Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
File:                     3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa (raw, json)
Hash identifier:          6hdyf5UyF+Tqhlq/rEWrqEwjd98p7rc0NoOyzHNtasM=
Subject key identifier:   A7:AA:E0:99:D1:86:10:25:C8:7C:4F:64:76:33:BC:4A:66:AA:F4:A6
Certificate issuer:       /CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77
Certificate serial:       3AC077237FC5FC110A8FD10340FCFF1E09B56F8B
Authority key identifier: 2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa
Signing time:             Sun 03 May 2026 02:50:53 +0000
ROA not before:           Sun 03 May 2026 02:45:53 +0000
ROA not after:            Sun 02 May 2027 02:50:53 +0000
asID:                     136821
IP address blocks:        103.27.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl
                          rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c0:77:23:7f:c5:fc:11:0a:8f:d1:03:40:fc:ff:1e:09:b5:6f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77
        Validity
            Not Before: May  3 02:45:53 2026 GMT
            Not After : May  2 02:50:53 2027 GMT
        Subject: CN=A7AAE099D1861025C87C4F647633BC4A66AAF4A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:af:21:43:ac:49:1f:53:69:66:f1:70:26:bc:
                    71:f0:90:0a:c3:bd:0e:71:42:a9:f4:dd:08:b9:0c:
                    22:50:e9:65:70:f2:ad:83:c9:f5:68:16:a2:c8:e8:
                    f2:68:a6:f9:4a:11:bf:24:b1:b8:87:0a:7d:cc:40:
                    cb:cc:09:70:8d:9d:3c:10:7a:08:cc:7d:58:fa:6b:
                    0f:90:f6:69:57:90:ac:f9:6c:49:58:36:f2:43:88:
                    39:2b:ad:47:36:0e:83:e4:87:e3:33:a7:e2:17:a2:
                    d7:66:e2:87:c0:8f:a2:e0:4e:ae:3f:6a:e5:1f:7c:
                    23:3e:37:cc:1e:c2:77:7a:db:62:4b:0a:51:38:ef:
                    4a:2c:90:bb:84:2b:63:a5:6c:dc:8f:dd:cc:97:cb:
                    e5:1a:38:d5:5f:ee:3e:5c:56:9f:36:ab:ed:41:fe:
                    18:94:cf:11:f1:ba:41:98:88:da:4a:3f:65:73:e6:
                    58:ea:01:f8:1c:36:a6:40:d7:73:3b:ef:e7:42:7a:
                    33:c3:07:bf:51:d2:f2:3c:54:5f:ae:d7:a2:bc:18:
                    fd:5f:c7:d1:a0:7a:bc:39:e2:3d:3e:33:16:2e:a0:
                    d6:d9:fe:d2:f5:67:7e:eb:9d:87:b3:af:39:48:ff:
                    0c:e9:25:ea:bf:69:b8:b7:78:de:d8:44:a6:65:f0:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AA:E0:99:D1:86:10:25:C8:7C:4F:64:76:33:BC:4A:66:AA:F4:A6
            X509v3 Authority Key Identifier:
                keyid:2F:70:AB:35:F1:AA:8A:2E:18:AB:E3:AB:F1:8E:46:E1:A2:4A:5F:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2F70AB35F1AA8A2E18ABE3ABF18E46E1A24A5F77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/3130332e32372e3139342e302f32332d3234203d3e20313336383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:91:38:34:39:32:f5:80:3c:32:7b:2b:57:4f:47:da:c5:2d:
         9e:a7:ca:1b:e0:8f:16:4c:fb:31:e7:96:15:8f:71:7d:76:fb:
         d1:6a:80:ca:20:9a:8c:e2:ba:ae:3a:74:78:83:1f:6d:ef:6a:
         9c:c2:4e:b9:21:1d:6c:5f:01:56:9d:06:a1:8b:b6:89:cf:5b:
         a6:71:e5:98:d9:58:06:78:a1:71:80:d6:71:96:5b:14:7d:17:
         4d:87:9a:3a:cc:02:a2:5e:f1:48:b8:4f:e8:8f:38:38:1b:c7:
         3c:77:67:9d:be:e7:ad:30:63:05:56:a1:b3:7f:0c:10:56:26:
         de:8f:db:3b:86:6f:6a:d8:b6:ca:b1:95:00:5c:da:54:51:f8:
         69:8a:ac:e5:74:8b:24:f2:65:3e:3d:67:99:ee:a3:5f:65:16:
         8a:28:a0:cd:2d:d0:ed:b6:e1:2d:ef:49:83:20:3a:95:92:e6:
         c2:08:f8:7b:2c:db:14:98:0f:44:fb:74:27:7f:3e:28:19:c0:
         eb:15:29:0b:c8:5a:a1:36:de:32:07:52:05:09:f1:de:17:4c:
         a8:c7:d8:3b:69:d8:ea:48:30:b9:4c:70:9c:8a:38:2d:cb:f9:
         38:27:bb:8a:dd:23:31:54:2c:2d:2a:1e:a0:29:ca:8c:3e:bd:
         50:4e:9e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:12 2026 by rpki-client