Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa
File:                     3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          dfrPktjrSxat3OJSIEiclXrWQZl7b22xPg7tyk7/iXg=
Subject key identifier:   CC:59:CD:ED:B6:0C:FE:C3:3D:20:A2:AD:AA:0D:DB:2C:CA:8D:D6:00
Certificate issuer:       /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Certificate serial:       0411ADD14D28384725CF16CF177F65356F2C627D
Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa
Signing time:             Sun 03 May 2026 02:57:19 +0000
ROA not before:           Sun 03 May 2026 02:52:19 +0000
ROA not after:            Sun 02 May 2027 02:57:19 +0000
asID:                     134658
IP address blocks:        103.55.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
                          rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:11:ad:d1:4d:28:38:47:25:cf:16:cf:17:7f:65:35:6f:2c:62:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
        Validity
            Not Before: May  3 02:52:19 2026 GMT
            Not After : May  2 02:57:19 2027 GMT
        Subject: CN=CC59CDEDB60CFEC33D20A2ADAA0DDB2CCA8DD600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4f:03:d4:d9:eb:68:54:1d:af:01:3f:27:a6:
                    40:d8:74:e4:fb:ef:53:cd:a4:7b:de:0a:c2:2f:a6:
                    87:e6:e2:43:c2:e4:41:3f:29:1b:20:42:db:d0:95:
                    93:c3:6e:82:71:72:9b:51:3f:d5:56:69:7b:65:93:
                    ae:24:ab:bd:81:5d:8a:8b:c5:db:b8:55:a7:89:97:
                    4f:8d:6c:d9:cc:bc:4e:75:63:b2:fb:81:99:c7:80:
                    10:ab:fb:7a:a9:81:1f:0b:a6:28:3f:66:ad:2a:d2:
                    ea:17:3b:5c:05:34:32:6c:f7:b7:d4:af:9c:b2:f5:
                    3a:68:b1:2c:c5:fb:7a:c4:f7:5f:4b:1a:e5:e1:4f:
                    77:69:26:07:ad:01:45:c6:dd:d3:a9:af:71:b6:f4:
                    2c:a1:4f:bd:a0:19:d3:c7:3e:c8:be:f1:5d:83:30:
                    2a:e0:63:95:24:65:ba:7f:53:3d:9f:81:f8:7a:36:
                    f1:5c:f5:87:ad:19:5e:ac:60:b6:04:8d:e7:36:ba:
                    52:0e:76:35:70:e5:e8:79:b3:f1:cc:30:e1:14:cf:
                    87:d2:9f:3b:62:0a:a2:7b:26:28:36:74:10:c7:bd:
                    75:04:33:62:e5:45:59:b7:f8:80:f0:91:8a:8c:0f:
                    10:a4:7e:84:53:dc:19:ee:9b:20:2a:b3:e6:12:d9:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:CD:ED:B6:0C:FE:C3:3D:20:A2:AD:AA:0D:DB:2C:CA:8D:D6:00
            X509v3 Authority Key Identifier:
                keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232362e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:c8:19:f9:c9:f3:96:65:c8:18:31:75:e5:9e:b8:ab:77:
         77:73:26:59:a5:69:22:45:83:65:9a:85:16:1c:c9:53:9b:ce:
         35:cc:9e:29:ca:98:82:c9:10:db:8c:ad:34:7d:6d:82:9a:0c:
         33:05:d1:fd:e1:6b:39:1b:c8:30:7b:7a:9a:16:d8:63:76:2b:
         dc:e2:03:0b:2d:27:ae:43:c5:d5:38:a6:b5:15:34:ba:13:96:
         5a:46:a1:da:f0:95:22:51:4c:b9:29:e0:fc:bb:6e:da:cc:78:
         88:1c:d2:d0:14:ba:cc:e6:09:d3:d3:de:e8:57:5d:ac:24:42:
         9f:d9:7b:15:cd:20:c6:2d:ec:75:51:69:f2:e5:65:03:b0:cf:
         84:3f:69:3a:1e:02:a2:e7:42:a7:b8:59:a5:49:c6:ab:a4:89:
         ac:14:e9:8d:bd:a7:22:10:a4:e4:bc:ef:72:77:db:01:43:2e:
         13:fe:d8:a5:f9:48:f3:14:c9:f0:60:22:6f:00:9e:aa:71:94:
         30:f7:4b:63:dc:52:1a:31:a4:7f:39:b6:0f:a4:50:df:9b:f2:
         b7:b2:bd:a0:49:f9:7c:bc:a0:1e:e3:0b:56:19:a4:96:9d:62:
         fa:39:76:a3:f1:47:cf:93:6c:f4:90:d6:c7:5e:c6:f1:cd:ca:
         58:65:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:11:42 2026 by rpki-client