Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa
File:                     3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa (raw, json)
Hash identifier:          0KL+GKoXYThGAvjPDJloAkIR1Xp1OqoYniNvKJ7kjSk=
Subject key identifier:   35:A8:DF:8E:17:74:CC:09:C2:46:57:37:1E:03:F6:1B:BA:4D:22:15
Certificate issuer:       /CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
Certificate serial:       332B0804F87EE23E68D9BCAC40AF28B58F85EF6C
Authority key identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa
Signing time:             Sun 03 May 2026 02:41:55 +0000
ROA not before:           Sun 03 May 2026 02:36:55 +0000
ROA not after:            Sun 02 May 2027 02:41:55 +0000
asID:                     59279
IP address blocks:        103.227.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl
                          rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2b:08:04:f8:7e:e2:3e:68:d9:bc:ac:40:af:28:b5:8f:85:ef:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
        Validity
            Not Before: May  3 02:36:55 2026 GMT
            Not After : May  2 02:41:55 2027 GMT
        Subject: CN=35A8DF8E1774CC09C24657371E03F61BBA4D2215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:f0:8d:00:69:e1:86:97:64:9d:70:7a:d8:
                    f8:49:1a:b5:3a:19:77:96:38:b6:c3:78:bb:29:77:
                    a6:9b:d3:61:91:d0:49:03:bc:59:08:11:8f:03:88:
                    af:a7:27:76:e1:a3:c3:94:24:ee:b3:97:78:88:d3:
                    2f:0b:bf:b4:33:0d:9d:70:78:6a:1b:21:e4:83:c8:
                    ca:93:06:76:b4:8e:00:9c:a3:6f:6e:fd:c3:d2:dc:
                    b1:48:26:25:b9:e8:83:fc:1e:f5:1f:8f:74:1e:fd:
                    bc:a8:3a:ab:88:f0:69:aa:d9:02:86:e4:3b:86:25:
                    2b:98:23:9d:b9:04:73:81:0a:2f:12:91:93:88:3f:
                    d5:86:3d:db:73:a6:96:00:e1:8c:c8:91:9f:64:8b:
                    0b:6d:9a:b2:66:22:7a:bf:0e:67:a5:9f:1b:c2:4b:
                    3f:f9:b5:69:1a:6f:a5:7f:39:de:36:45:e4:a6:aa:
                    03:ca:77:3c:35:c2:f4:7d:11:39:e3:af:00:19:50:
                    8f:fb:69:ed:30:f5:2a:09:80:35:50:de:d7:d5:80:
                    2f:5e:e2:e6:74:d9:27:2a:5d:40:c5:d3:55:7c:69:
                    31:7c:5b:64:46:c2:4a:a3:48:ee:d1:40:3d:e4:d3:
                    42:ee:14:5c:c2:e4:a0:4d:43:57:38:f8:11:b6:ac:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A8:DF:8E:17:74:CC:09:C2:46:57:37:1E:03:F6:1B:BA:4D:22:15
            X509v3 Authority Key Identifier:
                keyid:09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235332e302f32342d3234203d3e203539323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:97:0c:e0:6a:7e:1d:59:6c:95:e7:1e:d6:84:b8:ac:6b:67:
         c0:33:2b:25:d5:99:76:34:a6:5e:b1:69:2a:19:85:21:96:dd:
         39:6c:08:35:48:d0:ba:75:4b:34:94:b8:4c:80:2c:2d:ff:ba:
         37:cf:96:39:04:c1:92:10:22:77:7d:9f:82:c3:36:0a:bc:e9:
         cc:e4:cd:b0:6e:cf:bc:da:1e:ad:6c:be:53:d1:44:2c:98:8b:
         88:66:80:35:0b:b9:b5:89:41:1a:be:d0:d8:5f:84:5b:bf:34:
         af:46:ff:b8:23:93:68:39:6f:60:bb:12:67:b5:49:2b:18:83:
         a7:5b:19:db:46:46:e0:ed:cf:0c:49:d1:b3:b9:f6:9c:cb:63:
         cb:d1:60:64:e7:5f:bc:52:cf:e2:80:64:10:fa:f4:56:07:82:
         a2:06:93:e1:b2:93:da:f0:8c:9d:69:43:11:9a:9e:b3:b6:17:
         f0:ae:49:e7:7f:15:90:bd:d3:c1:f7:7c:fd:a5:7d:30:74:a4:
         0f:96:45:fb:26:77:74:c3:a2:77:99:20:d3:8a:a1:b7:93:24:
         ec:0d:27:96:29:44:8f:64:3f:55:4f:ad:4c:9e:c7:16:ce:4d:
         1d:9f:a9:ee:33:ca:97:62:c2:d2:ec:25:42:8e:f9:f4:17:47:
         41:e8:29:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:17 2026 by rpki-client