Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232372e302f32342d3234203d3e203539313335.roa
File:                     3130332e372e3232372e302f32342d3234203d3e203539313335.roa (raw, json)
Hash identifier:          usoIWcd8Xh8Y5o5mz4Th6snOG36cNVkHpCLTqZ4OQbk=
Subject key identifier:   9E:48:01:64:CC:71:41:41:7E:09:C1:3E:AB:64:B6:6A:D4:86:C7:97
Certificate issuer:       /CN=E6782977133FCE90213CEBEC30761D98F47C2F41
Certificate serial:       27CED03CFDC72F2900033AFA93F25034A5A98143
Authority key identifier: E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232372e302f32342d3234203d3e203539313335.roa
Signing time:             Sun 03 May 2026 02:56:52 +0000
ROA not before:           Sun 03 May 2026 02:51:52 +0000
ROA not after:            Sun 02 May 2027 02:56:52 +0000
asID:                     59135
IP address blocks:        103.7.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl
                          rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:46:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ce:d0:3c:fd:c7:2f:29:00:03:3a:fa:93:f2:50:34:a5:a9:81:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6782977133FCE90213CEBEC30761D98F47C2F41
        Validity
            Not Before: May  3 02:51:52 2026 GMT
            Not After : May  2 02:56:52 2027 GMT
        Subject: CN=9E480164CC7141417E09C13EAB64B66AD486C797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:77:bd:44:75:f4:56:4e:0f:1a:61:8d:87:e1:
                    73:24:bf:e9:68:b6:6b:02:35:7e:99:6c:97:e7:91:
                    5f:bd:66:0a:42:49:9c:0e:d7:01:b6:96:34:ff:41:
                    e9:be:57:fe:db:ad:77:dc:df:ed:a6:2e:3f:94:63:
                    c6:8c:32:c5:3d:8c:4d:db:53:10:78:81:6b:d8:a4:
                    f2:e9:90:6b:6b:b6:12:55:28:c5:0a:39:e1:18:9f:
                    8d:aa:14:52:57:ac:f9:13:dc:ae:af:40:b3:39:b9:
                    17:ef:0e:0f:18:8b:1a:6c:70:b3:b7:60:e4:e9:dd:
                    9e:05:07:43:6a:3f:26:81:ab:6f:41:5e:e2:9f:9b:
                    99:4e:f9:53:63:63:56:e4:e9:ea:33:78:34:23:69:
                    a7:21:6c:32:b9:be:46:0f:79:16:d7:f6:6f:02:67:
                    4e:57:1b:c8:12:7e:33:78:44:c1:c5:49:45:75:c9:
                    b8:e4:98:38:30:05:04:37:f3:b0:29:04:49:bb:39:
                    07:5f:cd:29:67:e5:3f:12:29:9b:3e:0c:bb:27:80:
                    b6:0f:fa:76:47:4c:c9:53:9b:75:60:34:88:0d:ff:
                    c1:ce:2f:e3:c8:0d:17:78:b7:d1:2f:5e:ae:ea:fc:
                    34:4b:a4:a5:9a:87:d2:c3:34:cd:40:a0:6c:89:3c:
                    60:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:48:01:64:CC:71:41:41:7E:09:C1:3E:AB:64:B6:6A:D4:86:C7:97
            X509v3 Authority Key Identifier:
                keyid:E6:78:29:77:13:3F:CE:90:21:3C:EB:EC:30:76:1D:98:F4:7C:2F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/E6782977133FCE90213CEBEC30761D98F47C2F41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6782977133FCE90213CEBEC30761D98F47C2F41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/3130332e372e3232372e302f32342d3234203d3e203539313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:43:0f:35:d3:34:cc:0c:f5:52:e3:09:c8:67:11:69:7d:74:
         99:b4:cf:73:45:1d:5c:b0:be:07:8a:f7:e8:09:17:66:58:1b:
         76:4c:d4:77:4f:14:61:c6:d5:44:9f:ce:b8:fe:26:90:4a:4a:
         69:7a:02:8e:26:65:1a:bd:76:86:4b:d9:9f:27:1b:fa:fe:c6:
         5b:ac:39:87:7a:97:76:5e:fa:f2:f5:36:ce:a4:00:97:e1:5f:
         67:27:44:e7:18:32:a0:4a:6f:44:fb:2f:1e:77:1f:aa:b1:29:
         25:f8:6b:7f:2b:7a:e1:d3:1f:8e:9b:1f:02:df:bc:a1:af:57:
         66:80:47:77:c7:d7:90:4b:19:06:8d:ed:ef:57:5c:5f:2b:81:
         6e:6b:2b:0e:51:c2:84:fb:3f:e0:fd:d8:ea:c3:4c:17:51:ec:
         1f:cb:30:f7:9d:0b:38:76:d6:93:0e:fc:75:33:75:d4:3b:a5:
         1a:5a:3e:1c:13:4e:69:77:42:2c:c1:d0:dd:53:e3:32:4d:56:
         6f:92:b8:4e:40:9c:e0:9b:90:62:51:ad:82:a5:c3:9c:b2:af:
         08:48:67:12:54:6f:dc:f6:8d:61:8c:44:c8:29:4f:3d:4c:f5:
         d4:3b:86:e5:ee:7f:05:44:df:ed:a3:d4:8b:e3:e5:5c:39:27:
         4a:7c:57:39
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUJ87QPP3HLykAAzr6k/JQNKWpgUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY3ODI5NzcxMzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThG
NDdDMkY0MTAeFw0yNjA1MDMwMjUxNTJaFw0yNzA1MDIwMjU2NTJaMDMxMTAvBgNV
BAMTKDlFNDgwMTY0Q0M3MTQxNDE3RTA5QzEzRUFCNjRCNjZBRDQ4NkM3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkd71EdfRWTg8aYY2H4XMkv+lo
tmsCNX6ZbJfnkV+9ZgpCSZwO1wG2ljT/Qem+V/7brXfc3+2mLj+UY8aMMsU9jE3b
UxB4gWvYpPLpkGtrthJVKMUKOeEYn42qFFJXrPkT3K6vQLM5uRfvDg8YixpscLO3
YOTp3Z4FB0NqPyaBq29BXuKfm5lO+VNjY1bk6eozeDQjaachbDK5vkYPeRbX9m8C
Z05XG8gSfjN4RMHFSUV1ybjkmDgwBQQ387ApBEm7OQdfzSln5T8SKZs+DLsngLYP
+nZHTMlTm3VgNIgN/8HOL+PIDRd4t9EvXq7q/DRLpKWah9LDNM1AoGyJPGCHAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUnkgBZMxxQUF+CcE+q2S2atSGx5cwHwYDVR0j
BBgwFoAU5ngpdxM/zpAhPOvsMHYdmPR8L0EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTYzNThkZGEtMGZmMS00ZjZhLWJiNjYtNjBmNGNhMDRjNDkwLzAvRTY3ODI5Nzcx
MzNGQ0U5MDIxM0NFQkVDMzA3NjFEOThGNDdDMkY0MS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FNjc4Mjk3NzEzM0ZDRTkwMjEzQ0VCRUMzMDc2MUQ5OEY0N0My
RjQxLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2E2MzU4ZGRhLTBmZjEtNGY2YS1i
YjY2LTYwZjRjYTA0YzQ5MC8wLzMxMzAzMzJlMzcyZTMyMzIzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzkzMTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnB+MwDQYJKoZIhvcN
AQELBQADggEBAGBDDzXTNMwM9VLjCchnEWl9dJm0z3NFHVywvgeK9+gJF2ZYG3ZM
1HdPFGHG1USfzrj+JpBKSml6Ao4mZRq9doZL2Z8nG/r+xlusOYd6l3Ze+vL1Ns6k
AJfhX2cnROcYMqBKb0T7Lx53H6qxKSX4a38reuHTH46bHwLfvKGvV2aAR3fH15BL
GQaN7e9XXF8rgW5rKw5RwoT7P+D92OrDTBdR7B/LMPedCzh21pMO/HUzddQ7pRpa
PhwTTml3QizB0N1T4zJNVm+SuE5AnOCbkGJRrYKlw5yyrwhIZxJUb9z2jWGMRMgp
Tz1M9dQ7huXufwVE3+2j1Ivj5Vw5J0p8Vzk=
-----END CERTIFICATE-----
Generated at Wed May 13 04:19:56 2026 by rpki-client