Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa
File:                     3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa (raw, json)
Hash identifier:          puUYMZLO3dx3dUs9emntLpbN6g4pJlOZBy33RTslZOI=
Subject key identifier:   83:9C:2D:79:37:95:D6:B3:8B:B1:EE:56:11:00:C1:0F:47:70:D6:9A
Certificate issuer:       /CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
Certificate serial:       53E75B8D39C1CC52F440D3D4DECBA3DCE476FECB
Authority key identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa
Signing time:             Sun 03 May 2026 02:41:55 +0000
ROA not before:           Sun 03 May 2026 02:36:55 +0000
ROA not after:            Sun 02 May 2027 02:41:55 +0000
asID:                     59279
IP address blocks:        103.227.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl
                          rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e7:5b:8d:39:c1:cc:52:f4:40:d3:d4:de:cb:a3:dc:e4:76:fe:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
        Validity
            Not Before: May  3 02:36:55 2026 GMT
            Not After : May  2 02:41:55 2027 GMT
        Subject: CN=839C2D793795D6B38BB1EE561100C10F4770D69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:32:9e:a9:e4:e0:bd:bf:f1:ce:cc:10:c3:
                    41:b5:38:d9:ef:3c:f3:7d:40:de:40:40:4a:96:98:
                    9d:a3:8a:33:a9:30:da:b2:b8:b8:f7:b8:b0:68:09:
                    f6:0d:33:6d:06:3b:e5:d0:7b:00:a2:ce:fd:b3:72:
                    36:56:1b:ff:a4:46:00:85:f2:be:6e:cd:a3:af:dd:
                    d5:e1:a0:63:36:c8:31:93:01:d3:d9:73:0e:46:64:
                    85:e7:ec:dc:27:b4:32:de:ef:07:d7:d6:fd:56:ca:
                    f4:64:4d:62:74:ac:99:48:72:40:e8:82:b8:10:f7:
                    87:a7:a6:22:0a:7f:83:4e:df:22:08:ba:b7:4b:ff:
                    0a:05:b8:70:3e:a8:8b:82:fc:32:74:07:a0:8e:10:
                    04:b0:d9:af:a3:ba:e2:98:9b:0d:a3:f4:8d:05:ba:
                    3d:98:05:a2:b3:dc:a0:6b:24:6f:18:8a:73:2a:74:
                    22:0f:70:cd:22:f4:65:e2:d5:ad:88:db:30:52:88:
                    65:ee:f0:b6:6f:eb:10:c5:1c:65:fa:9e:91:28:99:
                    d0:0e:3b:55:90:92:b0:a1:39:0c:ad:1c:40:d2:fb:
                    18:c9:d9:81:42:0e:99:07:ec:97:61:11:9f:87:69:
                    33:75:e0:8d:be:f3:1a:94:d7:02:de:1e:49:c9:36:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9C:2D:79:37:95:D6:B3:8B:B1:EE:56:11:00:C1:0F:47:70:D6:9A
            X509v3 Authority Key Identifier:
                keyid:09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235342e302f32342d3234203d3e203539323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:a6:70:3a:0c:27:8d:9f:ba:23:fa:dc:72:b7:a6:92:c3:
         41:f7:39:d6:d5:b2:29:86:c6:06:b9:03:bb:b2:27:bc:fc:24:
         10:2d:3b:3e:5a:ea:1f:95:76:07:c9:5c:8f:f5:ff:23:8a:d4:
         13:c7:7b:17:94:b3:46:07:93:94:e7:42:56:0d:45:7d:ad:94:
         05:0e:79:1b:7f:0b:07:02:7c:97:3d:e3:cb:33:46:bf:d6:95:
         d8:eb:bc:01:c9:e7:2b:7e:e5:7a:ae:72:bb:57:0a:22:19:8d:
         42:5f:82:1d:7a:09:e5:d8:ce:cd:28:e5:bd:8b:d6:26:ef:fd:
         b2:e9:60:c2:18:1c:07:27:f7:3a:1b:e0:88:fa:92:c4:8b:d7:
         d5:e6:6f:b4:f9:e1:d6:d8:93:41:bc:97:d8:24:77:08:40:c9:
         db:47:ed:f8:29:01:b1:41:ba:71:0b:fa:41:f8:c0:98:df:d9:
         9c:52:63:13:3c:62:cd:61:e1:56:cc:d9:4a:1e:26:4c:4d:da:
         f2:4d:6a:a5:c1:aa:28:ca:bf:e1:d0:a3:93:6c:d9:e6:d1:2f:
         f4:86:48:ea:67:8a:15:28:3a:5f:7e:ee:87:39:d1:64:b8:af:
         49:37:e2:05:48:82:20:50:93:ee:86:7f:0a:00:da:c6:3b:0b:
         0c:aa:cd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:51:09 2026 by rpki-client