Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa
File:                     3130332e39392e32372e302f32342d3234203d3e20313530323739.roa (raw, json)
Hash identifier:          Ufj1irifhgIIf9Z+cJ8JRj8meHiqH+Kv6sNyd7Vy/bM=
Subject key identifier:   DC:52:FD:08:E4:3A:A2:E2:64:04:73:E6:F3:9F:A2:59:20:D5:6C:67
Certificate issuer:       /CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
Certificate serial:       29BF37C4DCA1895B50C90C5E1D85C1A5073BBE7C
Authority key identifier: C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa
Signing time:             Sun 03 May 2026 03:16:27 +0000
ROA not before:           Sun 03 May 2026 03:11:27 +0000
ROA not after:            Sun 02 May 2027 03:16:27 +0000
asID:                     150279
IP address blocks:        103.99.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl
                          rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bf:37:c4:dc:a1:89:5b:50:c9:0c:5e:1d:85:c1:a5:07:3b:be:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2D6F5B633701004FEFAE224348B98C8C5AF5DE4
        Validity
            Not Before: May  3 03:11:27 2026 GMT
            Not After : May  2 03:16:27 2027 GMT
        Subject: CN=DC52FD08E43AA2E2640473E6F39FA25920D56C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:e7:25:6e:64:f5:d4:5d:89:11:3b:8e:59:
                    a4:7d:fc:d6:e8:ad:a4:40:48:26:ea:b3:18:dc:85:
                    4a:84:b4:53:1f:d5:c5:b1:b2:cd:82:ae:22:05:a1:
                    88:c2:8a:e1:58:f7:47:dd:15:98:33:ba:66:18:4b:
                    34:98:81:c5:97:09:2c:5e:b5:3e:81:00:e0:48:81:
                    a4:93:3a:95:f4:d3:e0:6f:d8:94:ec:eb:84:2e:26:
                    f1:7a:70:bf:76:d1:04:d3:5a:58:85:a1:67:0a:b6:
                    30:8b:2c:2b:6d:ad:da:b7:2c:52:15:38:ff:83:0e:
                    c6:43:fb:4a:cc:7a:73:c7:a0:81:ee:53:9d:09:e2:
                    f7:0b:bf:37:99:80:ea:87:f8:60:cc:ef:d9:9a:b1:
                    1b:0b:bb:68:42:05:6f:a3:a2:16:ae:8a:4f:4b:56:
                    9d:b3:fa:65:79:9d:3d:7d:71:38:9b:23:64:1e:a5:
                    a1:e0:cf:19:6d:00:ca:c0:b6:2b:51:90:01:9a:5f:
                    0e:7e:38:6f:e8:22:70:a4:94:e4:05:fd:2b:7d:58:
                    84:d9:fd:58:d0:f8:90:cf:ce:84:be:2b:70:aa:88:
                    f1:85:72:ac:35:c2:7a:d1:45:59:43:2d:17:72:46:
                    c7:3e:60:73:86:53:78:04:4d:26:2d:b6:ff:b6:b8:
                    2f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:FD:08:E4:3A:A2:E2:64:04:73:E6:F3:9F:A2:59:20:D5:6C:67
            X509v3 Authority Key Identifier:
                keyid:C2:D6:F5:B6:33:70:10:04:FE:FA:E2:24:34:8B:98:C8:C5:AF:5D:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C2D6F5B633701004FEFAE224348B98C8C5AF5DE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f0976e26-9513-48ff-9f7f-ea3fdcf3e2e8/0/3130332e39392e32372e302f32342d3234203d3e20313530323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ee:0b:14:78:da:d4:92:a8:57:d5:38:34:79:89:0a:dd:80:
         0e:94:93:aa:9a:29:6c:c3:e9:b1:57:88:d0:e0:34:a7:f4:e9:
         a9:c5:b2:be:c5:09:9e:a7:1f:d0:50:da:7d:bf:02:3c:b5:19:
         01:91:e8:df:61:dc:44:94:bc:5d:85:bb:bd:17:5b:82:81:7d:
         2a:cd:dd:1b:43:b6:75:75:9e:04:00:d7:78:e2:21:11:fd:77:
         83:20:cc:e2:e7:f9:d9:f6:36:8b:77:f9:3f:f1:28:ab:73:45:
         bf:f1:7d:f1:a6:26:d0:77:f2:a4:12:75:38:37:ca:aa:a0:ca:
         61:ec:2c:2a:90:d9:0f:53:b7:f4:86:71:05:f9:74:c0:88:77:
         4b:43:7f:ae:20:d6:7b:28:1c:6e:8c:c4:3f:d9:50:96:98:19:
         c9:28:71:97:93:95:69:a6:cd:74:d1:49:36:d0:33:f2:76:c1:
         61:12:63:16:6e:ca:ab:fa:4a:30:cf:29:cd:3d:be:9d:07:8b:
         ef:01:a8:ce:51:3d:71:1b:ab:f7:b3:1e:b4:26:aa:6d:5a:22:
         d1:d3:59:22:e0:e4:04:18:40:7b:65:ca:8e:f3:dc:d8:87:74:
         b7:70:45:a3:35:7c:ca:5e:d1:e0:ba:29:9a:21:5a:f8:96:ec:
         92:3d:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:40 2026 by rpki-client