Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3233203d3e203538383230.roa
File:                     3130332e3138352e34382e302f32332d3233203d3e203538383230.roa (raw, json)
Hash identifier:          1dFZ1UZLQ08r66oHGo5F/N42hyizcVkx2fnb+8tr3wA=
Subject key identifier:   BE:7F:79:0A:32:7A:40:04:CA:30:BA:4F:08:D1:39:02:83:93:83:2E
Certificate issuer:       /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial:       543DAF94AF22D20B564600F55E82F5A9BD45235B
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3233203d3e203538383230.roa
Signing time:             Fri 07 Aug 2026 10:11:54 +0000
ROA not before:           Fri 07 Aug 2026 10:06:54 +0000
ROA not after:            Fri 06 Aug 2027 10:11:54 +0000
asID:                     58820
IP address blocks:        103.185.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
                          rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 15:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3d:af:94:af:22:d2:0b:56:46:00:f5:5e:82:f5:a9:bd:45:23:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
        Validity
            Not Before: Aug  7 10:06:54 2026 GMT
            Not After : Aug  6 10:11:54 2027 GMT
        Subject: CN=BE7F790A327A4004CA30BA4F08D139028393832E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:3d:63:df:19:72:65:23:9b:83:f4:f2:af:
                    b7:23:63:f0:b5:6b:43:4d:64:cc:df:c7:ac:4a:2b:
                    00:6a:fc:83:16:96:be:45:e2:a2:68:8e:fb:3a:c6:
                    3a:3d:50:7f:b5:6c:13:49:0c:e4:7e:1e:b4:e4:f0:
                    16:66:1f:ae:f1:e8:f9:73:98:31:a8:9e:d1:5f:df:
                    9e:8b:25:3a:77:82:9f:b2:25:71:c2:d4:8c:25:32:
                    79:e3:08:82:1a:d8:18:d0:f9:11:71:75:9a:99:b7:
                    8f:e6:8f:97:82:9b:49:14:2a:50:f4:d4:df:a4:67:
                    dd:de:ff:95:2a:a4:03:32:62:d1:ee:ec:b1:23:f8:
                    5d:a0:26:2d:14:75:b6:68:9b:aa:48:a0:63:f2:84:
                    43:ea:5d:84:6a:9c:97:22:7a:7c:45:f9:9a:f1:0d:
                    dc:b1:85:c2:f2:00:b7:40:e1:fa:d4:a7:c4:4b:fb:
                    3f:7e:54:3c:8e:0b:a7:a8:94:17:cb:6b:21:85:bb:
                    d1:04:38:73:cc:51:23:d3:3e:1c:d9:fe:11:0f:63:
                    2c:66:f2:dc:18:43:23:71:cb:e7:9b:d7:39:81:26:
                    f5:1f:57:4a:5e:79:61:7a:9a:58:e1:a1:8a:48:33:
                    92:68:05:6c:37:51:0b:aa:b6:89:27:35:e1:04:2c:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:7F:79:0A:32:7A:40:04:CA:30:BA:4F:08:D1:39:02:83:93:83:2E
            X509v3 Authority Key Identifier:
                keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3233203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:08:a4:8e:a2:49:6a:b2:98:ed:d4:1d:90:ae:ef:59:83:
         67:80:36:e5:be:f2:a1:00:55:07:77:31:8a:43:34:33:40:07:
         f1:8c:a0:fe:66:b2:f3:36:8e:a7:e1:44:84:e3:92:4f:db:66:
         c2:0a:9d:53:8b:e1:ff:8a:84:e1:48:bd:c1:aa:79:6e:59:30:
         bf:91:10:00:65:48:64:cd:2c:12:e5:94:0e:3c:59:96:3d:32:
         c2:fb:58:3a:52:e3:47:43:25:04:ab:d4:62:64:23:c9:63:ce:
         c0:d3:07:70:17:db:0b:4f:59:ca:a0:bf:3a:a2:d3:b8:c1:84:
         6e:a6:33:bb:3d:a2:77:63:f9:f1:c2:25:c8:30:63:62:e5:b9:
         7a:52:6a:6d:53:ac:d7:74:d7:51:ac:ae:b3:3d:b0:cf:e0:33:
         96:e4:14:fc:90:fb:03:a1:86:88:f0:ce:33:20:19:6e:2f:e8:
         73:04:e6:2d:6a:c4:3c:5a:66:7f:28:f2:0b:27:02:ea:c3:34:
         57:d4:53:a5:33:c8:b7:35:98:bd:b9:36:49:bf:ca:96:c5:3b:
         57:51:23:06:8c:7b:4f:9e:21:a1:f9:18:57:10:9f:94:97:76:
         81:8d:aa:b7:38:b0:c0:b6:e1:03:12:7e:16:aa:a2:3f:c9:c8:
         59:7b:09:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVD2vlK8i0gtWRgD1XoL1qb1FI1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3QUMwRjBDRUJDMTc1QjI0OTEzRkFCRjNFM0REQUU4
ODQwNEFBRjAeFw0yNjA4MDcxMDA2NTRaFw0yNzA4MDYxMDExNTRaMDMxMTAvBgNV
BAMTKEJFN0Y3OTBBMzI3QTQwMDRDQTMwQkE0RjA4RDEzOTAyODM5MzgzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoRz1j3xlyZSObg/Tyr7cjY/C1
a0NNZMzfx6xKKwBq/IMWlr5F4qJojvs6xjo9UH+1bBNJDOR+HrTk8BZmH67x6Plz
mDGontFf356LJTp3gp+yJXHC1IwlMnnjCIIa2BjQ+RFxdZqZt4/mj5eCm0kUKlD0
1N+kZ93e/5UqpAMyYtHu7LEj+F2gJi0UdbZom6pIoGPyhEPqXYRqnJcienxF+Zrx
DdyxhcLyALdA4frUp8RL+z9+VDyOC6eolBfLayGFu9EEOHPMUSPTPhzZ/hEPYyxm
8twYQyNxy+eb1zmBJvUfV0peeWF6mljhoYpIM5JoBWw3UQuqtoknNeEELNdfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvn95CjJ6QATKMLpPCNE5AoOTgy4wHwYDVR0j
BBgwFoAUcnrA8M68F1skkT+r8+PdrohASq8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OTk5Njg4YTktZTc4ZC00YWJhLTgzYmMtNTE3ODY3OTEyMGFkLzAvNzI3QUMwRjBD
RUJDMTc1QjI0OTEzRkFCRjNFM0REQUU4ODQwNEFBRi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjdBQzBGMENFQkMxNzVCMjQ5MTNGQUJGM0UzRERBRTg4NDA0
QUFGLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzk5OTY4OGE5LWU3OGQtNGFiYS04
M2JjLTUxNzg2NzkxMjBhZC8wLzMxMzAzMzJlMzEzODM1MmUzNDM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzODM4MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe5MDANBgkqhkiG
9w0BAQsFAAOCAQEAjJsIpI6iSWqymO3UHZCu71mDZ4A25b7yoQBVB3cxikM0M0AH
8Yyg/may8zaOp+FEhOOST9tmwgqdU4vh/4qE4Ui9wap5blkwv5EQAGVIZM0sEuWU
DjxZlj0ywvtYOlLjR0MlBKvUYmQjyWPOwNMHcBfbC09ZyqC/OqLTuMGEbqYzuz2i
d2P58cIlyDBjYuW5elJqbVOs13TXUayusz2wz+AzluQU/JD7A6GGiPDOMyAZbi/o
cwTmLWrEPFpmfyjyCycC6sM0V9RTpTPItzWYvbk2Sb/KlsU7V1EjBox7T54hofkY
VxCflJd2gY2qtziwwLbhAxJ+FqqiP8nIWXsJaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:36:33 2026 by rpki-client