Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
File:                     3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          1gK99x1ItHrvOP2nffQyDA72Y2CbBGzEnTeDW6KjBoY=
Subject key identifier:   A9:D7:06:CE:56:E5:E7:22:FB:97:38:23:E6:ED:35:58:3E:21:5A:31
Certificate issuer:       /CN=D7F0443E844F58413FEE61023C66F3C2AF619180
Certificate serial:       010C55C6C352A0660F7879E7526C9CE5BD152C62
Authority key identifier: D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa
Signing time:             Sun 03 May 2026 02:45:27 +0000
ROA not before:           Sun 03 May 2026 02:40:27 +0000
ROA not after:            Sun 02 May 2027 02:45:27 +0000
asID:                     396982
IP address blocks:        103.55.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl
                          rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0c:55:c6:c3:52:a0:66:0f:78:79:e7:52:6c:9c:e5:bd:15:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F0443E844F58413FEE61023C66F3C2AF619180
        Validity
            Not Before: May  3 02:40:27 2026 GMT
            Not After : May  2 02:45:27 2027 GMT
        Subject: CN=A9D706CE56E5E722FB973823E6ED35583E215A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:7d:b5:34:6f:4f:93:94:b3:d0:1a:d1:e3:
                    79:3a:50:6b:3a:0c:7e:e9:1c:21:64:0f:cc:de:ed:
                    8a:82:9e:32:7e:70:60:e0:af:b8:e9:79:ce:8e:88:
                    df:89:a8:53:aa:66:fb:7b:7f:55:26:43:2b:c9:da:
                    d8:17:ce:38:b9:35:b8:d2:2d:a6:ba:4b:3e:03:d3:
                    8c:c4:03:30:f5:ed:d1:1b:8b:0a:5b:8a:66:bf:b5:
                    cb:fb:e8:39:ae:47:f5:e5:df:31:25:61:50:6e:f0:
                    27:ff:98:43:05:1b:82:4e:59:c4:03:86:e0:86:05:
                    1c:f8:f0:a3:b6:21:7f:4f:0a:8f:f3:d7:56:43:81:
                    9d:ad:b3:9b:72:77:69:ec:28:72:14:bc:ee:09:68:
                    6a:bd:18:a9:c5:7e:b1:34:b9:c0:4f:c0:64:bc:92:
                    ca:8f:e9:e5:91:6e:7e:37:e2:0c:67:38:5a:e2:32:
                    8d:34:f3:e7:f4:ca:78:44:30:0c:6a:79:6c:f4:4b:
                    4b:30:5d:0d:93:a6:d7:c8:7e:d7:94:fd:b6:8a:a8:
                    aa:d7:f0:b2:25:23:af:81:cb:53:89:da:30:c0:e2:
                    5f:f9:f1:25:0f:5b:37:a8:23:f3:5e:e6:d5:58:19:
                    d3:ce:51:69:c5:cd:ea:26:92:f9:4c:3e:b1:da:4c:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D7:06:CE:56:E5:E7:22:FB:97:38:23:E6:ED:35:58:3E:21:5A:31
            X509v3 Authority Key Identifier:
                keyid:D7:F0:44:3E:84:4F:58:41:3F:EE:61:02:3C:66:F3:C2:AF:61:91:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/D7F0443E844F58413FEE61023C66F3C2AF619180.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D7F0443E844F58413FEE61023C66F3C2AF619180.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7c636a46-38ff-4496-9721-8c03cf046345/0/3130332e35352e3235342e302f32332d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:23:71:7d:e7:ec:f3:e2:c0:08:64:3e:3e:53:e6:b6:52:79:
         65:05:95:30:49:fc:c2:1e:03:51:c4:9c:97:0c:e8:8c:21:04:
         b6:35:10:ff:68:29:3b:71:20:51:ad:3f:6e:29:53:21:7a:e0:
         66:27:35:3e:47:aa:3f:c7:20:aa:b8:b4:dd:28:aa:a3:cf:08:
         1b:51:cc:eb:db:e1:b4:81:50:5d:36:9d:7b:99:80:cd:a9:3a:
         5a:3e:3b:f1:00:a8:b5:33:ed:de:31:56:4c:67:d9:c5:6b:c9:
         da:d7:c7:f8:a7:e8:45:17:0a:63:9f:cf:c5:b9:1e:f2:0b:eb:
         15:b7:53:ee:ea:a1:5a:70:5b:09:92:b1:e7:af:ed:44:bb:fb:
         69:d7:b1:27:c2:38:86:7d:04:e9:7a:8c:9d:6f:8e:d9:5b:82:
         b3:44:58:4a:8f:1e:31:fd:f9:1f:5e:0e:3e:13:a0:94:09:f2:
         d3:3c:e7:32:c0:e0:49:e1:32:3c:82:3d:a3:e8:4b:83:b3:96:
         01:d8:07:09:af:0a:15:9e:1b:65:a8:c1:d8:2c:e0:89:00:cf:
         6d:35:82:5f:7b:48:6b:22:10:37:8a:bb:5c:15:d3:9d:bb:90:
         95:8a:a7:86:6f:fd:8a:7a:e9:60:5e:41:dd:1b:6b:a8:f1:25:
         3b:84:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:17:48 2026 by rpki-client