Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa
File:                     3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa (raw, json)
Hash identifier:          kPZOXT2GwEKlfeP/fQyv701xiJsSoJM2RbBmmUbPZZ8=
Subject key identifier:   27:07:1D:24:9F:64:8C:5E:73:4F:FA:8B:6F:90:14:85:EF:2D:50:81
Certificate issuer:       /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Certificate serial:       76797FD75AFD295228DC7F32AB30C886C73C739B
Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa
Signing time:             Sun 03 May 2026 02:57:19 +0000
ROA not before:           Sun 03 May 2026 02:52:19 +0000
ROA not after:            Sun 02 May 2027 02:57:19 +0000
asID:                     134658
IP address blocks:        103.55.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
                          rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:79:7f:d7:5a:fd:29:52:28:dc:7f:32:ab:30:c8:86:c7:3c:73:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
        Validity
            Not Before: May  3 02:52:19 2026 GMT
            Not After : May  2 02:57:19 2027 GMT
        Subject: CN=27071D249F648C5E734FFA8B6F901485EF2D5081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:d3:02:fe:d3:f7:42:02:f5:aa:d6:32:2c:
                    95:dd:25:19:70:68:ef:31:19:43:a4:6e:7e:81:d6:
                    f4:5d:a6:13:28:ae:39:b9:b1:41:3a:33:ef:21:70:
                    33:34:91:6d:77:2b:ae:5e:8a:1b:f0:2b:9f:67:ea:
                    33:8b:9f:01:60:7f:59:a6:c6:7e:e2:92:70:f7:a2:
                    d6:82:70:11:c0:e3:30:c6:63:48:cf:1d:2c:71:bc:
                    b6:51:be:26:33:49:e6:9f:f8:f4:32:a1:7e:f1:7e:
                    2c:92:f2:87:dc:95:1a:eb:08:50:2e:59:29:4e:34:
                    75:85:70:33:4c:fe:e3:5a:85:17:4b:29:5f:fb:ef:
                    dd:ca:41:0e:72:47:2d:50:d7:ee:9a:20:92:78:bf:
                    a9:d8:d4:5d:e6:f4:2e:56:78:bc:f4:46:fc:98:20:
                    fd:48:af:ca:92:a4:cd:3b:0f:50:88:cd:3a:8d:a2:
                    30:a8:b9:f0:10:72:8f:91:76:67:96:fb:7e:44:5a:
                    f2:06:7c:73:6e:46:8d:08:08:76:f5:91:01:84:91:
                    f4:cf:1d:24:59:05:e4:da:ee:8c:87:8b:c7:a3:0f:
                    0a:12:ca:13:34:46:d2:61:d1:ba:49:2c:74:c7:45:
                    6b:dc:b8:9b:40:bb:89:ef:47:d2:aa:94:07:c2:0c:
                    38:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:07:1D:24:9F:64:8C:5E:73:4F:FA:8B:6F:90:14:85:EF:2D:50:81
            X509v3 Authority Key Identifier:
                keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313334363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:be:49:f4:c9:ed:e6:57:dd:42:af:8e:5c:ef:6f:55:bb:
         68:dc:76:b9:25:ee:fa:54:86:b3:cf:78:03:25:79:3b:56:b0:
         58:80:00:7d:44:4f:4c:3b:94:ff:25:79:01:bc:e4:9c:2e:50:
         ce:64:48:49:7a:93:d3:5b:72:bc:23:37:08:a7:56:1f:88:21:
         3b:5b:4d:2e:f0:0c:70:3f:de:f1:64:59:11:28:1a:b6:73:25:
         32:00:ea:cf:52:b4:16:07:75:74:76:c2:65:dc:1b:7b:2d:7f:
         5e:99:bd:ac:c5:a7:f8:09:3f:c5:55:29:df:98:3b:f7:c5:ba:
         51:9c:ae:13:26:6b:9e:ff:85:82:b3:98:06:b5:22:00:f5:60:
         3b:b2:cc:25:57:04:53:4d:0a:e1:f9:2d:0c:e8:0f:3f:b3:1e:
         43:cd:3e:ac:e0:9b:68:14:50:11:6a:e2:e0:0b:a2:eb:9b:ba:
         b3:e1:68:b8:5d:e7:3b:5d:3f:6e:43:53:21:0b:36:e7:2e:f4:
         ac:45:a9:a2:e6:91:e7:38:cf:cb:b5:68:b2:59:a2:b2:c5:98:
         10:ed:66:1e:01:4a:43:fb:2c:64:2f:95:e5:b3:e3:4e:33:88:
         80:d1:ec:49:7e:c3:fd:41:0d:19:2e:2d:fd:4a:38:8d:93:f3:
         c4:18:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:00:56 2026 by rpki-client