Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
File:                     3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (raw, json)
Hash identifier:          qQsnDUNPeHXu+DNiw4SOcpK8StEWum36MYHLhy1M0Kc=
Subject key identifier:   1C:F1:25:C4:D0:02:C2:44:56:C4:05:D9:AC:27:0C:3D:CC:FB:0A:29
Certificate issuer:       /CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
Certificate serial:       6F525375BBC11C21A9F8C91413D1F34BBBC29E09
Authority key identifier: 80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
Signing time:             Sun 03 May 2026 02:57:20 +0000
ROA not before:           Sun 03 May 2026 02:52:20 +0000
ROA not after:            Sun 02 May 2027 02:57:20 +0000
asID:                     150489
IP address blocks:        103.55.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl
                          rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:52:53:75:bb:c1:1c:21:a9:f8:c9:14:13:d1:f3:4b:bb:c2:9e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802C2CB1A54866443409E3FDE12F77EC6FB87F55
        Validity
            Not Before: May  3 02:52:20 2026 GMT
            Not After : May  2 02:57:20 2027 GMT
        Subject: CN=1CF125C4D002C24456C405D9AC270C3DCCFB0A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:a3:90:05:df:c0:85:61:97:3c:4d:40:05:
                    3c:ee:1e:35:76:09:4f:bd:75:6c:9e:d7:e3:9a:83:
                    db:b2:0b:df:28:4a:8f:f3:f4:94:54:e2:0b:eb:7d:
                    98:c3:27:af:b2:07:db:54:6e:b4:33:df:42:4f:8b:
                    a1:be:88:28:d9:47:4d:4e:0e:90:3d:db:16:71:8d:
                    a4:20:87:40:5e:31:ab:4e:6d:eb:b1:ee:7c:3a:be:
                    05:23:84:f1:77:a2:bf:e5:f5:64:5c:b2:a6:3a:63:
                    9a:c4:37:59:d5:89:4a:ff:5a:82:2f:22:07:0b:36:
                    c8:93:82:b2:1e:14:08:20:e6:a4:7e:79:c5:21:6e:
                    da:f3:72:0d:31:aa:ee:39:d8:86:a7:c9:a6:97:29:
                    94:87:ec:f7:ee:df:96:55:a0:73:e7:b6:96:52:0d:
                    0d:44:a9:6f:a2:c4:9e:15:e3:e4:07:21:91:08:2e:
                    ed:2a:ef:c1:ae:17:d0:39:b9:94:df:1f:6b:2f:ce:
                    f8:0d:12:ef:78:b2:86:59:c3:49:05:f8:ff:cd:35:
                    4d:19:95:a8:f1:17:f0:05:33:bf:4e:58:e4:f7:57:
                    bb:1f:67:5f:02:6e:30:02:4a:a4:75:03:cb:79:c5:
                    fd:bc:b8:9c:7c:36:bc:cd:c9:98:95:d7:25:fa:c2:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F1:25:C4:D0:02:C2:44:56:C4:05:D9:AC:27:0C:3D:CC:FB:0A:29
            X509v3 Authority Key Identifier:
                keyid:80:2C:2C:B1:A5:48:66:44:34:09:E3:FD:E1:2F:77:EC:6F:B8:7F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/802C2CB1A54866443409E3FDE12F77EC6FB87F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/802C2CB1A54866443409E3FDE12F77EC6FB87F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:64:c3:bf:c4:3a:30:00:95:66:7e:e1:46:62:31:e4:d5:76:
         18:08:42:65:6b:79:4e:09:11:40:dd:be:bc:f3:08:3c:d9:36:
         1a:97:dd:88:15:1b:0f:b0:a3:a1:ff:2e:c2:b7:15:9e:c1:00:
         99:45:df:8a:c9:40:19:bf:d6:21:c5:e4:05:1e:3c:eb:1c:f0:
         7d:34:18:89:99:82:a8:35:ec:7f:1f:df:ff:c0:b4:0a:f4:f5:
         65:b5:89:4b:62:ac:a1:50:8e:44:e1:4f:20:93:60:43:9d:35:
         77:b8:0a:56:ae:5c:0e:33:95:fe:c6:d2:f4:62:11:6a:be:2a:
         8f:bd:c7:8e:d2:18:c8:3b:8d:0e:bd:3e:68:96:39:28:ab:d2:
         b5:b6:66:a6:fb:26:8d:06:c2:07:e7:b6:97:92:6a:96:45:c7:
         a8:e4:ce:eb:4a:aa:47:e5:75:da:ca:2b:51:6f:6e:41:37:5a:
         41:4c:30:87:cb:a7:42:f9:f5:37:56:58:c2:6f:e3:d5:d8:8e:
         7a:eb:df:de:7b:ee:3b:9f:f8:2f:ce:a3:d5:f4:b3:dc:da:f0:
         5a:26:b2:7b:ea:ef:84:06:67:cb:6d:cf:90:78:24:cd:c9:4f:
         43:1b:d5:16:a2:7e:c3:e4:c4:35:d3:6b:63:7d:10:2c:c0:84:
         e9:3a:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:18 2026 by rpki-client