Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32342d3234203d3e20313531303039.roa
File:                     3130332e3138352e34382e302f32342d3234203d3e20313531303039.roa (raw, json)
Hash identifier:          4zfQTG40Dz5bbiZkBR8XS9kMZtGbTqv2m2MHzfmz0YE=
Subject key identifier:   C2:EA:BF:81:0F:9D:58:F4:52:EE:09:D7:7B:CF:25:E0:69:13:82:8F
Certificate issuer:       /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial:       75C566A9A6900E738EA53BFB6127C497176D60DD
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32342d3234203d3e20313531303039.roa
Signing time:             Wed 14 Oct 2026 02:00:36 +0000
ROA not before:           Wed 14 Oct 2026 01:55:36 +0000
ROA not after:            Wed 13 Oct 2027 02:00:36 +0000
asID:                     151009
IP address blocks:        103.185.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
                          rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 19:21:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c5:66:a9:a6:90:0e:73:8e:a5:3b:fb:61:27:c4:97:17:6d:60:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
        Validity
            Not Before: Oct 14 01:55:36 2026 GMT
            Not After : Oct 13 02:00:36 2027 GMT
        Subject: CN=C2EABF810F9D58F452EE09D77BCF25E06913828F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:45:cb:33:94:00:3b:87:57:6a:da:71:24:
                    ad:93:0e:2c:57:5b:c1:49:fc:b9:0c:40:92:81:39:
                    ab:29:d4:71:a1:d5:43:c8:d5:4a:e1:5f:38:65:17:
                    47:d8:27:87:f4:8f:7a:94:27:69:0d:09:3a:0a:87:
                    be:7b:c8:0c:e6:7d:ad:18:af:7a:14:b9:27:02:ae:
                    be:55:21:46:ae:8e:f8:93:98:fe:6b:a3:99:e9:11:
                    ac:be:aa:e5:ab:26:68:61:a5:d2:ff:87:07:f9:ba:
                    ce:39:74:af:66:b9:db:94:8d:9a:bd:b8:57:b9:d7:
                    2b:34:df:96:f8:25:65:20:d7:04:c4:fb:5a:db:16:
                    df:58:ee:49:00:3c:94:85:3d:d9:db:69:6a:42:39:
                    c2:14:98:20:2c:fb:54:93:57:1a:82:1d:4a:32:cb:
                    3c:8e:e6:31:3d:c2:bb:f9:65:f1:c7:c6:6c:5a:15:
                    30:fc:73:0e:43:4b:4d:4b:a2:5a:02:9d:ff:88:bf:
                    6a:33:f9:f7:90:70:85:7e:57:c0:cf:d6:49:fc:bc:
                    c3:9c:ab:6b:56:8a:73:df:1a:2f:d1:c2:f0:c7:f2:
                    e8:5f:4f:b1:42:38:ad:fa:10:0a:cd:62:ed:24:83:
                    f6:13:67:6a:ff:f0:6b:89:76:78:3e:22:5e:01:15:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EA:BF:81:0F:9D:58:F4:52:EE:09:D7:7B:CF:25:E0:69:13:82:8F
            X509v3 Authority Key Identifier:
                keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32342d3234203d3e20313531303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:59:72:8f:ce:38:c5:73:50:07:ed:69:b8:41:f0:83:6e:
         99:46:45:ff:52:a9:01:e8:06:e4:01:95:ad:ef:5e:10:61:24:
         ff:c1:6f:33:ca:c2:94:07:3b:72:ac:19:e5:ba:44:be:33:f5:
         ea:87:59:a8:f9:51:15:29:90:1b:c3:b3:c6:3d:76:9c:08:ce:
         79:ba:38:b5:b1:b1:d2:41:da:3b:b3:9b:17:cc:21:73:ba:a4:
         60:18:df:6b:01:20:10:f3:6e:14:b8:ee:2f:af:b8:3d:d0:38:
         a7:60:9e:49:88:0d:16:eb:82:4a:cf:1a:97:aa:f9:fd:74:9f:
         67:78:d8:23:88:5c:89:e2:ab:9a:ad:32:56:a2:33:dd:08:75:
         3d:16:1c:9c:a3:69:ac:e8:c5:81:e0:54:2d:a0:32:80:ca:11:
         d0:8b:05:ca:2d:d8:30:15:d1:38:5e:16:0c:bf:40:44:c4:31:
         cb:69:5c:9b:3f:94:7c:aa:01:cf:13:59:c8:94:8b:22:b7:d6:
         45:04:8c:16:96:8b:ae:a3:82:20:ee:1c:a4:25:5b:5d:ae:85:
         5e:1c:1e:d5:4f:eb:fe:fc:8f:70:13:ee:6e:41:6c:4d:f6:55:
         b7:7d:2b:f0:02:75:a1:f6:41:6f:68:da:60:82:22:34:7c:eb:
         28:d6:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:15 2026 by rpki-client