Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          u9kSV0nHD8gDVkk+7yn4MROqjOxunVlWmQtu4lH09fI=
Subject key identifier:   27:6B:43:07:BF:B6:E0:10:FC:2B:FC:FF:84:46:FA:CD:01:00:33:6F
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       6E4EAAC42170F4A6EEA92FEF9874A81EC7A1F5A4
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa
Signing time:             Sun 27 Sep 2026 19:29:15 +0000
ROA not before:           Sun 27 Sep 2026 19:24:15 +0000
ROA not after:            Sun 26 Sep 2027 19:29:15 +0000
asID:                     150915
IP address blocks:        103.97.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 19:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4e:aa:c4:21:70:f4:a6:ee:a9:2f:ef:98:74:a8:1e:c7:a1:f5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: Sep 27 19:24:15 2026 GMT
            Not After : Sep 26 19:29:15 2027 GMT
        Subject: CN=276B4307BFB6E010FC2BFCFF8446FACD0100336F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:02:78:88:20:59:d5:f8:59:a1:79:ca:70:
                    fa:55:4d:f9:9e:a8:81:72:a0:e6:8a:6d:a1:15:40:
                    76:b5:a5:a1:1e:f1:18:04:65:92:16:e1:dc:07:7d:
                    2d:52:78:78:83:98:3e:61:03:c4:1a:fc:89:80:23:
                    76:34:ab:8b:1b:c0:33:14:46:bd:14:59:9f:6c:42:
                    28:ea:1f:0e:6a:d6:a9:36:3c:e7:25:05:bb:99:95:
                    37:e3:bf:d9:96:65:2a:da:fe:c3:83:a7:98:b8:35:
                    30:ff:de:e2:17:13:96:0c:b8:dd:59:ca:53:02:cd:
                    bc:55:62:fd:09:b1:9d:90:46:ed:20:35:44:2f:90:
                    d6:be:77:10:89:1d:5c:b2:9a:6a:c8:52:7c:bb:41:
                    be:cd:63:a3:84:2b:9d:ad:10:ce:ae:97:30:2a:97:
                    77:56:19:be:56:8e:a1:1c:5d:2c:47:8b:10:95:26:
                    bc:05:02:9a:2b:34:db:4a:1d:20:b8:1f:b1:47:51:
                    89:38:4e:db:b5:ae:7c:ed:9e:c2:d0:bc:7d:62:d4:
                    15:1f:be:b1:3c:f3:0f:6e:2b:e5:9d:02:d1:b3:53:
                    21:8c:4a:2e:dd:ac:bd:21:37:f5:53:e6:8c:01:18:
                    3b:70:9d:eb:2e:92:45:b1:b6:6d:da:01:58:14:f8:
                    58:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6B:43:07:BF:B6:E0:10:FC:2B:FC:FF:84:46:FA:CD:01:00:33:6F
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:54:87:9a:91:43:0f:d4:6a:7a:08:f5:05:62:e7:ad:88:af:
         ad:d0:5f:57:21:8b:25:31:13:4f:e2:92:d1:7f:eb:73:fb:b4:
         f7:f1:3c:9f:4d:37:ad:03:c4:4b:ae:ab:8b:c9:ad:33:a4:08:
         57:51:86:06:23:1d:d3:a7:1b:0e:14:24:b4:7a:89:be:86:cd:
         36:2d:5d:af:51:39:10:67:1e:2e:7b:54:c2:6e:c3:f6:76:c9:
         a1:c6:d0:bb:4a:2d:8d:16:79:bb:34:ee:8e:19:db:e2:ec:1a:
         67:ae:b7:74:ae:26:29:08:46:ef:ef:1f:b0:5b:6c:c8:f5:2c:
         1a:19:e4:e4:83:33:00:50:ef:f8:e6:ff:03:a1:15:97:e8:54:
         e6:6d:3a:e0:e1:06:eb:16:42:38:e1:50:6c:e4:3d:6b:d2:57:
         1c:63:f1:6b:78:12:5d:74:9d:02:ee:9b:77:76:7b:00:50:16:
         e1:f2:fe:97:fe:4f:22:ff:e7:26:53:6b:32:68:d6:21:00:ed:
         2e:cf:8b:2f:6b:e6:ba:50:80:78:01:51:44:fa:58:d1:ab:96:
         63:84:b7:6a:4c:55:47:a9:00:30:61:17:81:bb:d8:b0:61:46:
         84:42:c5:d0:3e:79:c2:bf:e7:6b:6d:06:db:3d:4c:00:f6:5d:
         17:7e:8e:88
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbk6qxCFw9KbuqS/vmHSoHseh9aQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5
RjgwN0NDMTAeFw0yNjA5MjcxOTI0MTVaFw0yNzA5MjYxOTI5MTVaMDMxMTAvBgNV
BAMTKDI3NkI0MzA3QkZCNkUwMTBGQzJCRkNGRjg0NDZGQUNEMDEwMDMzNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJAJ4iCBZ1fhZoXnKcPpVTfme
qIFyoOaKbaEVQHa1paEe8RgEZZIW4dwHfS1SeHiDmD5hA8Qa/ImAI3Y0q4sbwDMU
Rr0UWZ9sQijqHw5q1qk2POclBbuZlTfjv9mWZSra/sODp5i4NTD/3uIXE5YMuN1Z
ylMCzbxVYv0JsZ2QRu0gNUQvkNa+dxCJHVyymmrIUny7Qb7NY6OEK52tEM6ulzAq
l3dWGb5WjqEcXSxHixCVJrwFAporNNtKHSC4H7FHUYk4Ttu1rnztnsLQvH1i1BUf
vrE88w9uK+WdAtGzUyGMSi7drL0hN/VT5owBGDtwnesukkWxtm3aAVgU+FiFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJ2tDB7+24BD8K/z/hEb6zQEAM28wHwYDVR0j
BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0
RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3
Q0MxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HGMA0GCSqG
SIb3DQEBCwUAA4IBAQDjVIeakUMP1Gp6CPUFYuetiK+t0F9XIYslMRNP4pLRf+tz
+7T38TyfTTetA8RLrquLya0zpAhXUYYGIx3TpxsOFCS0eom+hs02LV2vUTkQZx4u
e1TCbsP2dsmhxtC7Si2NFnm7NO6OGdvi7Bpnrrd0riYpCEbv7x+wW2zI9SwaGeTk
gzMAUO/45v8DoRWX6FTmbTrg4QbrFkI44VBs5D1r0lccY/FreBJddJ0C7pt3dnsA
UBbh8v6X/k8i/+cmU2syaNYhAO0uz4sva+a6UIB4AVFE+ljRq5ZjhLdqTFVHqQAw
YReBu9iwYUaEQsXQPnnCv+drbQbbPUwA9l0Xfo6I
-----END CERTIFICATE-----
Generated at Wed Nov 4 08:51:54 2026 by rpki-client