Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa
File:                     3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          z6kkZUKqF82/TRaRxSD81xe5bX0APDWAtc/JbcQmawI=
Subject key identifier:   4D:1B:EC:2C:93:3B:F2:7A:DE:29:A8:3F:BE:0E:60:F8:AE:64:3B:E4
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       22CB17928843B3E96825EE9E2DC82C2F08452D70
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa
Signing time:             Thu 30 Jul 2026 06:21:16 +0000
ROA not before:           Thu 30 Jul 2026 06:16:16 +0000
ROA not after:            Thu 29 Jul 2027 06:21:16 +0000
asID:                     150915
IP address blocks:        103.97.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cb:17:92:88:43:b3:e9:68:25:ee:9e:2d:c8:2c:2f:08:45:2d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: Jul 30 06:16:16 2026 GMT
            Not After : Jul 29 06:21:16 2027 GMT
        Subject: CN=4D1BEC2C933BF27ADE29A83FBE0E60F8AE643BE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:0a:ab:91:23:4a:2f:71:1d:a9:f6:1f:c8:
                    09:6f:6a:93:92:cd:2f:af:76:6c:41:b3:53:d3:e8:
                    05:7a:25:e3:33:c2:04:7e:a1:0f:53:42:c9:5f:17:
                    c0:f9:a0:ef:9a:15:bd:7a:16:28:bd:b8:35:3d:c2:
                    b7:1d:3e:9b:b8:7c:a1:78:8f:3d:c0:5f:23:9b:8f:
                    90:90:ce:2f:b9:51:c6:d0:b5:3b:e1:ca:cc:d4:90:
                    52:cc:18:09:2f:45:35:e3:14:55:ed:5c:f2:c4:b6:
                    f9:31:7b:7b:d2:6f:8d:08:3e:e0:27:be:10:2e:6e:
                    2f:e7:e3:4e:20:43:91:70:f5:ba:59:37:3d:f7:78:
                    5a:28:17:3d:26:6f:4a:63:04:c3:d4:31:dd:fa:52:
                    8a:61:1a:c7:87:48:ed:0f:cf:eb:87:65:81:3e:d9:
                    15:bb:1f:b9:41:ff:dc:a9:5d:af:ba:c6:6f:97:6a:
                    fd:e0:f0:21:a8:8f:06:7d:73:7d:27:df:2c:02:21:
                    ff:80:bd:2a:74:d9:fd:f2:eb:21:fc:71:94:c2:2c:
                    6b:8f:33:a8:d0:83:ad:3d:40:ff:a3:b9:b7:f0:88:
                    41:f4:13:85:d1:60:e3:73:56:ff:3b:93:bf:38:65:
                    f6:6d:4a:fb:98:54:04:64:de:88:a7:e5:95:a4:84:
                    4e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:EC:2C:93:3B:F2:7A:DE:29:A8:3F:BE:0E:60:F8:AE:64:3B:E4
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32332d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:07:98:96:46:2a:fa:4a:d7:cc:96:22:56:2b:43:69:e9:b7:
         49:79:ca:34:a3:1a:2f:f7:da:34:8c:28:6c:fc:42:76:03:e4:
         43:aa:ef:81:2c:ca:f6:03:2b:83:ab:2d:9c:e9:5e:79:53:4c:
         52:40:3f:97:25:fa:32:d5:6d:72:b1:e4:24:4e:73:02:b6:da:
         11:e6:0c:0f:80:de:52:ed:7c:93:4f:8d:3b:0d:d5:43:02:05:
         8a:41:21:ff:19:9c:a2:c0:d4:2c:3f:86:b9:9e:5e:dc:b8:65:
         0e:a2:31:bc:fd:74:4e:00:cc:24:80:19:e6:50:df:ba:32:5e:
         60:f3:de:e0:bc:6c:4a:2e:14:f1:81:21:12:82:89:07:fc:61:
         68:f3:4a:4d:e1:95:98:e1:32:70:b4:68:6d:01:eb:47:be:d7:
         c4:12:c7:7c:eb:e0:70:19:b0:49:a3:1c:38:7a:e7:95:0e:ae:
         fb:f1:be:21:7e:6c:16:65:09:37:54:8d:0d:3f:31:1c:af:40:
         9b:36:7e:9f:fe:f3:b0:c1:9a:f8:7b:b9:5e:91:0e:89:93:7b:
         dc:67:7f:32:03:40:38:55:72:b7:0e:de:6c:78:92:cc:97:2c:
         ea:fd:da:b0:da:90:c9:63:0c:fd:2d:36:80:82:34:b8:e0:78:
         ab:88:37:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:44:16 2026 by rpki-client