22 +0000
ROA not after:            Sun 02 May 2027 02:31:22 +0000
asID:                     142370
IP address blocks:        103.227.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
                          rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2c:7f:32:4c:02:fc:73:fa:65:cb:9e:2f:b3:27:9e:6e:83:fe:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
        Validity
            Not Before: May  3 02:26:22 2026 GMT
            Not After : May  2 02:31:22 2027 GMT
        Subject: CN=C8F0E6CA1C07A343C93FE5B9D5A200027727A42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:ed:68:b8:fc:9b:df:6b:8f:a8:23:4b:c6:
                    3f:9a:16:18:b7:9d:c6:8f:a7:ad:62:f5:31:05:06:
                    e2:b0:b8:39:17:77:1f:3c:56:4f:34:28:83:a3:95:
                    b3:c1:98:19:5a:2f:eb:1e:ca:15:8a:be:08:5b:fb:
                    b9:0e:1f:c1:6c:d4:97:d3:f7:e5:bc:51:f1:11:12:
                    e6:b1:4b:30:df:b3:18:54:19:a3:a6:d1:10:b5:67:
                    6c:28:e7:f4:00:37:1c:a5:b6:d6:35:e9:0f:99:00:
                    9b:64:62:fc:a6:bf:e4:5a:15:da:be:33:29:fb:75:
                    b0:7a:bf:5b:f3:e8:f1:e5:94:7b:54:11:74:7b:6e:
                    96:25:73:3b:f0:b6:b9:e9:d8:6d:de:fc:96:02:5d:
                    a3:35:df:2a:ae:f9:94:a2:3d:83:3e:cf:f2:7a:0c:
                    98:8f:55:91:44:06:ef:4e:8b:10:4e:97:b9:fe:be:
                    e9:6f:de:62:28:e8:fe:27:6b:ad:ae:6b:1e:0a:f8:
                    71:c3:40:3e:c9:5a:89:1f:99:7f:ce:34:04:a9:c3:
                    77:a4:17:66:60:eb:53:a0:81:79:35:2b:83:2c:86:
                    8f:95:ce:30:e9:29:8d:9b:d4:38:02:6f:88:b2:1c:
                    69:6b:c7:5b:0a:3b:1b:d3:7c:a1:22:a2:82:f1:08:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:E6:CA:1C:07:A3:43:C9:3F:E5:B9:D5:A2:00:02:77:27:A4:2C
            X509v3 Authority Key Identifier:
                keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32332d3233203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:3b:d9:d6:3d:90:60:85:ba:60:df:b9:45:2d:6c:35:2d:d0:
         7a:85:a0:e8:71:78:47:9f:38:74:0e:2b:61:4d:ad:f2:30:c7:
         d2:50:77:80:fd:eb:79:eb:3d:4f:0c:c3:31:e4:98:42:45:cf:
         a3:a8:81:ae:fd:b5:39:a9:21:76:b8:3f:8d:ed:34:de:e4:d2:
         cb:10:35:e5:d9:3f:63:fb:0a:d5:7f:d8:a4:e0:30:cb:c7:c2:
         e7:e4:61:07:a1:51:09:96:39:e6:05:cd:88:38:78:91:9b:ee:
         50:e9:97:7f:9a:fa:34:4a:4e:9f:06:66:64:1a:ec:30:bd:a3:
         1f:a8:90:e7:12:37:4c:34:2c:9a:1a:59:f5:8c:97:2f:99:f7:
         5c:b4:60:ee:dd:01:e8:86:05:29:be:e2:8d:0e:60:cd:ad:d8:
         f1:c2:88:d2:32:bc:9d:be:b4:59:88:3f:c3:76:ac:60:6b:79:
         a8:40:ac:f4:03:a4:08:13:b1:a7:3f:4d:cf:67:d3:24:d5:8c:
         c7:cb:d6:93:d0:a2:4b:12:e8:cd:0b:ca:2d:7b:ee:b1:c0:a4:
         9d:bc:02:99:fd:05:bf:38:34:22:44:01:6d:fa:15:11:f4:de:
         15:15:8d:25:7c:89:55:88:cf:96:66:d0:77:ba:a4:99:12:96:
         c1:fe:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:04 2026 by rpki-client