Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa
File:                     3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa (raw, json)
Hash identifier:          tRfSITs+YrhJoF1TTyr+NGlfoTZ0o7YCDKtZ//9HAxs=
Subject key identifier:   6A:BF:65:EB:68:0E:D5:C9:93:CE:35:57:8F:9F:3D:A6:3C:FC:49:9F
Certificate issuer:       /CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
Certificate serial:       3C27834621ADA6F25821CE4A480A8DD866DFF491
Authority key identifier: 09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa
Signing time:             Sun 03 May 2026 02:41:55 +0000
ROA not before:           Sun 03 May 2026 02:36:55 +0000
ROA not after:            Sun 02 May 2027 02:41:55 +0000
asID:                     59279
IP address blocks:        103.227.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl
                          rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:83:46:21:ad:a6:f2:58:21:ce:4a:48:0a:8d:d8:66:df:f4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092FBCDA01C159D9AFBE6195B6842AFB98B65E5A
        Validity
            Not Before: May  3 02:36:55 2026 GMT
            Not After : May  2 02:41:55 2027 GMT
        Subject: CN=6ABF65EB680ED5C993CE35578F9F3DA63CFC499F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:39:04:48:a1:79:81:0e:c0:c3:ce:3b:b0:bc:
                    91:ac:34:82:bc:74:ba:62:63:03:a9:99:9b:c1:c1:
                    6f:9e:4e:21:f5:52:c5:65:50:6c:27:65:26:39:0d:
                    18:b5:ca:1a:17:fb:cd:06:11:c1:f3:94:6b:c7:39:
                    92:81:6b:d8:18:f4:d1:fd:56:03:4b:6d:06:d4:eb:
                    9d:bf:45:35:42:fc:13:6b:a5:15:01:1c:61:5b:35:
                    35:7f:27:0f:53:62:3e:f6:80:95:92:e7:ce:c7:6c:
                    b1:e4:60:af:25:0d:11:0e:ad:30:08:12:80:cf:ed:
                    58:19:cf:9f:19:30:e2:eb:f9:27:fb:47:07:0d:2c:
                    0d:16:0d:a9:f2:cb:a7:8d:88:b4:b0:27:3a:fd:ea:
                    82:e9:d9:2d:79:88:50:7b:68:90:52:2b:a0:0a:0d:
                    e8:89:2c:a6:d6:9d:3e:e4:22:91:e7:6a:82:95:f5:
                    fe:42:ca:90:c2:d4:4e:c6:7f:5a:a5:b9:40:07:f5:
                    5a:12:13:48:a5:da:ef:dd:32:81:36:b4:bc:f9:a1:
                    c1:99:f1:21:55:66:ec:89:4b:04:e1:10:bc:91:22:
                    dc:0e:0d:88:27:1a:b4:c3:ae:19:a2:c4:23:4c:1a:
                    24:b4:70:33:d0:9e:44:8c:f5:3c:74:c1:70:41:dd:
                    2d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BF:65:EB:68:0E:D5:C9:93:CE:35:57:8F:9F:3D:A6:3C:FC:49:9F
            X509v3 Authority Key Identifier:
                keyid:09:2F:BC:DA:01:C1:59:D9:AF:BE:61:95:B6:84:2A:FB:98:B6:5E:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092FBCDA01C159D9AFBE6195B6842AFB98B65E5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6efffc2d-cca7-48e6-9cd6-565c11c45440/0/3130332e3232372e3235352e302f32342d3234203d3e203539323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:80:68:09:ec:32:c4:15:d2:b0:0c:81:81:30:d7:e0:a1:91:
         e7:79:0a:58:dc:0d:0d:55:1b:5e:e5:8c:10:d6:ca:d9:7e:98:
         9b:00:80:b4:c1:cd:26:6e:10:fc:2f:91:3a:63:9f:1f:b4:7e:
         38:46:9e:75:55:76:ab:bf:99:a5:d8:c0:2f:9f:de:b8:78:7f:
         da:c4:e8:87:f3:ab:68:48:e5:5a:07:fe:fb:28:ca:f2:da:5f:
         2b:49:2d:4f:fd:b6:40:1b:fb:fa:20:26:5e:f5:2d:dd:72:55:
         10:55:50:44:d7:ed:a1:be:14:16:b7:8c:ba:02:11:48:a5:ec:
         71:ca:06:be:9f:b0:fd:5d:4d:1b:9b:16:5e:05:52:4c:81:06:
         4c:bd:68:1c:3d:6a:94:61:70:09:a1:d3:12:52:7e:52:7b:45:
         29:10:50:a8:e7:e5:c4:24:8a:89:90:17:9a:50:b6:14:b3:87:
         0e:d6:16:03:fd:47:cb:92:0d:1b:92:61:72:90:ea:3d:dd:b3:
         e4:87:f3:a6:ad:96:5e:00:e3:1e:56:d3:2d:44:95:5c:04:0c:
         ff:15:3a:44:b3:b6:0a:d8:73:67:bc:fc:67:81:37:e4:fe:7f:
         76:c1:68:00:a6:45:32:d2:5d:a5:fb:0d:12:74:9b:6e:c5:b3:
         12:7b:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:54:01 2026 by rpki-client