Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          XboM/GVCHUPVqpn45N0upXfql+dI6DpgJ/Slav4V/kE=
Subject key identifier:   72:6C:60:0E:3A:EA:88:C8:F1:17:AF:83:5E:59:D1:D6:4F:BE:31:88
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       76189371029494343D6401A5C831531FB279C4E8
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
Signing time:             Sun 03 May 2026 03:10:22 +0000
ROA not before:           Sun 03 May 2026 03:05:22 +0000
ROA not after:            Sun 02 May 2027 03:10:22 +0000
asID:                     150915
IP address blocks:        103.97.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:18:93:71:02:94:94:34:3d:64:01:a5:c8:31:53:1f:b2:79:c4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: May  3 03:05:22 2026 GMT
            Not After : May  2 03:10:22 2027 GMT
        Subject: CN=726C600E3AEA88C8F117AF835E59D1D64FBE3188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:ed:84:b6:e5:49:86:74:5c:e7:dc:72:d2:
                    c3:50:6c:5f:00:35:b0:d4:16:f1:8a:18:81:7f:60:
                    c3:c1:a7:c8:82:a9:e1:9a:8b:be:09:dc:ad:53:e2:
                    e2:62:7a:3e:91:7e:0f:b5:83:e2:de:e3:23:75:45:
                    a9:50:9b:c8:f7:6e:2c:b6:d9:72:81:e7:5e:3c:1a:
                    f8:94:e3:40:a7:b8:c2:43:1b:66:37:1e:69:81:66:
                    8f:03:61:33:b1:74:e3:a3:79:4d:0e:ef:40:1c:82:
                    f0:70:b6:1b:54:ce:9f:59:53:e6:4d:ac:39:15:c9:
                    96:77:30:27:cd:84:aa:aa:6e:5f:bd:56:70:1f:42:
                    a4:6d:07:91:cf:09:27:12:88:9e:7a:14:2a:89:b0:
                    01:ce:6f:cf:9d:fc:f6:d1:a1:b4:aa:35:81:2a:10:
                    a7:f9:37:83:f3:63:41:6c:96:7f:58:64:b1:dd:b1:
                    18:de:1d:79:0d:9e:ab:e3:53:61:c8:e5:b6:74:70:
                    56:f6:df:2f:f9:21:24:ee:9f:11:51:6c:3d:45:42:
                    36:2d:2d:5c:b0:c8:f0:78:36:d5:b5:61:bf:6c:3b:
                    6c:97:a7:6e:05:86:4d:4c:d8:05:d8:69:ea:e0:62:
                    95:4a:a4:cd:4d:f9:fe:83:ae:fe:eb:26:16:af:ba:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:60:0E:3A:EA:88:C8:F1:17:AF:83:5E:59:D1:D6:4F:BE:31:88
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2c:e6:55:59:b0:dc:e0:0e:81:35:cd:90:6c:bd:e2:09:3c:
         86:8b:7c:77:bf:45:a9:d9:f7:65:09:0c:6e:3d:5f:63:72:75:
         e1:27:cd:6b:db:62:ff:70:7b:9d:02:29:e8:24:49:28:f4:75:
         dc:71:e3:6f:9d:0a:ff:ec:ca:4c:ac:62:3d:45:15:fc:ef:99:
         5a:f0:44:8a:f4:2d:1c:ed:42:6a:06:32:94:de:81:d0:1e:c8:
         a9:14:d7:1a:21:5d:41:bc:9a:07:8a:d0:2c:64:2c:24:6c:94:
         43:27:b9:4f:a2:f9:05:5a:f3:6b:21:c0:7f:58:c8:5e:16:17:
         27:f1:c3:3e:1e:d0:e8:52:f6:c5:6f:73:5a:41:df:0d:a3:9c:
         6d:ad:cc:06:ee:29:47:99:42:ac:3c:c1:38:9a:35:54:65:13:
         e4:82:6c:83:eb:d1:65:e2:55:63:8a:fb:b3:83:e1:95:7b:47:
         1f:41:06:0c:de:c4:4d:66:2e:52:89:f5:10:a2:5c:ab:e9:63:
         de:4b:cf:70:c4:73:c6:87:21:3e:69:ac:ac:bb:05:31:66:d3:
         fa:f7:ac:17:53:fe:eb:dd:14:3c:d6:30:ea:84:e4:be:7f:5a:
         1c:84:92:d7:97:b4:fa:93:6c:93:c2:52:f4:0b:eb:13:b1:4d:
         9a:99:af:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:33:18 2026 by rpki-client