Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
File:                     3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (raw, json)
Hash identifier:          /LiLN+J0a3bLX8pXdquoB9qjro5HIfp6bcZw4BWkMOQ=
Subject key identifier:   55:09:73:E9:71:62:9F:08:58:59:F6:F9:E6:A9:B8:DC:81:CF:72:98
Certificate issuer:       /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
Certificate serial:       2AF80EDBC870EAE9B7A80850C7BD7BFCB451710B
Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa
Signing time:             Wed 11 Feb 2026 11:00:03 +0000
ROA not before:           Wed 11 Feb 2026 10:55:03 +0000
ROA not after:            Wed 10 Feb 2027 11:00:03 +0000
asID:                     150262
IP address blocks:        103.27.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl
                          rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 06:25:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f8:0e:db:c8:70:ea:e9:b7:a8:08:50:c7:bd:7b:fc:b4:51:71:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897
        Validity
            Not Before: Feb 11 10:55:03 2026 GMT
            Not After : Feb 10 11:00:03 2027 GMT
        Subject: CN=550973E971629F085859F6F9E6A9B8DC81CF7298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:4c:50:f3:2f:25:ca:94:90:86:96:cc:e6:
                    0e:5f:a1:47:09:03:05:8e:6d:54:24:76:45:7f:46:
                    f6:e7:5b:a8:9e:c2:2c:70:ed:55:53:1f:3c:07:c6:
                    07:12:5a:70:85:38:45:af:e0:59:bf:d8:d1:e5:c4:
                    34:ab:cc:61:5c:e8:8d:96:3a:0d:bd:1a:f9:a1:59:
                    7a:15:09:55:35:8b:40:62:c1:c3:31:d2:66:dd:7e:
                    c5:13:32:11:ff:ab:63:ee:8b:32:40:60:5b:e0:50:
                    39:f3:d7:a5:e6:b0:65:6d:bf:5b:91:47:df:8d:1f:
                    19:a1:42:2c:f1:53:e3:66:fc:fd:3a:a8:aa:7e:7f:
                    a6:be:bc:1e:d4:14:df:46:32:52:de:af:f8:0f:6d:
                    a5:a0:95:79:d2:fd:12:b1:b3:66:08:4e:a9:8b:34:
                    9a:88:f1:ff:ce:e2:87:b5:27:b1:44:7f:09:8e:b4:
                    35:2a:1e:85:95:b9:6d:f4:b5:9f:97:38:14:9c:e6:
                    e1:10:40:26:12:8f:df:63:a4:9f:1e:a1:e8:11:44:
                    f6:c8:8d:40:f6:77:9e:fa:a4:23:a8:fc:6f:cf:da:
                    9b:b3:a1:b4:bf:91:c0:9e:be:6b:98:93:14:ee:d8:
                    0c:14:cd:ee:7c:ab:97:ba:7f:87:10:ea:80:08:25:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:73:E9:71:62:9F:08:58:59:F6:F9:E6:A9:B8:DC:81:CF:72:98
            X509v3 Authority Key Identifier:
                keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.27.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:37:dd:a9:52:f2:91:19:b8:a8:c6:57:d6:12:e0:22:f1:c8:
         07:c4:a8:0d:68:ab:5a:a6:a9:80:c5:0d:6c:22:5b:ba:52:99:
         2b:39:cb:26:c7:42:8a:35:75:fa:0e:63:a1:77:dc:08:e9:29:
         7b:38:6c:a6:71:4e:75:14:67:9d:76:74:ef:fd:af:5a:61:d3:
         5d:cb:00:6c:53:8c:08:1c:c8:d5:6d:13:03:83:9f:8a:52:c0:
         b3:66:62:a5:6d:b0:0d:97:d3:4e:6d:e6:6e:c5:e3:91:5b:65:
         1c:74:d9:e1:bc:ae:9d:a6:51:af:a4:f3:23:4d:8d:45:e8:5e:
         ae:30:c2:1b:0d:b2:d9:85:e4:21:dc:15:b5:f1:61:5c:0c:c1:
         a6:a0:11:8e:3b:ab:73:d6:f0:a5:54:fc:18:51:79:8b:a5:e9:
         d1:4b:4c:ea:ee:d5:f7:37:15:37:02:fa:8c:b8:b7:5d:24:6f:
         5c:1f:a0:52:39:a5:9c:24:a2:5f:79:e5:96:ee:a1:95:d4:56:
         ba:aa:6e:ce:d5:b7:ba:dc:56:c5:74:86:98:7e:18:82:5f:52:
         55:6b:88:ae:8f:20:13:f1:d2:c6:68:0a:65:60:07:75:af:a6:
         10:85:df:63:68:ef:91:78:4f:f9:84:0c:aa:6a:f7:48:4c:46:
         b5:5f:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:31:47 2026 by rpki-client