Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa
File:                     3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          2N+TEQ769mQU4C1i4Rld3w1DT7X5Tq5lgzhroXjz5Hg=
Subject key identifier:   05:0A:4D:DE:C3:91:C8:DA:AE:C5:B4:EA:08:F0:51:06:62:08:10:46
Certificate issuer:       /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial:       3FCEF76BB8998CB07AE0725749D987A64F993D39
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 02:31:22 +0000
ROA not before:           Sun 03 May 2026 02:26:22 +0000
ROA not after:            Sun 02 May 2027 02:31:22 +0000
asID:                     142370
IP address blocks:        103.227.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
                          rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ce:f7:6b:b8:99:8c:b0:7a:e0:72:57:49:d9:87:a6:4f:99:3d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
        Validity
            Not Before: May  3 02:26:22 2026 GMT
            Not After : May  2 02:31:22 2027 GMT
        Subject: CN=050A4DDEC391C8DAAEC5B4EA08F0510662081046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:f0:bb:9e:51:c2:ab:b1:12:9d:74:d7:f9:
                    be:5f:a4:fd:c1:79:07:f8:44:9b:f6:52:48:ea:4a:
                    09:75:61:bd:81:8a:9b:96:17:70:54:b6:89:13:43:
                    03:40:da:69:6a:be:da:4e:cf:d4:6a:54:86:4b:f2:
                    74:85:2c:74:5e:26:0c:58:b5:e4:8a:5f:4c:51:af:
                    12:ee:7f:ab:ce:29:d9:f4:b7:7a:e9:68:c4:fd:73:
                    55:67:5d:3f:bc:0f:8b:14:62:14:4b:34:48:56:18:
                    7f:7d:b0:37:ad:f7:b8:ca:dd:7a:b5:8d:cf:a6:51:
                    78:ec:62:56:ea:41:b8:98:75:0a:1d:07:7a:71:7c:
                    33:fe:0c:2a:a9:8d:aa:dc:73:47:1c:05:a5:6e:33:
                    e9:a8:5a:9e:d5:0b:59:83:54:7f:e6:4d:1d:60:de:
                    8e:2e:64:dc:d4:6e:a3:55:8b:5a:a3:98:f1:9b:10:
                    67:8f:66:72:2f:9a:a5:bc:f4:e6:45:a7:77:35:92:
                    5f:81:74:84:f8:dd:33:8a:46:dc:3e:8d:8d:8a:be:
                    db:6e:62:07:63:40:06:ad:cb:36:14:f4:be:dd:79:
                    34:f2:9f:4b:8f:26:0e:6a:92:c6:82:d3:91:37:50:
                    d4:75:e7:b1:b5:4c:73:a8:16:c0:7e:a3:fb:0d:9e:
                    80:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0A:4D:DE:C3:91:C8:DA:AE:C5:B4:EA:08:F0:51:06:62:08:10:46
            X509v3 Authority Key Identifier:
                keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138362e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:33:8f:04:bb:2d:ee:4b:b0:6d:aa:82:99:5a:5d:32:69:8f:
         66:30:08:60:c2:13:3a:86:da:32:80:70:67:d9:16:0e:86:da:
         57:f2:a4:04:1f:b9:9a:7f:cb:1c:2f:97:2c:d8:28:d7:19:78:
         8f:b0:20:b2:c0:cd:f3:ac:ed:30:e7:e6:f8:ab:8f:94:21:17:
         0a:38:5d:0e:4f:62:73:50:dc:db:67:9d:40:02:25:cb:9f:f2:
         93:22:f1:90:19:fb:d0:52:1a:92:53:ff:65:a1:1b:7a:70:0a:
         7e:43:ae:7e:dd:10:ef:cb:4f:7e:13:fc:48:13:27:8a:25:93:
         d6:9f:64:4b:a4:be:b4:cc:ec:9f:03:2d:af:dc:d9:64:ab:df:
         f6:4d:92:db:31:e1:44:7b:c5:e9:5a:db:6c:70:a5:b3:57:a8:
         0b:15:66:be:73:bd:2d:c2:c7:fa:67:7b:05:00:57:a4:ea:ec:
         79:a1:58:6e:51:86:ed:65:33:ad:ae:b1:be:24:0e:66:fd:de:
         fa:50:8b:02:b4:06:94:bd:03:45:57:33:dd:ac:fc:f0:3e:27:
         8b:5a:bb:e5:5a:a2:f7:49:27:d4:17:55:9d:f3:8f:e5:cc:47:
         6b:67:e3:cb:53:a6:13:45:12:0d:ad:1e:52:aa:bd:46:27:d0:
         8e:a0:81:0b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUP873a7iZjLB64HJXSdmHpk+ZPTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB
OTg3NDgwMDAeFw0yNjA1MDMwMjI2MjJaFw0yNzA1MDIwMjMxMjJaMDMxMTAvBgNV
BAMTKDA1MEE0RERFQzM5MUM4REFBRUM1QjRFQTA4RjA1MTA2NjIwODEwNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ufC7nlHCq7ESnXTX+b5fpP3B
eQf4RJv2UkjqSgl1Yb2BipuWF3BUtokTQwNA2mlqvtpOz9RqVIZL8nSFLHReJgxY
teSKX0xRrxLuf6vOKdn0t3rpaMT9c1VnXT+8D4sUYhRLNEhWGH99sDet97jK3Xq1
jc+mUXjsYlbqQbiYdQodB3pxfDP+DCqpjarcc0ccBaVuM+moWp7VC1mDVH/mTR1g
3o4uZNzUbqNVi1qjmPGbEGePZnIvmqW89OZFp3c1kl+BdIT43TOKRtw+jY2Kvttu
YgdjQAatyzYU9L7deTTyn0uPJg5qksaC05E3UNR157G1THOoFsB+o/sNnoDhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBQpN3sORyNquxbTqCPBRBmIIEEYwHwYDVR0j
BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky
M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0
ODAwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiMzg4ZjZlLTk5NzQtNDQ1Ny1h
ZjRiLTVjOWM4MmY1MGU5Ny8wLzMxMzAzMzJlMzIzMjM3MmUzMTM4MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn47owDQYJ
KoZIhvcNAQELBQADggEBAGwzjwS7Le5LsG2qgplaXTJpj2YwCGDCEzqG2jKAcGfZ
Fg6G2lfypAQfuZp/yxwvlyzYKNcZeI+wILLAzfOs7TDn5virj5QhFwo4XQ5PYnNQ
3NtnnUACJcuf8pMi8ZAZ+9BSGpJT/2WhG3pwCn5Drn7dEO/LT34T/EgTJ4olk9af
ZEukvrTM7J8DLa/c2WSr3/ZNktsx4UR7xela22xwpbNXqAsVZr5zvS3Cx/pnewUA
V6Tq7HmhWG5Rhu1lM62usb4kDmb93vpQiwK0BpS9A0VXM92s/PA+J4tau+VaovdJ
J9QXVZ3zj+XMR2tn48tTphNFEg2tHlKqvUYn0I6ggQs=
-----END CERTIFICATE-----
Generated at Wed May 13 12:46:43 2026 by rpki-client