Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          uXy9b8XhpbesCCoDWjd2NVNJTQEIt1Rzumg6PbPcPrA=
Subject key identifier:   80:61:B9:56:4A:2D:13:04:58:CD:61:C9:46:79:C3:83:DE:25:D4:F0
Certificate issuer:       /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Certificate serial:       4C80A32785C59564E01C3DD14340044E9DFD757B
Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:07:11 +0000
ROA not before:           Sun 03 May 2026 03:02:11 +0000
ROA not after:            Sun 02 May 2027 03:07:11 +0000
asID:                     135478
IP address blocks:        103.129.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
                          rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:80:a3:27:85:c5:95:64:e0:1c:3d:d1:43:40:04:4e:9d:fd:75:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
        Validity
            Not Before: May  3 03:02:11 2026 GMT
            Not After : May  2 03:07:11 2027 GMT
        Subject: CN=8061B9564A2D130458CD61C94679C383DE25D4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2f:8f:55:9f:52:92:2b:87:23:1a:f3:23:bd:
                    75:cd:ca:f0:f3:34:f7:01:37:41:5f:a7:b3:b1:36:
                    f8:16:29:d7:d9:5d:a7:b3:8b:1c:f1:d5:84:86:be:
                    41:f3:13:0a:2c:87:23:ba:5c:08:c0:d5:d7:15:62:
                    6d:73:e3:1f:51:be:1f:1e:ce:99:88:bb:f7:c6:5d:
                    99:0f:0b:bc:68:d3:a5:9b:ac:51:46:71:10:60:40:
                    c5:9b:ac:0e:ad:a4:dd:66:13:c1:e5:d8:cd:36:0b:
                    13:79:65:c7:c9:f0:19:6f:ef:55:3a:ba:95:e6:13:
                    5f:3b:58:e9:51:bb:d9:2f:62:e0:16:d1:49:f6:2b:
                    11:2f:fe:ce:38:58:e0:1f:6d:ea:c6:b0:63:9c:40:
                    e3:78:40:5b:01:ff:e1:51:9d:3d:34:8b:97:49:18:
                    66:b5:ac:a1:5e:01:7b:b5:ca:ca:d9:37:11:97:75:
                    16:a4:e4:7f:5c:96:64:10:45:cc:fe:e6:c5:be:23:
                    ca:48:8c:7e:04:62:43:e4:dc:db:d8:0a:4e:1f:16:
                    fd:14:a0:c0:87:12:2f:f7:74:10:93:93:b1:7a:c1:
                    07:8c:56:f8:30:61:40:30:f2:ef:c7:3b:c4:8e:6d:
                    38:fa:4d:81:3f:62:89:b0:1a:97:50:87:d5:ba:1b:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:B9:56:4A:2D:13:04:58:CD:61:C9:46:79:C3:83:DE:25:D4:F0
            X509v3 Authority Key Identifier:
                keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:65:a4:35:28:da:cf:b8:2a:c5:a3:36:57:af:39:9d:2a:
         4b:97:97:70:73:bd:6e:ac:a4:46:d6:c7:31:9f:c4:15:42:88:
         e4:34:ea:c3:f3:6c:78:ed:45:cd:46:ab:5a:b6:79:51:0f:ca:
         87:e2:86:87:44:d9:ec:f0:be:0e:8a:e8:a1:03:9c:52:a3:ae:
         7d:3d:e1:57:a6:0a:0c:62:a5:03:84:c6:de:19:c0:82:70:36:
         09:ab:38:71:c0:13:8e:18:d8:71:03:ab:d9:64:ba:f9:78:8f:
         8f:49:8c:51:65:61:69:19:a4:7a:32:9d:ff:a2:53:4a:c4:3b:
         aa:a0:cf:68:2b:ed:6d:5a:63:27:2e:f5:31:01:b8:81:a0:f6:
         a9:a8:68:d1:5e:5c:c6:ec:2d:e5:de:91:48:f2:67:2e:a0:ab:
         1a:08:b6:d8:2b:32:12:8a:24:fe:cb:c1:07:2e:8f:b7:98:59:
         be:2c:85:32:b4:fd:7f:4c:d1:7c:25:e3:15:60:d5:cb:1d:0b:
         49:74:74:36:eb:5c:76:e2:4a:a8:04:45:ad:e3:c8:03:30:c9:
         d7:15:13:13:a4:d9:c4:59:99:cd:62:b5:c7:cb:93:58:cd:15:
         8c:f9:7a:d4:c3:04:da:65:4d:33:7f:4e:c7:b6:fe:35:59:6f:
         fa:ee:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:35:22 2026 by rpki-client