Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
File:                     3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa (raw, json)
Hash identifier:          U4x7nHOIPSopo3seWvdUR/rW9/Lem7oTQ8rb2DjIll4=
Subject key identifier:   5F:91:D6:21:80:D4:9C:42:2D:BA:96:92:FB:F2:2E:52:AC:F1:BF:C3
Certificate issuer:       /CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0
Certificate serial:       6A7716346C29233C7D58F7A9A7CE63B0F3D89980
Authority key identifier: 4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa
Signing time:             Sun 03 May 2026 02:41:31 +0000
ROA not before:           Sun 03 May 2026 02:36:31 +0000
ROA not after:            Sun 02 May 2027 02:41:31 +0000
asID:                     151012
IP address blocks:        103.227.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl
                          rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:77:16:34:6c:29:23:3c:7d:58:f7:a9:a7:ce:63:b0:f3:d8:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0
        Validity
            Not Before: May  3 02:36:31 2026 GMT
            Not After : May  2 02:41:31 2027 GMT
        Subject: CN=5F91D62180D49C422DBA9692FBF22E52ACF1BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d6:af:61:ca:9b:f1:52:71:7e:c1:95:12:a1:
                    14:97:6c:32:3e:3b:a6:de:68:ab:7c:c0:92:9e:ed:
                    cf:dd:d6:23:67:69:26:9b:cc:f1:c3:e7:12:d8:4f:
                    45:e1:b4:04:2c:20:ba:0a:24:36:b2:19:cf:b7:68:
                    cd:86:1d:08:a9:40:50:e2:30:a5:1d:81:48:c6:dd:
                    95:84:78:f7:ef:37:96:b5:54:c1:67:88:c3:7a:ce:
                    85:99:af:51:a5:52:27:03:83:6b:ac:80:90:4b:8b:
                    0a:ec:ab:a0:21:68:12:54:4b:0a:e6:f6:b0:5d:93:
                    5b:67:59:6e:09:80:52:80:c3:05:0c:4c:32:64:ec:
                    36:4f:e0:7e:5a:52:d7:73:f2:ca:47:11:06:4b:8d:
                    35:ca:90:da:3d:32:a7:7a:6e:ce:a7:93:79:99:1a:
                    21:f4:07:46:f6:01:cd:4d:16:c1:2d:05:13:9f:57:
                    e8:f6:da:21:58:d6:f1:a2:1e:b9:8d:ba:23:71:fe:
                    79:2c:29:e1:e6:2b:b5:2f:eb:a2:97:ce:26:1f:99:
                    33:b6:18:bf:d1:ac:7f:a3:74:dd:98:cb:d7:7f:06:
                    8d:9f:2c:6e:cb:d3:60:94:2e:3d:78:38:6c:46:2b:
                    93:17:35:9a:f9:38:0f:81:71:b7:34:ef:a6:87:12:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:91:D6:21:80:D4:9C:42:2D:BA:96:92:FB:F2:2E:52:AC:F1:BF:C3
            X509v3 Authority Key Identifier:
                keyid:4A:B7:BD:8A:13:F8:8A:9A:CC:16:3E:CD:B0:8E:E4:9E:AB:29:00:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4AB7BD8A13F88A9ACC163ECDB08EE49EAB2900E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6d75088e-49af-472b-9b62-81e73daaf1d6/0/3130332e3232372e3138342e302f32342d3234203d3e20313531303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:8c:94:17:79:67:9b:63:7f:ba:0e:24:22:92:78:00:e0:ad:
         2b:ff:d9:cd:df:bb:79:2a:cf:32:7e:a4:3f:c5:21:06:41:5d:
         2f:69:74:d2:e0:9c:99:e9:36:4f:62:92:28:1b:0a:26:59:05:
         50:ed:73:5f:b1:22:33:13:9e:a4:91:f0:2c:59:ea:a3:eb:e8:
         d6:76:46:d0:52:e4:b5:8f:e3:d5:47:43:cd:bf:e3:51:68:c1:
         c5:2c:fd:ca:3b:94:71:0a:2e:09:2f:56:ac:8c:15:e7:27:39:
         b4:ba:28:bd:b6:11:4a:27:2f:c3:73:34:98:8e:5f:80:a1:5f:
         7b:dd:81:18:08:5f:50:8d:68:9e:07:d4:e1:5d:31:b9:07:1c:
         1b:7a:bb:21:d0:a3:fa:04:5d:6f:a5:6b:c0:9d:a0:3d:35:c7:
         41:e0:a6:6c:3e:e0:8c:1e:05:ea:42:64:88:40:f2:2a:74:d7:
         ee:05:cb:fc:a8:1b:aa:2d:c4:76:a5:3d:36:19:c8:f6:29:31:
         1f:f2:67:dd:02:55:12:e4:7c:17:2b:2b:f1:86:35:b5:2a:9f:
         6e:b2:f1:c7:e8:61:30:58:52:89:43:3d:c8:f0:cf:bd:0f:47:
         04:72:72:bc:31:db:01:69:1f:d3:c2:44:69:28:74:c5:b8:75:
         74:e4:46:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:45 2026 by rpki-client