Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa
File:                     3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=
Subject key identifier:   73:42:D1:19:44:3F:40:FD:46:29:25:23:9B:D0:29:3A:93:DB:44:C1
Certificate issuer:       /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
Certificate serial:       5181FAA43F11142974745D9543697BD95DABF4FE
Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa
Signing time:             Sun 03 May 2026 02:53:16 +0000
ROA not before:           Sun 03 May 2026 02:48:16 +0000
ROA not after:            Sun 02 May 2027 02:53:16 +0000
asID:                     63872
IP address blocks:        103.127.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl
                          rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 21:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:81:fa:a4:3f:11:14:29:74:74:5d:95:43:69:7b:d9:5d:ab:f4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5
        Validity
            Not Before: May  3 02:48:16 2026 GMT
            Not After : May  2 02:53:16 2027 GMT
        Subject: CN=7342D119443F40FD462925239BD0293A93DB44C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:64:1b:39:de:e4:53:4c:ab:cb:92:ea:28:04:
                    74:37:d1:df:35:19:8a:ee:f3:b3:4b:15:d9:78:82:
                    fb:5e:d3:48:44:a2:11:0c:19:8f:6c:60:c2:f5:e1:
                    fa:1c:e0:de:09:09:0d:8d:1d:98:d5:46:d0:7d:56:
                    60:e7:8d:10:3d:ff:ce:66:41:61:8d:93:4e:a9:13:
                    31:94:78:05:71:02:fc:6e:7b:a5:ba:40:99:4d:0e:
                    98:da:48:8c:18:b7:38:f2:49:3a:16:26:13:a3:e4:
                    5c:ac:15:15:fb:b9:94:b9:58:2f:ec:c6:74:a1:29:
                    1b:dd:28:5f:29:3e:3a:69:70:22:ff:05:bd:7c:db:
                    9d:cd:0c:b8:7c:e7:50:f8:53:f5:d0:1a:44:7c:12:
                    fc:79:a8:73:d1:8c:c8:61:54:56:4b:29:b4:64:04:
                    18:01:2d:78:0e:2f:84:46:d1:cc:0e:49:ca:df:f3:
                    55:31:57:b6:93:9a:a9:bb:1c:21:83:3a:10:44:5e:
                    c4:83:4e:d0:d5:eb:35:7e:cd:0b:54:d7:0f:6e:a2:
                    ca:cd:c1:9f:f6:48:fd:cb:16:5b:01:78:63:c2:4a:
                    1b:52:34:0a:91:50:51:4f:64:ec:4b:b0:39:ae:0f:
                    ca:55:96:50:19:21:3a:7c:ea:e1:85:0f:d4:a8:76:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:42:D1:19:44:3F:40:FD:46:29:25:23:9B:D0:29:3A:93:DB:44:C1
            X509v3 Authority Key Identifier:
                keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:24:ae:de:c0:85:5b:e0:43:f2:24:6f:01:1c:95:2b:dd:
         01:b0:71:56:ba:3c:ad:5b:50:73:7d:66:2d:4f:cf:8f:dc:d9:
         c3:aa:1b:e1:40:55:e1:0d:af:3d:83:3e:e7:20:8a:fd:11:64:
         79:cb:3e:e7:7e:ab:ab:39:55:d9:95:fe:a5:c0:1d:87:dd:0e:
         f1:cb:07:fc:70:eb:1f:ff:07:52:a5:78:ec:76:90:8e:b4:12:
         2f:bc:e2:d4:ed:e6:79:85:ab:da:7e:d7:43:1c:7d:1d:70:e7:
         94:0b:d8:96:a9:5f:6b:21:9a:7a:6c:1a:d8:5e:8c:45:5e:3d:
         11:04:38:e8:67:a8:c8:5e:b2:75:23:d6:43:a8:d1:5b:9d:ad:
         3f:0b:4b:d3:89:72:c6:96:16:6c:92:11:db:32:86:64:eb:d9:
         42:d0:34:c1:d2:f4:13:6c:d3:e2:cb:68:ba:c0:5d:7b:52:0d:
         f7:85:59:20:02:11:6d:0a:e3:33:ed:ad:de:4b:68:0c:61:25:
         da:76:53:d4:ce:80:25:f4:af:9a:cd:c0:15:dc:36:40:98:d1:
         2d:bc:c3:36:2e:ff:38:d2:ff:31:60:48:ef:a3:a6:57:32:47:
         e0:56:4f:94:09:21:df:29:e5:9b:b0:70:cb:b3:36:a2:1f:52:
         ad:77:05:57
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUYH6pD8RFCl0dF2VQ2l72V2r9P4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC
ODAwNDlCNTAeFw0yNjA1MDMwMjQ4MTZaFw0yNzA1MDIwMjUzMTZaMDMxMTAvBgNV
BAMTKDczNDJEMTE5NDQzRjQwRkQ0NjI5MjUyMzlCRDAyOTNBOTNEQjQ0QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ZBs53uRTTKvLkuooBHQ30d81
GYru87NLFdl4gvte00hEohEMGY9sYML14foc4N4JCQ2NHZjVRtB9VmDnjRA9/85m
QWGNk06pEzGUeAVxAvxue6W6QJlNDpjaSIwYtzjySToWJhOj5FysFRX7uZS5WC/s
xnShKRvdKF8pPjppcCL/Bb18253NDLh851D4U/XQGkR8Evx5qHPRjMhhVFZLKbRk
BBgBLXgOL4RG0cwOScrf81UxV7aTmqm7HCGDOhBEXsSDTtDV6zV+zQtU1w9uosrN
wZ/2SP3LFlsBeGPCShtSNAqRUFFPZOxLsDmuD8pVllAZITp86uGFD9Sodo8FAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUc0LRGUQ/QP1GKSUjm9ApOpPbRMEwHwYDVR0j
BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw
QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0
OUI1LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h
YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTM0MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3+RMA0GCSqG
SIb3DQEBCwUAA4IBAQC3HSSu3sCFW+BD8iRvARyVK90BsHFWujytW1BzfWYtT8+P
3NnDqhvhQFXhDa89gz7nIIr9EWR5yz7nfqurOVXZlf6lwB2H3Q7xywf8cOsf/wdS
pXjsdpCOtBIvvOLU7eZ5havaftdDHH0dcOeUC9iWqV9rIZp6bBrYXoxFXj0RBDjo
Z6jIXrJ1I9ZDqNFbna0/C0vTiXLGlhZskhHbMoZk69lC0DTB0vQTbNPiy2i6wF17
Ug33hVkgAhFtCuMz7a3eS2gMYSXadlPUzoAl9K+azcAV3DZAmNEtvMM2Lv840v8x
YEjvo6ZXMkfgVk+UCSHfKeWbsHDLszaiH1KtdwVX
-----END CERTIFICATE-----
Generated at Wed May 13 04:50:52 2026 by rpki-client