Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          oC0Zwxn/Y+SaGpr1C7IvzKOKRoeASbBabSQXMoguLZM=
Subject key identifier:   65:F6:3D:FD:38:C3:96:E0:C5:19:D0:C8:73:FF:0D:D9:7D:24:6D:00
Certificate issuer:       /CN=9635F0724E9717C889D5604679E31DA89F807CC1
Certificate serial:       3A913998A05AB340DB135E21F7301E599687F358
Authority key identifier: 96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
Signing time:             Sun 27 Sep 2026 19:29:54 +0000
ROA not before:           Sun 27 Sep 2026 19:24:54 +0000
ROA not after:            Sun 26 Sep 2027 19:29:54 +0000
asID:                     150915
IP address blocks:        103.97.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl
                          rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 19:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:91:39:98:a0:5a:b3:40:db:13:5e:21:f7:30:1e:59:96:87:f3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9635F0724E9717C889D5604679E31DA89F807CC1
        Validity
            Not Before: Sep 27 19:24:54 2026 GMT
            Not After : Sep 26 19:29:54 2027 GMT
        Subject: CN=65F63DFD38C396E0C519D0C873FF0DD97D246D00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:42:09:dc:4a:e1:ce:c5:31:98:9c:2f:fd:
                    59:e7:93:31:b1:70:cf:99:c5:d1:2d:82:c3:19:ca:
                    3b:00:d7:5d:12:4f:74:7b:61:1e:3c:6a:64:77:07:
                    47:02:64:a9:fb:1c:dd:04:a3:89:31:72:7f:04:64:
                    a8:73:e6:68:d4:f8:b8:99:46:38:f1:c9:e5:43:dd:
                    09:c4:f6:3c:37:a1:1b:e7:98:cd:8e:b5:56:38:e7:
                    98:e5:0e:6e:52:f9:15:c2:be:52:c3:de:26:ef:53:
                    7c:45:42:af:1f:6f:4c:6a:73:d7:c3:dc:4a:75:80:
                    1b:d0:37:6a:ac:1b:17:9d:57:28:0b:3d:bb:ae:55:
                    9b:17:07:73:ce:b6:e6:2f:57:ff:29:b6:1d:2c:c6:
                    be:4e:f3:4a:0f:e0:16:ef:18:99:8d:f8:7b:dd:1d:
                    19:55:e5:96:d9:c9:b8:51:14:0c:6f:29:6b:36:ea:
                    cd:76:d5:fd:e7:73:0e:e7:44:95:e4:0c:26:3f:01:
                    70:9e:a6:37:ed:43:3a:4f:33:0d:15:1b:65:17:b4:
                    9e:0c:60:d8:a7:60:a1:44:a0:a1:3b:62:f1:ce:8d:
                    2a:c7:7e:5b:d1:b2:ce:8f:f5:ab:f1:ac:39:e4:21:
                    39:4d:ae:73:75:48:6d:27:05:1d:78:a3:fe:da:8a:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:3D:FD:38:C3:96:E0:C5:19:D0:C8:73:FF:0D:D9:7D:24:6D:00
            X509v3 Authority Key Identifier:
                keyid:96:35:F0:72:4E:97:17:C8:89:D5:60:46:79:E3:1D:A8:9F:80:7C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/9635F0724E9717C889D5604679E31DA89F807CC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9635F0724E9717C889D5604679E31DA89F807CC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:90:ac:7e:48:bd:71:bb:23:7b:aa:6d:1c:63:6d:22:14:a6:
         76:0d:de:8b:bd:d4:e2:8e:a8:be:80:e0:99:6a:4a:7d:b2:02:
         8d:07:6e:ff:1a:ce:d5:38:4e:82:bc:e0:52:f6:16:a2:fe:cb:
         1b:0a:fa:67:4a:63:d8:38:ec:46:f6:23:09:0b:97:f6:9e:5b:
         4f:d0:bd:09:fd:c2:e6:73:b2:7e:90:9d:eb:a7:c2:a9:e8:21:
         b7:c0:3b:da:d0:5b:56:e7:8a:3d:5c:ec:13:1f:82:0f:10:5e:
         67:f8:15:de:66:9e:0f:28:74:1b:75:7b:dd:dc:52:05:de:f7:
         d0:ec:67:7c:1a:13:af:f4:b7:4b:5b:d6:d9:02:d7:59:6b:23:
         12:45:39:8b:37:56:9c:c9:f6:8a:f5:c5:8f:18:57:79:08:ba:
         73:a6:69:37:b4:e7:fd:2d:19:07:9b:30:fc:3b:a0:09:aa:86:
         c0:5d:16:7c:a6:12:21:e5:96:a1:45:ac:aa:f9:05:b8:8f:93:
         7a:65:ef:f6:14:2d:3f:2a:35:d9:dd:ad:72:19:4a:db:cb:62:
         18:02:93:d5:2e:dd:62:12:63:8a:e9:f3:5d:f9:c2:13:2a:4a:
         d9:98:10:c7:2e:81:d5:7d:f7:0c:ed:26:6a:e7:42:2d:80:67:
         04:42:33:5a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOpE5mKBas0DbE14h9zAeWZaH81gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYzNUYwNzI0RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5
RjgwN0NDMTAeFw0yNjA5MjcxOTI0NTRaFw0yNzA5MjYxOTI5NTRaMDMxMTAvBgNV
BAMTKDY1RjYzREZEMzhDMzk2RTBDNTE5RDBDODczRkYwREQ5N0QyNDZEMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fUIJ3ErhzsUxmJwv/VnnkzGx
cM+ZxdEtgsMZyjsA110ST3R7YR48amR3B0cCZKn7HN0Eo4kxcn8EZKhz5mjU+LiZ
RjjxyeVD3QnE9jw3oRvnmM2OtVY455jlDm5S+RXCvlLD3ibvU3xFQq8fb0xqc9fD
3Ep1gBvQN2qsGxedVygLPbuuVZsXB3POtuYvV/8pth0sxr5O80oP4BbvGJmN+Hvd
HRlV5ZbZybhRFAxvKWs26s121f3ncw7nRJXkDCY/AXCepjftQzpPMw0VG2UXtJ4M
YNinYKFEoKE7YvHOjSrHflvRss6P9avxrDnkITlNrnN1SG0nBR14o/7aigojAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZfY9/TjDluDFGdDIc/8N2X0kbQAwHwYDVR0j
BBgwFoAUljXwck6XF8iJ1WBGeeMdqJ+AfMEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDg0NjNhZDUtMTc0NS00NDNlLWIxNjUtZDE5NGVlZDg5ZTZiLzAvOTYzNUYwNzI0
RTk3MTdDODg5RDU2MDQ2NzlFMzFEQTg5RjgwN0NDMS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85NjM1RjA3MjRFOTcxN0M4ODlENTYwNDY3OUUzMURBODlGODA3
Q0MxLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HHMA0GCSqG
SIb3DQEBCwUAA4IBAQAVkKx+SL1xuyN7qm0cY20iFKZ2Dd6LvdTijqi+gOCZakp9
sgKNB27/Gs7VOE6CvOBS9hai/ssbCvpnSmPYOOxG9iMJC5f2nltP0L0J/cLmc7J+
kJ3rp8Kp6CG3wDva0FtW54o9XOwTH4IPEF5n+BXeZp4PKHQbdXvd3FIF3vfQ7Gd8
GhOv9LdLW9bZAtdZayMSRTmLN1acyfaK9cWPGFd5CLpzpmk3tOf9LRkHmzD8O6AJ
qobAXRZ8phIh5ZahRayq+QW4j5N6Ze/2FC0/KjXZ3a1yGUrby2IYApPVLt1iEmOK
6fNd+cITKkrZmBDHLoHVffcM7SZq50ItgGcEQjNa
-----END CERTIFICATE-----
Generated at Wed Nov 4 10:32:09 2026 by rpki-client