Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa
File:                     3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa (raw, json)
Hash identifier:          7jJh3/VcK6Y+8JbMHzIyFhICT0ZmzdRr0l5g6HYzQ4U=
Subject key identifier:   77:C9:42:E8:7F:46:01:37:F3:2F:13:63:81:E5:DD:FD:5D:2B:B0:8A
Certificate issuer:       /CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
Certificate serial:       382AF6012EB95EEDD8E603A7189D516779D96F8F
Authority key identifier: 5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa
Signing time:             Sun 03 May 2026 03:10:51 +0000
ROA not before:           Sun 03 May 2026 03:05:51 +0000
ROA not after:            Sun 02 May 2027 03:10:51 +0000
asID:                     142363
IP address blocks:        103.169.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl
                          rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2a:f6:01:2e:b9:5e:ed:d8:e6:03:a7:18:9d:51:67:79:d9:6f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58
        Validity
            Not Before: May  3 03:05:51 2026 GMT
            Not After : May  2 03:10:51 2027 GMT
        Subject: CN=77C942E87F460137F32F136381E5DDFD5D2BB08A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:aa:fe:57:83:be:d0:5b:09:2c:03:7a:45:
                    eb:42:1b:6b:36:21:52:e4:f9:4e:74:2e:e8:64:ac:
                    a9:c7:43:af:68:52:3f:eb:1a:8a:b7:3c:90:ae:4e:
                    8a:b3:7c:03:91:c8:8a:55:76:c7:32:7b:e5:c4:6f:
                    2e:23:c2:13:8d:97:22:ed:a0:b8:f3:50:1d:39:6a:
                    4c:e9:2f:85:1f:b8:6a:0b:f0:93:55:f2:b8:a2:5e:
                    05:5c:a4:a8:19:ca:ac:dd:04:8c:ed:af:49:46:14:
                    32:ff:09:79:6d:94:d9:f6:ee:d8:86:2f:7c:6c:c8:
                    97:25:65:6b:97:43:f3:43:e2:e5:be:e3:30:e0:d4:
                    b3:74:bc:3d:ed:bc:f3:d2:5a:19:05:76:44:71:43:
                    f3:b1:30:ee:59:92:d0:87:3a:f1:cc:b4:f0:9b:85:
                    e2:7a:1c:dc:7f:6b:98:95:2b:ce:89:f1:15:0e:7a:
                    da:d1:b5:f0:06:84:be:6b:e7:b6:bf:98:ec:5d:f1:
                    d1:77:23:39:57:2b:64:78:16:95:8e:e9:f4:6f:d0:
                    7d:6d:29:f7:42:e0:fb:4c:2a:d1:d4:dd:ea:92:be:
                    14:d2:1f:75:17:4f:0e:0c:6a:77:80:91:da:24:db:
                    b7:37:bc:19:c8:0c:4e:61:00:fb:d6:36:e8:b0:2c:
                    81:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C9:42:E8:7F:46:01:37:F3:2F:13:63:81:E5:DD:FD:5D:2B:B0:8A
            X509v3 Authority Key Identifier:
                keyid:5F:64:BD:BF:1F:5E:F4:64:EE:DA:DC:0C:7E:E7:F2:53:77:E7:9D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F64BDBF1F5EF464EEDADC0C7EE7F25377E79D58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/3130332e3136392e3232372e302f32342d3234203d3e20313432333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:63:86:f8:d4:8e:11:e5:9a:ca:39:6e:1e:a3:95:2c:67:
         86:27:81:2f:68:08:53:6c:6e:36:68:9e:b6:42:2c:c2:15:c8:
         9e:69:16:6b:f3:c1:69:8a:bc:1f:aa:8b:00:56:6a:50:ab:f2:
         6c:1e:4f:87:74:db:c2:03:6e:10:f7:28:9e:cf:c8:fa:21:f4:
         92:54:bb:de:e2:9a:5a:13:c3:53:23:ff:b4:0d:3f:14:94:de:
         0d:8e:41:18:62:eb:8b:96:96:ef:83:0e:c7:93:e5:00:d2:91:
         3c:7f:c1:a2:26:88:09:70:16:00:d3:33:50:40:2a:50:53:4a:
         94:6e:03:a2:68:c2:56:f6:a0:bd:5a:53:88:a7:2f:59:81:33:
         4a:67:c5:56:f4:89:39:5c:fc:c2:7d:6b:0d:7d:ef:2a:b1:f2:
         75:04:ae:e8:75:43:e4:a5:b0:f4:5d:47:16:82:94:0c:ca:ea:
         f4:41:6e:a8:de:94:19:8d:65:f4:f8:0a:03:1d:e4:61:0b:d8:
         e7:70:ff:ff:2e:8e:71:ff:22:76:c5:6a:67:f1:bb:01:a5:57:
         b8:f5:5c:46:17:ef:36:a6:bf:1c:49:21:26:56:0e:46:55:b4:
         a7:a9:2b:12:5c:f4:03:0e:0e:a9:c7:bb:b2:91:e3:1d:00:81:
         8d:8d:38:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:20:52 2026 by rpki-client