Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
File:                     3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (raw, json)
Hash identifier:          IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=
Subject key identifier:   03:D9:0E:F0:0D:54:70:EC:42:16:56:51:52:F1:67:2D:99:3C:A7:3D
Certificate issuer:       /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
Certificate serial:       4A2B633F71380E08984B185460BCB5540650097C
Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa
Signing time:             Sun 03 May 2026 02:48:31 +0000
ROA not before:           Sun 03 May 2026 02:43:31 +0000
ROA not after:            Sun 02 May 2027 02:48:31 +0000
asID:                     131743
IP address blocks:        103.227.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl
                          rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2b:63:3f:71:38:0e:08:98:4b:18:54:60:bc:b5:54:06:50:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244
        Validity
            Not Before: May  3 02:43:31 2026 GMT
            Not After : May  2 02:48:31 2027 GMT
        Subject: CN=03D90EF00D5470EC4216565152F1672D993CA73D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:66:80:11:21:cb:42:8f:8c:bb:6d:48:12:
                    68:82:17:1b:56:db:60:ec:a9:63:bf:eb:7f:19:e2:
                    1c:8a:61:b1:18:80:bd:55:69:68:b0:3b:a0:9c:a6:
                    93:2e:b5:46:e1:99:c6:09:1b:10:df:41:87:3d:6f:
                    ab:dc:42:90:cf:1d:92:e1:06:8d:15:2a:57:07:51:
                    74:bc:44:21:cb:a5:30:d4:ba:6d:07:82:83:cb:31:
                    1d:3a:58:6e:db:a0:88:33:9c:28:df:82:ec:c9:e5:
                    b4:33:ed:20:de:e7:cb:f9:55:fa:f1:9f:c0:13:c7:
                    c6:3a:ab:3a:80:5d:45:81:12:77:8f:1f:f7:de:f6:
                    83:f2:64:fd:fa:c3:1d:85:77:d9:78:3d:48:1f:c7:
                    bd:7f:b9:d1:20:c2:32:c1:28:55:1b:f3:6f:13:c4:
                    63:5d:b6:5d:20:ec:7b:c4:25:f4:cd:10:1c:f8:9e:
                    71:dd:22:23:f4:71:89:8e:08:10:5a:f2:f3:59:83:
                    82:b5:f5:7c:07:dd:9e:b5:5b:b2:9a:a2:05:82:47:
                    ff:37:48:2b:f2:b9:04:c6:c3:5b:81:79:1c:70:d1:
                    67:ef:2c:83:e7:ff:80:46:ff:d2:97:40:26:eb:15:
                    81:88:3d:4f:12:3e:82:57:35:e8:72:3f:6e:0d:d1:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:0E:F0:0D:54:70:EC:42:16:56:51:52:F1:67:2D:99:3C:A7:3D
            X509v3 Authority Key Identifier:
                keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7f:53:9e:fb:8e:fd:7b:53:d5:aa:ac:02:4e:cd:eb:4d:c8:
         98:4e:ef:d9:7f:ee:ad:2f:e3:c8:e8:61:ec:96:05:11:8d:7f:
         81:be:7b:a1:6c:c6:1e:51:7f:e4:55:a9:07:dc:fe:37:80:c9:
         9e:bf:42:61:df:3d:02:20:2c:30:f5:57:96:18:f2:ed:e6:31:
         f5:8b:0b:c2:e3:49:e3:e1:0a:d7:3c:c7:ef:ff:80:2f:81:63:
         6b:49:87:c3:59:3b:52:a9:36:13:bc:9b:4f:b2:e4:bb:e0:fb:
         d2:f4:e2:51:1b:f1:c3:4f:6b:65:2a:55:02:12:27:3e:b0:8d:
         7d:e9:d8:bb:c6:3e:19:80:7e:ed:c0:e6:ac:7e:f3:17:bd:be:
         31:f6:ed:d3:19:a6:ff:29:c9:0c:e7:14:72:ac:31:8b:36:58:
         ab:b4:8b:6c:3e:a6:fa:d6:52:b3:41:dc:e7:08:6a:f0:49:94:
         4a:c0:9d:b3:65:9d:72:4a:bc:bd:12:98:75:0e:b4:6d:77:5c:
         5d:e7:e7:31:35:9b:c5:52:6f:cc:60:cf:9c:1b:4a:0a:4e:44:
         b9:1f:88:09:97:6c:37:7f:ac:9b:71:aa:b7:f7:80:73:e0:3b:
         36:5c:24:a6:73:63:ea:e2:b8:13:88:4b:d9:e2:07:94:79:d1:
         88:a0:fb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:26 2026 by rpki-client