Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
File:                     3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa (raw, json)
Hash identifier:          WkzU0ifpIbp5OQ/6TDxMH+vwFG2tqv2mqNzHskMqmF0=
Subject key identifier:   48:80:9E:A9:B6:61:81:06:5C:2F:F2:67:95:AF:A5:8A:F7:37:B8:8D
Certificate issuer:       /CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
Certificate serial:       41EDB3F725F17A60B319EA78BE15FF63132CAC9F
Authority key identifier: 9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa
Signing time:             Sun 03 May 2026 02:31:23 +0000
ROA not before:           Sun 03 May 2026 02:26:23 +0000
ROA not after:            Sun 02 May 2027 02:31:23 +0000
asID:                     142370
IP address blocks:        103.227.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl
                          rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ed:b3:f7:25:f1:7a:60:b3:19:ea:78:be:15:ff:63:13:2c:ac:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BD7599923B8FB8C83AB3B30287FBCC6A9874800
        Validity
            Not Before: May  3 02:26:23 2026 GMT
            Not After : May  2 02:31:23 2027 GMT
        Subject: CN=48809EA9B66181065C2FF26795AFA58AF737B88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:37:66:e8:ea:36:59:55:d0:4f:8a:64:3c:a9:
                    4b:82:bd:9c:bb:b1:18:45:6e:f8:e7:3d:22:6e:0e:
                    da:64:be:53:b0:e1:9f:8e:38:6a:c4:c4:0d:1e:79:
                    67:71:f4:1a:e3:1e:01:ea:c4:e7:59:68:cb:c0:80:
                    ae:42:31:ff:13:26:bb:34:24:ec:f7:17:75:11:ce:
                    64:ca:34:fe:fb:57:04:6b:95:a7:6d:ef:d3:ed:8c:
                    e8:24:34:d5:77:bc:54:47:7e:f1:97:e1:02:b3:52:
                    d9:69:bf:3a:11:74:fd:ad:9c:cd:1a:70:e5:1e:b4:
                    5c:e7:22:66:96:ba:60:e4:80:6a:a3:f9:12:da:99:
                    ca:33:23:fe:4f:47:b4:6b:65:82:d4:b8:73:f2:ca:
                    58:02:55:57:a2:89:25:09:32:e8:d0:52:7d:c6:ae:
                    9d:ea:22:0d:23:ba:14:8b:c9:56:df:00:e9:a1:f3:
                    84:bf:2d:76:d8:73:11:76:16:03:5c:6e:4b:66:11:
                    57:b4:eb:a7:7b:6d:8a:19:ed:78:e0:b9:b1:65:41:
                    55:3b:37:d9:ef:06:52:c9:1d:0f:66:df:c3:a2:a8:
                    48:81:78:58:f0:df:e0:5f:8f:07:c1:9a:41:03:06:
                    ae:0a:f6:04:69:15:5c:7b:8c:ec:c3:03:e5:e3:b7:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:80:9E:A9:B6:61:81:06:5C:2F:F2:67:95:AF:A5:8A:F7:37:B8:8D
            X509v3 Authority Key Identifier:
                keyid:9B:D7:59:99:23:B8:FB:8C:83:AB:3B:30:28:7F:BC:C6:A9:87:48:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9BD7599923B8FB8C83AB3B30287FBCC6A9874800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4b388f6e-9974-4457-af4b-5c9c82f50e97/0/3130332e3232372e3138372e302f32342d3234203d3e20313432333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:81:fa:ac:3f:ae:fa:a2:16:1b:fd:ee:5f:44:65:00:8f:55:
         0d:8f:e7:16:c1:f9:44:63:70:dc:27:ee:41:78:80:02:7c:79:
         3f:d2:28:8a:79:4a:80:28:5f:2e:be:3f:49:5b:26:76:87:13:
         7d:93:f7:f9:b4:67:c0:60:8a:81:9f:a0:d4:84:0d:5b:29:a8:
         3b:4a:46:f8:78:e4:01:ba:60:3e:1c:ea:01:8e:fb:61:8e:71:
         ac:91:4a:9a:7a:71:ae:fe:bb:3c:19:23:af:5f:78:ff:89:cd:
         58:44:b9:5d:61:ff:1f:5c:60:0b:b6:d3:e5:b4:94:d8:0c:ea:
         20:ef:ef:f8:9c:97:e2:df:57:02:c9:d5:3e:0f:d6:62:86:64:
         06:bc:8d:ad:3c:fd:ba:60:87:86:83:ed:12:0a:48:2f:19:bf:
         11:14:b5:25:53:e4:a3:3d:7b:3c:c2:3a:13:b6:99:f3:0f:c2:
         e1:84:4b:f0:3c:72:4e:99:58:31:ca:3d:43:b2:35:5f:b7:bd:
         34:60:c8:f3:2f:44:36:b5:c1:15:30:3f:f8:77:13:1a:e7:d5:
         ba:85:29:d8:4d:94:6a:f4:41:21:ff:6f:6e:ff:49:33:38:3d:
         35:73:9f:30:5e:dc:aa:7f:ed:ba:64:b6:8e:dd:61:d5:4a:c9:
         3a:82:c9:3a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQe2z9yXxemCzGep4vhX/YxMsrJ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJENzU5OTkyM0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZB
OTg3NDgwMDAeFw0yNjA1MDMwMjI2MjNaFw0yNzA1MDIwMjMxMjNaMDMxMTAvBgNV
BAMTKDQ4ODA5RUE5QjY2MTgxMDY1QzJGRjI2Nzk1QUZBNThBRjczN0I4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3N2bo6jZZVdBPimQ8qUuCvZy7
sRhFbvjnPSJuDtpkvlOw4Z+OOGrExA0eeWdx9BrjHgHqxOdZaMvAgK5CMf8TJrs0
JOz3F3URzmTKNP77VwRrladt79PtjOgkNNV3vFRHfvGX4QKzUtlpvzoRdP2tnM0a
cOUetFznImaWumDkgGqj+RLamcozI/5PR7RrZYLUuHPyylgCVVeiiSUJMujQUn3G
rp3qIg0juhSLyVbfAOmh84S/LXbYcxF2FgNcbktmEVe066d7bYoZ7XjgubFlQVU7
N9nvBlLJHQ9m38OiqEiBeFjw3+BfjwfBmkEDBq4K9gRpFVx7jOzDA+Xjt0XJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUSICeqbZhgQZcL/Jnla+livc3uI0wHwYDVR0j
BBgwFoAUm9dZmSO4+4yDqzswKH+8xqmHSAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGIzODhmNmUtOTk3NC00NDU3LWFmNGItNWM5YzgyZjUwZTk3LzAvOUJENzU5OTky
M0I4RkI4QzgzQUIzQjMwMjg3RkJDQzZBOTg3NDgwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85QkQ3NTk5OTIzQjhGQjhDODNBQjNCMzAyODdGQkNDNkE5ODc0
ODAwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzRiMzg4ZjZlLTk5NzQtNDQ1Ny1h
ZjRiLTVjOWM4MmY1MGU5Ny8wLzMxMzAzMzJlMzIzMjM3MmUzMTM4MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM3MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn47swDQYJ
KoZIhvcNAQELBQADggEBAKOB+qw/rvqiFhv97l9EZQCPVQ2P5xbB+URjcNwn7kF4
gAJ8eT/SKIp5SoAoXy6+P0lbJnaHE32T9/m0Z8BgioGfoNSEDVspqDtKRvh45AG6
YD4c6gGO+2GOcayRSpp6ca7+uzwZI69feP+JzVhEuV1h/x9cYAu20+W0lNgM6iDv
7/icl+LfVwLJ1T4P1mKGZAa8ja08/bpgh4aD7RIKSC8ZvxEUtSVT5KM9ezzCOhO2
mfMPwuGES/A8ck6ZWDHKPUOyNV+3vTRgyPMvRDa1wRUwP/h3Exrn1bqFKdhNlGr0
QSH/b27/STM4PTVznzBe3Kp/7bpkto7dYdVKyTqCyTo=
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:54 2026 by rpki-client