Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3138352e34392e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          iD6I0/Lv3XauBdlL2y8xmiSomVxxfLqCog8k/l0w9nY=
Subject key identifier:   B2:7A:99:47:F6:47:CA:D0:50:A0:D4:C9:FF:00:29:EA:E6:C7:81:6A
Certificate issuer:       /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial:       453180197A93FF24A0E4041216CC1849F248DA70
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313335363336.roa
Signing time:             Fri 07 Aug 2026 10:12:58 +0000
ROA not before:           Fri 07 Aug 2026 10:07:58 +0000
ROA not after:            Fri 06 Aug 2027 10:12:58 +0000
asID:                     135636
IP address blocks:        103.185.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
                          rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 15:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:31:80:19:7a:93:ff:24:a0:e4:04:12:16:cc:18:49:f2:48:da:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
        Validity
            Not Before: Aug  7 10:07:58 2026 GMT
            Not After : Aug  6 10:12:58 2027 GMT
        Subject: CN=B27A9947F647CAD050A0D4C9FF0029EAE6C7816A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:af:e1:20:5a:a9:24:2e:f3:4f:d5:b2:23:
                    3d:64:5c:a1:1f:74:17:ed:06:6c:ef:4e:43:ea:7f:
                    c3:49:19:6c:bd:f1:31:17:59:28:13:ae:1b:f8:0e:
                    10:9b:d3:ac:46:df:51:5e:c4:d7:ee:48:22:ea:04:
                    b5:f4:e9:9f:1f:72:13:2b:62:79:bd:22:58:b2:b9:
                    a1:31:51:60:8a:cc:cc:e5:47:b6:79:be:1a:31:0d:
                    45:2d:33:95:8f:8c:e8:ba:b4:3c:54:34:28:bf:47:
                    28:36:8e:ad:78:f6:46:e7:2f:8d:06:0d:9f:fd:65:
                    b0:e0:dd:cf:ab:48:e2:37:e2:45:3f:87:15:ec:cc:
                    7c:d7:18:f6:7d:14:0e:b4:f7:81:ea:76:7d:41:b6:
                    7b:d5:72:ac:8d:8e:33:2a:fb:3e:82:a6:c1:dd:8b:
                    1e:ec:91:08:94:b0:63:bf:2a:05:89:e1:6d:2e:54:
                    c7:3a:6a:ae:4f:46:fb:23:26:4e:17:6a:a2:92:ef:
                    ce:24:26:41:d1:28:1e:b0:36:8d:22:7f:a9:d5:ee:
                    97:df:ab:6b:5a:5d:37:60:93:7a:17:62:7b:23:23:
                    49:05:a8:31:e9:7c:5c:b3:4a:53:3b:4d:8d:93:5f:
                    f0:e3:f0:11:1f:ba:55:13:f7:cb:9c:93:bc:be:93:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7A:99:47:F6:47:CA:D0:50:A0:D4:C9:FF:00:29:EA:E6:C7:81:6A
            X509v3 Authority Key Identifier:
                keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:03:5a:b9:4a:d3:57:8d:4f:6e:27:55:d4:ac:91:f9:f4:
         e2:0c:64:8d:50:ce:d9:ed:ea:67:1c:f8:f6:39:ed:e0:11:c0:
         0e:44:08:a3:30:9e:f9:f9:0c:02:91:7f:5b:74:e6:22:e0:0c:
         21:52:f4:cf:22:66:65:0c:06:6a:fb:06:e7:bf:8b:e3:ed:e3:
         20:af:c8:d7:bd:ec:f0:dd:58:29:07:c2:41:e6:bb:06:c2:21:
         de:c9:4b:a7:a9:9e:a4:9e:a2:9d:b2:90:ee:4f:fd:96:b2:59:
         42:de:dc:fe:71:95:ae:ad:69:2a:78:0d:a2:3e:4d:ea:9e:9f:
         54:2f:8e:23:55:6c:b5:4f:53:5a:77:7e:d5:7c:3c:1f:62:cb:
         46:7f:72:a3:14:3b:c7:d1:b7:4f:3e:ae:15:43:b6:93:be:ac:
         61:a4:03:48:28:ba:a6:ac:ef:79:b5:7e:54:ce:d2:6b:59:5d:
         29:cf:bc:17:2d:32:c5:51:db:83:29:45:be:ef:ac:ea:e8:31:
         0b:93:89:e1:5d:aa:dd:66:d2:68:0d:07:8e:0a:74:d9:82:d5:
         bb:13:54:50:08:45:3e:58:c2:37:43:0b:95:c9:ce:8d:ef:06:
         a7:30:ad:10:8f:76:98:21:3e:a8:6b:67:5a:1f:40:00:0f:10:
         e6:3e:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:20:29 2026 by rpki-client