Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa
File:                     3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (raw, json)
Hash identifier:          VH+O4TH4eDJSI25JypJZ7rsLYdNS/p0NBbNxGChAQqQ=
Subject key identifier:   0D:97:D9:4C:57:37:BB:BF:E3:7E:A0:D6:F4:DC:F8:26:34:93:AD:1E
Certificate issuer:       /CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
Certificate serial:       3198E1322280B402ED10F3FE2BD8B443F9950D81
Authority key identifier: 27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa
Signing time:             Sun 03 May 2026 02:27:42 +0000
ROA not before:           Sun 03 May 2026 02:22:42 +0000
ROA not after:            Sun 02 May 2027 02:27:42 +0000
asID:                     150519
IP address blocks:        103.141.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl
                          rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:98:e1:32:22:80:b4:02:ed:10:f3:fe:2b:d8:b4:43:f9:95:0d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B0A2FA02827040E4DF65067C7A0D50DA5154E6
        Validity
            Not Before: May  3 02:22:42 2026 GMT
            Not After : May  2 02:27:42 2027 GMT
        Subject: CN=0D97D94C5737BBBFE37EA0D6F4DCF8263493AD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4f:53:93:0d:13:24:bb:9b:4d:17:cb:16:4a:
                    ec:5d:0f:16:23:e4:2e:24:13:2e:9e:41:2c:4c:62:
                    24:c1:88:d4:e6:a8:dc:43:67:f4:5a:cf:3b:1a:79:
                    64:24:a4:bc:05:06:28:0c:55:eb:70:fe:b2:5c:12:
                    b7:2e:35:b9:ae:31:f3:15:b8:c5:c5:d9:9a:55:aa:
                    d8:80:b1:0d:99:08:0c:d3:83:be:d8:78:e1:52:1c:
                    d5:ed:c5:6a:5a:25:d9:34:d9:48:f5:3b:ef:27:0c:
                    ab:12:69:11:8e:e8:9e:ed:9c:77:d9:d5:7d:bc:83:
                    63:7e:be:ca:2f:7b:4a:3d:1d:d7:88:69:bd:6b:c2:
                    6f:36:af:e0:6c:03:1a:7e:6c:c7:d7:08:b6:c7:5b:
                    1c:90:66:96:95:55:71:e0:2c:f5:41:a8:e8:be:62:
                    e7:50:d4:09:95:f7:fb:df:9c:c1:e3:15:cc:27:76:
                    a8:9c:cc:38:69:5c:72:71:19:6a:51:ff:0c:b2:a4:
                    dc:14:b9:df:bd:cd:d0:08:a9:04:dc:d4:c0:7a:e5:
                    eb:20:91:11:e6:1c:ce:5f:3b:7b:cc:09:34:2e:6b:
                    a2:b2:86:57:6a:2f:f1:94:c2:b1:41:47:e2:f8:b7:
                    d5:77:15:d2:d5:b3:d2:0f:e3:7b:71:46:19:b2:e0:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:97:D9:4C:57:37:BB:BF:E3:7E:A0:D6:F4:DC:F8:26:34:93:AD:1E
            X509v3 Authority Key Identifier:
                keyid:27:B0:A2:FA:02:82:70:40:E4:DF:65:06:7C:7A:0D:50:DA:51:54:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27B0A2FA02827040E4DF65067C7A0D50DA5154E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:48:dd:1c:52:41:59:96:7e:60:ce:70:d5:8b:2e:cd:bf:
         f3:1f:dc:bb:6f:85:69:65:55:2c:31:a1:f3:99:71:52:23:11:
         23:ab:dc:a4:4f:f4:a8:b5:7c:20:ee:fa:87:0e:ba:19:cd:5e:
         f7:06:64:09:aa:81:1a:7e:ee:a7:a9:3d:43:ef:bc:91:cf:88:
         4e:56:d3:33:96:ea:70:cb:8b:99:09:1c:8c:0d:8c:1b:c4:2d:
         fe:66:21:b0:10:c6:0c:58:c4:8d:21:d9:ed:6e:87:2e:51:89:
         eb:eb:a8:4c:41:50:04:5d:bd:99:b9:bf:58:77:87:06:bb:f5:
         05:01:f5:ac:55:d4:bb:e3:16:57:fb:fb:00:fb:ea:5a:eb:5b:
         63:ae:96:86:0b:03:ad:5c:49:0c:43:3f:08:57:9f:e3:d1:c6:
         c3:e8:c2:45:b2:8f:7c:57:f2:0b:1f:9f:4f:78:48:a4:17:ab:
         31:a9:c3:5a:3e:38:98:c3:6a:6f:f5:02:c5:35:b0:a7:45:e9:
         4d:63:c7:d1:24:a2:27:49:c3:6a:52:63:e8:10:72:f1:ab:ee:
         b1:3d:f5:ec:2c:9b:12:d8:8c:ed:d9:87:33:0b:55:6e:0d:4d:
         75:90:db:57:52:b2:44:15:4f:83:90:01:15:50:5b:08:ec:97:
         3e:ec:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:42:29 2026 by rpki-client