Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=
Subject key identifier:   08:A7:9B:1F:C9:50:22:FC:9A:29:A5:D3:39:65:DA:63:C5:BF:36:CA
Certificate issuer:       /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
Certificate serial:       5C1AA2DA4789C0EE293E4DB34061C0E84DB9D1EC
Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:48:30 +0000
ROA not before:           Sun 03 May 2026 02:43:30 +0000
ROA not after:            Sun 02 May 2027 02:48:30 +0000
asID:                     131743
IP address blocks:        103.227.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl
                          rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1a:a2:da:47:89:c0:ee:29:3e:4d:b3:40:61:c0:e8:4d:b9:d1:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
        Validity
            Not Before: May  3 02:43:30 2026 GMT
            Not After : May  2 02:48:30 2027 GMT
        Subject: CN=08A79B1FC95022FC9A29A5D33965DA63C5BF36CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:1e:73:e9:fd:6b:42:33:63:92:77:a0:6c:
                    1d:a7:33:1d:c2:12:5a:9d:90:6a:4b:1b:93:10:1b:
                    6b:86:7f:b0:6a:f4:7a:f8:bc:31:7c:6b:5a:67:b1:
                    1a:85:39:9a:98:c2:35:c4:c8:bd:52:95:8b:6f:f3:
                    e1:61:ae:00:e4:b2:ac:7e:f6:7e:bb:3b:9b:c4:1a:
                    bd:5e:f4:f4:98:60:d5:3c:22:d0:b2:fa:26:5a:c8:
                    1a:97:d4:9d:53:85:66:a2:b6:ca:65:84:18:1f:c9:
                    cc:1e:37:9b:96:6c:c6:3e:2d:45:dd:f3:5b:15:b0:
                    4c:4b:a9:c5:67:18:a6:2a:00:76:2b:96:da:ca:4f:
                    8d:97:e5:41:37:80:6d:38:be:f6:e6:a6:fa:5f:d5:
                    51:93:9e:48:94:fd:c7:d5:68:84:45:45:f4:1e:5c:
                    33:52:c2:66:cc:6b:ae:02:e3:24:f4:e0:18:06:41:
                    a1:67:d7:1a:48:55:6e:71:90:f3:3f:bb:7d:59:7f:
                    1b:a6:6e:84:f9:8a:ae:7d:ed:4e:08:38:e4:b8:f4:
                    07:9b:56:5c:f9:62:54:65:09:62:84:c0:46:0a:de:
                    ce:a2:a6:03:c7:b4:5e:84:03:1f:35:dd:c7:8f:e0:
                    23:90:95:e5:02:d5:4d:53:5e:df:cb:6b:4f:75:29:
                    ea:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A7:9B:1F:C9:50:22:FC:9A:29:A5:D3:39:65:DA:63:C5:BF:36:CA
            X509v3 Authority Key Identifier:
                keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:7c:6d:51:67:28:71:49:33:3f:6a:0a:cd:1d:67:a6:01:2c:
         fb:ca:e5:1b:f7:96:70:51:57:45:12:3c:c3:e2:c6:ed:af:4f:
         9f:6b:77:a7:89:55:14:7a:91:1b:50:11:23:b5:1d:3b:af:1c:
         bf:b8:c6:55:33:08:27:e5:fa:52:80:8d:1b:00:af:20:12:ff:
         52:9c:af:8c:97:5b:16:ad:c6:89:02:46:22:cb:c7:6e:5c:a2:
         39:32:5f:0b:5a:27:b3:4b:56:18:88:90:b3:be:57:a9:a3:2c:
         2c:3a:4e:db:8e:75:11:61:8a:6c:de:ca:70:bb:89:e1:10:22:
         87:c2:77:a9:67:a9:d7:b6:4d:40:75:59:5b:f0:58:c0:dd:e0:
         ff:8b:45:5e:73:3d:3b:5f:7a:90:e5:68:50:b7:73:44:5d:b8:
         be:51:e8:95:80:06:76:6c:71:fe:fd:ed:55:dd:46:b1:2f:4d:
         11:74:c9:d3:7a:f5:09:b6:72:3a:9e:05:7a:bf:88:c2:5e:3e:
         80:4a:f3:10:8c:62:e4:27:89:33:07:c5:ff:b6:5c:8e:ac:bc:
         58:c3:1f:14:b7:a3:64:58:17:a9:19:05:54:81:aa:07:bd:fb:
         03:77:10:72:0d:d4:0c:d1:f1:1b:1c:bd:27:64:57:a1:4f:21:
         af:94:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:25 2026 by rpki-client