Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa
File:                     3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (raw, json)
Hash identifier:          w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=
Subject key identifier:   93:FC:1D:EC:68:9A:CD:92:5C:89:F1:E4:E3:01:DC:56:A4:D4:D9:2C
Certificate issuer:       /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
Certificate serial:       0788506E6AF754B5290578C7F5D63F3A0A716E97
Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:48:30 +0000
ROA not before:           Sun 03 May 2026 02:43:30 +0000
ROA not after:            Sun 02 May 2027 02:48:30 +0000
asID:                     131743
IP address blocks:        103.227.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl
                          rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:88:50:6e:6a:f7:54:b5:29:05:78:c7:f5:d6:3f:3a:0a:71:6e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
        Validity
            Not Before: May  3 02:43:30 2026 GMT
            Not After : May  2 02:48:30 2027 GMT
        Subject: CN=93FC1DEC689ACD925C89F1E4E301DC56A4D4D92C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:eb:ec:e2:3d:37:ea:60:a4:5a:e8:90:0e:37:
                    3c:d2:c1:e3:39:13:13:aa:1c:50:f2:86:b3:ee:e3:
                    4a:e8:38:11:3b:58:a7:f2:d3:5b:b0:71:12:6b:3e:
                    e8:7b:5a:7e:9f:c4:34:80:17:f6:3e:90:91:a6:65:
                    ce:ba:db:56:11:14:8c:49:40:2f:cc:45:6f:79:c0:
                    34:ac:8d:2f:fb:75:a7:1d:fb:63:d4:61:51:bf:fa:
                    41:f2:49:9c:e2:15:9f:a9:1e:66:07:6c:c4:d2:72:
                    5d:f1:fa:58:45:48:d9:90:15:c4:ca:63:4b:32:4b:
                    78:d0:10:ea:44:57:e9:cd:65:7c:e6:11:42:0c:3c:
                    ea:9b:1d:fa:e0:a4:88:4f:2b:fa:8e:e2:60:7a:92:
                    8f:c1:40:a1:1b:10:b2:c2:98:fa:ab:f2:ce:d9:71:
                    11:96:61:d2:88:9b:15:cd:70:bd:9a:1d:fe:2d:f9:
                    1d:7b:c5:e7:c7:c3:de:bc:92:75:21:50:0a:66:73:
                    73:73:91:a2:2e:4b:db:be:86:39:bb:0b:80:ad:2b:
                    e6:e0:4c:a3:df:c6:70:f3:6d:65:3f:1e:3c:24:30:
                    cf:6b:77:3d:aa:d5:9d:0f:02:e4:6b:35:e1:fa:a1:
                    6a:c9:cc:6b:30:aa:60:62:5e:d2:41:f6:eb:3c:28:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FC:1D:EC:68:9A:CD:92:5C:89:F1:E4:E3:01:DC:56:A4:D4:D9:2C
            X509v3 Authority Key Identifier:
                keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:a0:92:13:bd:9a:09:be:ea:06:34:58:30:79:8b:75:cb:2a:
         3a:d3:db:49:cf:80:76:dd:04:5d:3f:11:1c:15:7e:2a:d6:c4:
         39:1b:b3:a6:71:4a:e9:75:cc:0a:94:d3:f2:d2:13:8d:63:13:
         23:39:a8:43:de:25:1c:04:b9:df:84:17:54:e6:0c:f9:90:5c:
         84:03:d9:0f:b2:0d:80:4d:be:51:d7:0c:91:03:4c:e2:94:78:
         40:b1:2e:f2:e6:f7:9a:18:e8:8f:fb:a2:1d:fe:8e:c4:b4:db:
         fe:d3:dd:99:68:d6:98:b3:75:a1:d8:5b:9f:0b:95:5a:ac:bc:
         ed:90:f3:fe:24:e7:d4:34:c7:31:5f:48:04:e4:4e:16:9a:ae:
         ea:e0:9e:ba:49:eb:e3:a5:d3:4c:17:d5:22:70:7f:16:c8:cc:
         ed:40:61:32:02:a4:d8:35:e4:9f:18:2a:ca:03:d9:a7:65:d2:
         03:1e:73:2b:14:75:13:ca:88:2d:e9:37:fb:66:4e:e9:92:a1:
         22:55:09:93:67:bf:38:eb:84:62:8a:19:5c:4e:88:aa:c7:2d:
         ea:76:3e:26:52:93:e4:f0:2d:ce:d3:db:52:6d:52:67:cd:45:
         48:80:d1:5c:ad:e6:b4:bf:74:0c:a8:14:b1:f6:55:e5:68:51:
         13:13:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:47 2026 by rpki-client