Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa
File:                     3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (raw, json)
Hash identifier:          jDwYR0eXqs/UReeXAyA7K2tU1AiHfANmWKIdRhF2du0=
Subject key identifier:   AB:C7:84:0B:3A:A0:ED:26:6E:B1:9C:06:68:86:62:0A:12:DC:DB:3F
Certificate issuer:       /CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
Certificate serial:       2FC0679D98E531D1A42B999E63230A6D7C78EF04
Authority key identifier: 76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa
Signing time:             Sun 03 May 2026 02:59:44 +0000
ROA not before:           Sun 03 May 2026 02:54:44 +0000
ROA not after:            Sun 02 May 2027 02:59:44 +0000
asID:                     59278
IP address blocks:        103.227.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl
                          rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c0:67:9d:98:e5:31:d1:a4:2b:99:9e:63:23:0a:6d:7c:78:ef:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7637E963EF709E2BBD39881202E68EA7BA09EB64
        Validity
            Not Before: May  3 02:54:44 2026 GMT
            Not After : May  2 02:59:44 2027 GMT
        Subject: CN=ABC7840B3AA0ED266EB19C066886620A12DCDB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:75:85:18:44:8e:ce:18:ac:de:e2:94:e5:1f:
                    b3:c3:76:97:b2:e5:02:92:7f:b5:36:7b:b6:29:85:
                    62:ce:66:6f:9f:7e:8f:75:b9:6c:ac:93:b8:17:15:
                    aa:72:db:d1:f5:64:46:95:8e:28:d4:75:87:7d:14:
                    69:b4:b0:e7:fb:36:ec:3f:f7:94:a3:78:4a:7b:59:
                    8e:c3:53:f5:c8:60:f5:01:f8:17:69:b6:44:5b:08:
                    b4:1a:bd:6d:8a:b4:44:a6:32:df:b4:ff:6d:d6:f6:
                    ce:ab:d6:c5:60:11:1b:c8:b1:f4:fb:84:e2:a6:69:
                    e8:b2:38:92:30:ce:e6:0b:dd:4c:3d:45:50:25:b5:
                    1a:c1:88:40:ae:ed:14:63:20:3b:0f:31:8d:59:4b:
                    e4:c7:c1:62:b8:fe:22:cb:b9:19:43:6b:a3:55:4b:
                    d2:68:06:b2:8a:e6:f6:57:8b:d7:6e:4a:50:7f:4f:
                    20:73:0a:43:80:ef:19:08:f4:26:e3:aa:2b:1c:59:
                    17:a6:26:c8:e7:89:d2:81:71:2b:dd:37:4d:e6:8e:
                    f2:e8:98:28:5c:71:d8:24:c2:34:76:64:59:e6:f5:
                    9c:76:d5:10:4a:40:35:2e:51:c6:11:75:0a:fd:25:
                    6e:5a:6b:71:ed:88:ad:1d:80:76:bd:e8:a3:f6:37:
                    5c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C7:84:0B:3A:A0:ED:26:6E:B1:9C:06:68:86:62:0A:12:DC:DB:3F
            X509v3 Authority Key Identifier:
                keyid:76:37:E9:63:EF:70:9E:2B:BD:39:88:12:02:E6:8E:A7:BA:09:EB:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/7637E963EF709E2BBD39881202E68EA7BA09EB64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7637E963EF709E2BBD39881202E68EA7BA09EB64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:51:e9:8f:9a:3d:e0:12:f9:b6:b7:df:6f:4a:a6:e8:50:cb:
         86:d2:41:58:f4:dd:8a:79:69:3d:19:3e:3a:0f:95:01:a0:81:
         db:f9:f3:e3:e8:38:21:c4:85:87:88:d4:2c:9f:b8:14:cf:07:
         2e:e8:94:08:f9:3e:aa:55:a0:da:8c:cf:eb:ae:f7:cf:1d:eb:
         e8:d9:63:b8:3e:c6:6a:87:a1:9b:42:d0:af:7a:71:14:e7:29:
         f7:f9:35:c5:36:4f:be:ba:95:48:cd:43:cd:0f:51:d0:78:44:
         1b:63:34:c8:f1:ac:32:de:1b:48:63:d9:3d:18:72:7f:83:e2:
         60:dd:c2:95:5d:ec:74:ce:bb:51:79:69:55:1e:17:c8:73:94:
         0e:33:ea:fa:26:94:58:a3:60:2d:27:f0:53:a0:87:05:8d:96:
         f4:ae:3e:72:74:eb:a4:93:0c:c1:17:bb:8b:06:70:42:4a:b9:
         9c:03:cf:07:58:3b:95:e3:d4:37:6c:05:96:b2:ec:b3:8e:ae:
         0b:2e:e2:90:15:8f:37:23:37:ea:40:7d:dc:84:da:18:91:8b:
         1e:ea:04:50:47:01:ac:cf:2c:8e:1b:0d:f7:d9:6d:e2:b9:67:
         04:3c:7e:0f:39:a8:34:3e:b4:53:a1:78:b8:93:1d:d8:fc:c4:
         d5:45:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:06 2026 by rpki-client