Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
File:                     3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa (raw, json)
Hash identifier:          VwvC8FnFaqPY+qV2Yf8a0j5PamatjQpNJvumx1aC9c4=
Subject key identifier:   40:13:2F:A6:7B:77:2C:EA:79:8C:13:35:6C:0D:74:53:73:58:BF:1B
Certificate issuer:       /CN=27992B841C717A90B3FDBD81B476F3FF9045212D
Certificate serial:       7F089769A1320B1D5D4374E7282361F963EFA2EE
Authority key identifier: 27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa
Signing time:             Sun 26 Oct 2025 08:00:00 +0000
ROA not before:           Sun 26 Oct 2025 07:55:00 +0000
ROA not after:            Sun 25 Oct 2026 08:00:00 +0000
asID:                     150489
IP address blocks:        103.55.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl
                          rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 18:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:08:97:69:a1:32:0b:1d:5d:43:74:e7:28:23:61:f9:63:ef:a2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27992B841C717A90B3FDBD81B476F3FF9045212D
        Validity
            Not Before: Oct 26 07:55:00 2025 GMT
            Not After : Oct 25 08:00:00 2026 GMT
        Subject: CN=40132FA67B772CEA798C13356C0D74537358BF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:9f:a9:56:b1:de:3b:12:bb:82:fd:d5:24:
                    9a:fe:a9:a1:09:8d:3e:32:0d:9f:c4:1c:66:e1:31:
                    fa:a7:78:40:06:8b:f3:5a:48:3a:8e:f1:42:c4:f3:
                    67:0b:05:6c:46:2e:3f:71:61:44:90:45:f3:5b:ab:
                    ab:0d:cf:78:c3:64:e5:34:fe:18:5f:12:e9:28:4c:
                    5a:ec:f9:b8:22:08:1c:5b:d7:7d:23:63:18:ba:48:
                    f8:fb:8d:23:cb:9e:7f:58:e8:8b:ce:b7:6e:23:ff:
                    11:1a:90:b0:77:47:91:12:8f:30:8c:54:0e:76:03:
                    60:62:c2:19:e0:57:1c:3a:7f:fa:df:4a:00:a3:c3:
                    87:82:68:7d:93:a1:fc:6d:2c:66:ce:42:aa:c2:36:
                    0c:38:f3:3d:24:2e:5f:59:26:d2:89:78:1e:8d:98:
                    62:f5:6e:44:9a:1c:1e:50:d2:ea:26:bc:31:f6:66:
                    16:5e:f9:6b:6d:b0:8a:8c:c3:6b:33:b7:ba:7d:b1:
                    29:0f:4a:5d:70:70:f0:69:55:83:51:d4:6d:da:e7:
                    c8:59:62:b6:0a:c8:61:1b:23:cb:6c:06:e1:e0:05:
                    ec:f6:6a:c9:b3:bf:0f:34:5e:8f:81:ff:68:3a:4e:
                    fa:b7:45:12:2b:f0:34:36:c0:b9:06:95:90:a7:23:
                    9c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:2F:A6:7B:77:2C:EA:79:8C:13:35:6C:0D:74:53:73:58:BF:1B
            X509v3 Authority Key Identifier:
                keyid:27:99:2B:84:1C:71:7A:90:B3:FD:BD:81:B4:76:F3:FF:90:45:21:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/27992B841C717A90B3FDBD81B476F3FF9045212D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27992B841C717A90B3FDBD81B476F3FF9045212D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6e3dd95-2a85-439e-84f2-972a23e3271e/0/3130332e35352e3232372e302f32342d3234203d3e20313530343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:ef:64:34:be:db:8b:cb:1f:93:5c:ba:00:1d:f2:21:be:
         d2:a8:03:eb:07:ed:9b:ca:8f:35:5f:22:9a:fb:6c:cc:1f:79:
         39:da:a2:e2:24:a3:44:91:38:93:16:93:e6:30:2f:3d:ad:16:
         8a:a0:8e:d7:a8:64:e3:59:01:49:d6:01:af:aa:8d:17:13:8f:
         ab:5d:57:f1:02:52:09:8a:6a:7f:36:57:d7:5b:8c:79:03:58:
         d2:09:7d:bc:ae:45:25:63:f8:56:e8:63:fc:c8:cf:4c:5e:25:
         66:d5:09:f6:c2:e7:d6:10:aa:18:c8:be:6a:a6:87:36:03:54:
         16:b7:9c:ad:c9:8e:85:9a:b8:7c:34:97:e1:8c:d8:b4:6f:6c:
         55:cf:89:32:9d:35:d5:37:96:c8:f4:6e:6c:dd:37:04:8e:0c:
         58:10:ec:5d:38:27:32:2e:f6:5f:a1:07:4e:07:92:c6:a9:58:
         e0:ef:6a:fe:1c:e6:87:a6:46:d6:38:6b:90:c2:69:3a:a5:88:
         d9:55:b7:97:b8:56:0d:76:7b:f5:71:ba:f6:a8:c7:94:8a:65:
         d6:fa:26:53:68:6a:18:f6:fc:4a:5e:41:d2:d1:69:6e:e0:f0:
         b7:07:8c:7b:0e:6b:c4:c0:64:bc:4a:e4:34:6a:7f:a9:74:95:
         57:d9:1a:e4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfwiXaaEyCx1dQ3TnKCNh+WPvou4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5
MDQ1MjEyRDAeFw0yNTEwMjYwNzU1MDBaFw0yNjEwMjUwODAwMDBaMDMxMTAvBgNV
BAMTKDQwMTMyRkE2N0I3NzJDRUE3OThDMTMzNTZDMEQ3NDUzNzM1OEJGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRyJ+pVrHeOxK7gv3VJJr+qaEJ
jT4yDZ/EHGbhMfqneEAGi/NaSDqO8ULE82cLBWxGLj9xYUSQRfNbq6sNz3jDZOU0
/hhfEukoTFrs+bgiCBxb130jYxi6SPj7jSPLnn9Y6IvOt24j/xEakLB3R5ESjzCM
VA52A2BiwhngVxw6f/rfSgCjw4eCaH2TofxtLGbOQqrCNgw48z0kLl9ZJtKJeB6N
mGL1bkSaHB5Q0uomvDH2ZhZe+WttsIqMw2szt7p9sSkPSl1wcPBpVYNR1G3a58hZ
YrYKyGEbI8tsBuHgBez2asmzvw80Xo+B/2g6Tvq3RRIr8DQ2wLkGlZCnI5w3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQBMvpnt3LOp5jBM1bA10U3NYvxswHwYDVR0j
BBgwFoAUJ5krhBxxepCz/b2BtHbz/5BFIS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmUzZGQ5NS0yYTg1LTQzOWUtODRmMi05NzJhMjNlMzI3MWUvMC8yNzk5MkI4NDFD
NzE3QTkwQjNGREJEODFCNDc2RjNGRjkwNDUyMTJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjc5OTJCODQxQzcxN0E5MEIzRkRCRDgxQjQ3NkYzRkY5MDQ1
MjEyRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZTNkZDk1LTJhODUtNDM5ZS04
NGYyLTk3MmEyM2UzMjcxZS8wLzMxMzAzMzJlMzUzNTJlMzIzMjM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzfjMA0GCSqG
SIb3DQEBCwUAA4IBAQBrKu9kNL7bi8sfk1y6AB3yIb7SqAPrB+2byo81XyKa+2zM
H3k52qLiJKNEkTiTFpPmMC89rRaKoI7XqGTjWQFJ1gGvqo0XE4+rXVfxAlIJimp/
NlfXW4x5A1jSCX28rkUlY/hW6GP8yM9MXiVm1Qn2wufWEKoYyL5qpoc2A1QWt5yt
yY6Fmrh8NJfhjNi0b2xVz4kynTXVN5bI9G5s3TcEjgxYEOxdOCcyLvZfoQdOB5LG
qVjg72r+HOaHpkbWOGuQwmk6pYjZVbeXuFYNdnv1cbr2qMeUimXW+iZTaGoY9vxK
XkHS0Wlu4PC3B4x7DmvEwGS8SuQ0an+pdJVX2Rrk
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:00 2025 by rpki-client