Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
File:                     3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=
Subject key identifier:   0A:EA:8B:2E:13:43:42:41:D3:FC:FA:9B:73:21:FF:34:10:61:ED:45
Certificate issuer:       /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
Certificate serial:       5E4FB937B654F3E23C099DE46B5FF9CDF5072047
Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa
Signing time:             Sun 03 May 2026 02:53:17 +0000
ROA not before:           Sun 03 May 2026 02:48:17 +0000
ROA not after:            Sun 02 May 2027 02:53:17 +0000
asID:                     63872
IP address blocks:        103.127.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4f:b9:37:b6:54:f3:e2:3c:09:9d:e4:6b:5f:f9:cd:f5:07:20:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
        Validity
            Not Before: May  3 02:48:17 2026 GMT
            Not After : May  2 02:53:17 2027 GMT
        Subject: CN=0AEA8B2E13434241D3FCFA9B7321FF341061ED45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:55:2a:08:70:cb:24:d5:77:46:80:d9:56:
                    ee:5c:46:06:ba:58:99:30:99:1d:63:f6:c7:75:4b:
                    2c:d6:79:43:71:c6:42:be:e1:1d:b9:63:a7:bd:78:
                    d3:36:3f:c2:3f:0b:9e:ce:70:3d:9a:e8:59:fd:c7:
                    5c:a6:a5:97:07:cb:09:41:91:4f:ee:e5:a0:1d:e8:
                    61:f7:d8:f1:f6:18:fa:ec:0c:76:0a:34:36:16:c5:
                    53:60:f6:c5:a3:4b:b3:2c:bc:24:82:3a:43:18:b5:
                    b6:8c:9e:55:e5:6d:54:3a:4c:a3:2f:76:0c:93:6f:
                    ea:a2:97:b9:15:54:b0:d6:c4:c0:d7:b9:9f:54:44:
                    f7:1e:73:4b:d3:b0:7a:ce:7d:18:7f:d3:fc:e5:07:
                    8e:f1:19:8b:d9:1d:e1:63:2e:91:c8:02:d9:67:11:
                    00:2a:ed:ec:76:90:82:a4:87:c0:4f:c7:3c:dd:5e:
                    ad:cd:6b:3b:25:3a:e1:02:cf:aa:04:2c:9a:d5:e5:
                    bf:1a:f3:d0:c8:5b:e1:f9:68:90:5a:dd:3b:70:bd:
                    52:ee:05:be:5e:37:af:4c:09:a0:8c:d7:f9:13:f8:
                    37:c4:25:17:e7:f2:65:a1:8f:3b:fa:02:46:6b:27:
                    36:39:93:30:7f:ef:74:cc:44:ff:63:d3:16:cc:ec:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EA:8B:2E:13:43:42:41:D3:FC:FA:9B:73:21:FF:34:10:61:ED:45
            X509v3 Authority Key Identifier:
                keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:30:2f:16:48:57:f8:29:df:a3:22:b8:4f:ba:b7:b5:f4:64:
         60:60:44:41:ff:dc:fb:dd:86:d7:79:2b:f1:4c:67:f4:52:8f:
         6c:c3:d9:d9:f0:be:48:f4:60:40:32:8b:1c:20:ac:04:62:0b:
         f2:f9:2c:52:24:90:06:83:dc:ff:cb:66:b1:eb:4a:43:8e:2f:
         07:c4:bf:8d:83:95:a9:8d:4d:ac:c2:16:c4:c1:81:be:ed:a2:
         c8:30:5a:21:4e:bb:1a:89:20:85:fd:9f:f6:7c:75:8f:fd:3a:
         15:11:0f:4f:3e:2e:bb:96:b9:fe:93:45:bb:dc:ae:58:70:7e:
         dc:6c:57:60:33:e7:05:89:ea:b4:d7:4f:c5:ae:e9:05:72:ad:
         da:7f:2c:4c:f0:55:a8:04:ec:26:ba:6a:58:7e:bc:01:74:18:
         1a:99:6f:f1:f9:e2:2d:66:26:18:8e:6e:76:d7:31:83:8c:40:
         88:8a:dc:7f:7c:ef:50:9a:f7:38:95:b6:d2:db:23:e1:04:06:
         77:01:4c:b8:e8:a7:6d:45:8a:39:01:16:7b:f5:d9:36:32:b5:
         88:57:e4:f0:14:5f:93:37:88:7c:d8:c7:27:2e:e3:0d:e2:d9:
         e3:8a:df:e5:ff:45:a3:dc:29:ad:6d:f7:91:c9:14:9b:72:01:
         c4:6c:e1:a7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXk+5N7ZU8+I8CZ3ka1/5zfUHIEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC
ODAwNDlCNTAeFw0yNjA1MDMwMjQ4MTdaFw0yNzA1MDIwMjUzMTdaMDMxMTAvBgNV
BAMTKDBBRUE4QjJFMTM0MzQyNDFEM0ZDRkE5QjczMjFGRjM0MTA2MUVENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV61UqCHDLJNV3RoDZVu5cRga6
WJkwmR1j9sd1SyzWeUNxxkK+4R25Y6e9eNM2P8I/C57OcD2a6Fn9x1ympZcHywlB
kU/u5aAd6GH32PH2GPrsDHYKNDYWxVNg9sWjS7MsvCSCOkMYtbaMnlXlbVQ6TKMv
dgyTb+qil7kVVLDWxMDXuZ9URPcec0vTsHrOfRh/0/zlB47xGYvZHeFjLpHIAtln
EQAq7ex2kIKkh8BPxzzdXq3NazslOuECz6oELJrV5b8a89DIW+H5aJBa3TtwvVLu
Bb5eN69MCaCM1/kT+DfEJRfn8mWhjzv6AkZrJzY5kzB/73TMRP9j0xbM7HjPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCuqLLhNDQkHT/PqbcyH/NBBh7UUwHwYDVR0j
BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw
QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0
OUI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h
YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3+QMA0GCSqG
SIb3DQEBCwUAA4IBAQC8MC8WSFf4Kd+jIrhPure19GRgYERB/9z73YbXeSvxTGf0
Uo9sw9nZ8L5I9GBAMoscIKwEYgvy+SxSJJAGg9z/y2ax60pDji8HxL+Ng5WpjU2s
whbEwYG+7aLIMFohTrsaiSCF/Z/2fHWP/ToVEQ9PPi67lrn+k0W73K5YcH7cbFdg
M+cFieq010/FrukFcq3afyxM8FWoBOwmumpYfrwBdBgamW/x+eItZiYYjm521zGD
jECIitx/fO9Qmvc4lbbS2yPhBAZ3AUy46KdtRYo5ARZ79dk2MrWIV+TwFF+TN4h8
2McnLuMN4tnjit/l/0Wj3CmtbfeRyRSbcgHEbOGn
-----END CERTIFICATE-----
Generated at Wed May 13 04:47:18 2026 by rpki-client