Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          2+4lQdjwQAe85kVWzjTaO1AsvRqx5WYrEbUSKbxLW0A=
Subject key identifier:   96:55:DD:A9:BA:AA:A5:6B:88:A0:DF:A1:EB:BA:3C:EE:E8:B1:AB:8D
Certificate issuer:       /CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
Certificate serial:       0CA7FB67562436419B08CEE9F7EFEFBED626DBFA
Authority key identifier: CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa
Signing time:             Sun 03 May 2026 03:07:10 +0000
ROA not before:           Sun 03 May 2026 03:02:10 +0000
ROA not after:            Sun 02 May 2027 03:07:10 +0000
asID:                     135478
IP address blocks:        103.129.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl
                          rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a7:fb:67:56:24:36:41:9b:08:ce:e9:f7:ef:ef:be:d6:26:db:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA27C3E53C727EC61238D1E2C1E353540CEEB79D
        Validity
            Not Before: May  3 03:02:10 2026 GMT
            Not After : May  2 03:07:10 2027 GMT
        Subject: CN=9655DDA9BAAAA56B88A0DFA1EBBA3CEEE8B1AB8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:f4:9c:0c:6e:b0:f4:3f:f6:d4:5b:e9:cf:
                    85:79:03:bb:90:ad:a5:ba:2c:7b:a9:e0:6a:dd:8d:
                    49:88:12:40:e4:94:9f:3e:69:37:91:4a:df:5c:d0:
                    bc:0d:d1:2d:3e:d6:16:64:92:f5:7c:2f:31:5e:a3:
                    47:96:f3:56:bf:ab:d9:2d:57:6b:45:59:75:cd:85:
                    dd:21:e8:79:7c:05:f6:de:97:ef:ea:3c:38:3b:76:
                    ca:30:61:3f:36:2d:bf:ad:c7:38:d1:26:31:ba:35:
                    51:7a:09:62:f6:a8:07:e2:a9:14:ef:67:03:a6:6d:
                    bf:4c:f2:b5:41:84:96:b9:80:d6:4c:fa:ec:f7:5d:
                    f7:d3:ed:c5:2d:c2:60:d6:77:a1:9b:33:ee:6c:2f:
                    82:02:21:0f:69:6a:c0:0b:b5:45:c8:a6:cc:f4:63:
                    05:df:1c:30:c1:18:23:e4:fe:70:fb:6b:98:61:65:
                    b2:f4:a2:a2:5d:7c:17:26:26:6c:c6:be:f8:07:62:
                    78:da:ce:78:0f:8f:c7:16:0f:ac:82:48:33:0e:55:
                    25:02:14:05:33:29:5f:de:b8:a0:31:2d:49:10:ba:
                    70:be:c9:90:ae:38:65:7f:2c:b2:f1:e6:5a:6f:9c:
                    8a:ec:4b:a7:74:7e:a6:c5:47:a4:24:88:c7:ff:59:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:55:DD:A9:BA:AA:A5:6B:88:A0:DF:A1:EB:BA:3C:EE:E8:B1:AB:8D
            X509v3 Authority Key Identifier:
                keyid:CA:27:C3:E5:3C:72:7E:C6:12:38:D1:E2:C1:E3:53:54:0C:EE:B7:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA27C3E53C727EC61238D1E2C1E353540CEEB79D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:2f:51:03:a3:91:f6:3c:10:c3:2a:87:8c:5c:5e:9a:6e:
         7f:6b:f7:53:e5:2e:f4:57:2c:b4:e6:37:23:79:3b:c5:3b:15:
         58:ea:a1:16:36:0a:53:b1:b1:ce:83:44:ff:2f:72:4c:80:83:
         7d:6d:db:ef:e1:e3:b7:55:dc:4f:bb:01:45:16:ea:a8:cb:3c:
         2c:c7:b2:30:a3:d2:eb:32:01:c3:5b:53:bc:b8:30:f1:af:a1:
         16:a5:15:9f:26:a9:32:a9:cf:bd:f5:e8:29:7c:da:b7:82:62:
         fc:89:8b:80:50:87:77:e5:b2:6c:11:05:8b:b8:9a:ad:fd:a6:
         78:d2:88:20:bc:b3:68:bc:23:39:e6:49:5c:86:67:c7:60:52:
         01:e3:34:63:61:c1:ad:f2:d1:8f:63:af:7e:7f:c3:0c:b8:13:
         a1:9d:21:4b:9f:29:5e:46:4d:30:6d:6a:af:c0:1e:09:96:f1:
         47:6c:85:b6:ce:cf:28:d7:d0:9e:ad:0e:7f:fc:e0:02:3c:4f:
         82:88:0b:cb:78:cf:56:e9:d8:6a:2e:cf:c5:8e:96:7b:26:b7:
         1b:fb:11:9e:67:ca:a6:02:3d:ff:c3:00:12:2d:e3:a4:c7:f0:
         26:59:9a:a0:6c:a2:81:a7:5d:60:8d:5d:57:ba:81:25:bb:40:
         3b:57:bf:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:26 2026 by rpki-client