Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          8TsJDUFf5xwZJs6EgPJxyciB9/EWUhvPgtxe1fcDLMI=
Subject key identifier:   9A:EA:FF:0F:AE:F4:F3:74:3B:6B:94:E8:17:72:D7:66:98:4F:A1:30
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       49498075E0C3AE2615D08B6168E4C55376CC1012
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa
Signing time:             Sun 03 May 2026 03:10:22 +0000
ROA not before:           Sun 03 May 2026 03:05:22 +0000
ROA not after:            Sun 02 May 2027 03:10:22 +0000
asID:                     150915
IP address blocks:        103.97.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:49:80:75:e0:c3:ae:26:15:d0:8b:61:68:e4:c5:53:76:cc:10:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: May  3 03:05:22 2026 GMT
            Not After : May  2 03:10:22 2027 GMT
        Subject: CN=9AEAFF0FAEF4F3743B6B94E81772D766984FA130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:15:f7:f1:dc:cf:dd:dd:32:0a:0d:ca:97:
                    dd:b7:f4:8b:a9:2c:6a:9d:56:55:53:89:2a:1c:e1:
                    26:e8:03:cd:5c:46:5a:d7:66:d9:b2:0c:dd:4d:4a:
                    8b:ab:4d:eb:e7:f8:17:29:b7:50:58:12:6b:cf:90:
                    b4:f6:0d:49:c7:48:94:64:30:99:b6:74:0c:43:bd:
                    cf:66:6c:ec:e3:3f:cc:98:b8:2d:c2:c7:24:14:87:
                    d2:a4:28:09:cd:87:46:0f:13:66:82:54:23:14:c7:
                    0b:8d:95:0c:84:ad:d0:66:1c:61:a4:8d:9b:50:d8:
                    6d:81:16:ca:81:67:c4:c8:4b:fd:8b:2d:ee:55:98:
                    16:9a:0d:55:af:a3:b3:fd:d1:ea:c4:65:63:f9:41:
                    99:d8:b0:dc:ef:c9:c2:fa:fe:81:3b:70:64:5a:72:
                    f0:db:2a:e0:0c:43:d0:53:cc:83:28:48:e3:31:77:
                    9a:c8:3d:0d:30:e5:1e:69:cb:be:b0:25:12:07:77:
                    fe:8d:f4:df:22:96:af:95:04:4e:7a:75:65:6a:c4:
                    6a:04:8e:3b:64:d4:ec:7c:7f:e8:aa:7b:15:2b:20:
                    90:67:00:2f:3a:18:e3:95:60:12:98:7f:b8:d8:2e:
                    31:3b:ad:84:d0:51:50:a0:90:b5:22:cb:67:27:9d:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:FF:0F:AE:F4:F3:74:3B:6B:94:E8:17:72:D7:66:98:4F:A1:30
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:74:72:89:4f:04:45:4f:b2:b3:04:4c:69:85:f1:88:40:
         1c:9b:db:60:b7:29:2c:77:4a:18:33:ff:27:01:91:8e:b6:ea:
         cf:50:c9:e9:2a:41:ee:4e:8d:d2:e4:08:68:ad:72:d2:7c:06:
         0a:27:b9:9e:e3:ac:00:a5:87:c0:2d:26:ae:cd:c5:73:7a:1a:
         85:37:d5:18:29:2f:75:a3:f1:37:c3:9d:07:8e:91:a5:ca:c3:
         5b:fa:e0:a4:75:92:d6:77:52:69:58:ab:77:2e:71:48:3f:88:
         7f:7b:57:c5:9e:58:a4:06:b9:8e:ed:69:6d:c3:11:c4:15:08:
         e7:0d:ba:6a:94:b6:d6:e3:b8:c3:41:97:db:70:fd:19:9f:0e:
         6f:50:12:3d:46:ea:10:69:00:85:b0:a8:af:cc:cc:fd:59:be:
         ce:d9:d7:ad:30:c4:d1:0a:94:b6:6e:7b:15:64:38:c5:4f:93:
         16:4a:47:02:f9:e4:bf:4f:6a:db:88:42:a6:74:56:93:c6:84:
         68:64:37:72:16:8e:96:e4:8d:df:f5:de:9e:82:44:7f:81:86:
         51:14:9b:f1:33:b3:ca:7d:fd:06:05:fe:6c:9a:69:e6:56:4d:
         03:99:b2:a9:e9:f1:7b:fe:2e:fa:a7:70:62:87:f3:a6:f0:91:
         54:10:20:a3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSUmAdeDDriYV0IthaOTFU3bMEBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5
RjgwN0NDMTAeFw0yNjA1MDMwMzA1MjJaFw0yNzA1MDIwMzEwMjJaMDMxMTAvBgNV
BAMTKDlBRUFGRjBGQUVGNEYzNzQzQjZCOTRFODE3NzJENzY2OTg0RkExMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfLhX38dzP3d0yCg3Kl9239Iup
LGqdVlVTiSoc4SboA81cRlrXZtmyDN1NSourTevn+Bcpt1BYEmvPkLT2DUnHSJRk
MJm2dAxDvc9mbOzjP8yYuC3CxyQUh9KkKAnNh0YPE2aCVCMUxwuNlQyErdBmHGGk
jZtQ2G2BFsqBZ8TIS/2LLe5VmBaaDVWvo7P90erEZWP5QZnYsNzvycL6/oE7cGRa
cvDbKuAMQ9BTzIMoSOMxd5rIPQ0w5R5py76wJRIHd/6N9N8ilq+VBE56dWVqxGoE
jjtk1Ox8f+iqexUrIJBnAC86GOOVYBKYf7jYLjE7rYTQUVCgkLUiy2cnnUqLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUmur/D67083Q7a5ToF3LXZphPoTAwHwYDVR0j
BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0
RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3
Q0MxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HGMA0GCSqG
SIb3DQEBCwUAA4IBAQA34nRyiU8ERU+yswRMaYXxiEAcm9tgtyksd0oYM/8nAZGO
turPUMnpKkHuTo3S5AhorXLSfAYKJ7me46wApYfALSauzcVzehqFN9UYKS91o/E3
w50HjpGlysNb+uCkdZLWd1JpWKt3LnFIP4h/e1fFnlikBrmO7WltwxHEFQjnDbpq
lLbW47jDQZfbcP0Znw5vUBI9RuoQaQCFsKivzMz9Wb7O2detMMTRCpS2bnsVZDjF
T5MWSkcC+eS/T2rbiEKmdFaTxoRoZDdyFo6W5I3f9d6egkR/gYZRFJvxM7PKff0G
Bf5smmnmVk0DmbKp6fF7/i76p3Bih/Om8JFUECCj
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:49 2026 by rpki-client