Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa
File:                     3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa (raw, json)
Hash identifier:          Rc6cjSRalLs+jHagmKOEHXqRw1y1spFca3Cq6N+VYR8=
Subject key identifier:   A2:9E:D3:AA:44:F5:9B:E6:87:A2:D5:EE:19:6F:61:4E:EA:5C:22:D0
Certificate issuer:       /CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
Certificate serial:       69B6E99699A0C54AD35242DECC94111F1BB3DADF
Authority key identifier: 72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa
Signing time:             Thu 17 Sep 2026 07:38:36 +0000
ROA not before:           Thu 17 Sep 2026 07:33:36 +0000
ROA not after:            Thu 16 Sep 2027 07:38:36 +0000
asID:                     141134
IP address blocks:        103.185.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl
                          rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b6:e9:96:99:a0:c5:4a:d3:52:42:de:cc:94:11:1f:1b:b3:da:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727AC0F0CEBC175B24913FABF3E3DDAE88404AAF
        Validity
            Not Before: Sep 17 07:33:36 2026 GMT
            Not After : Sep 16 07:38:36 2027 GMT
        Subject: CN=A29ED3AA44F59BE687A2D5EE196F614EEA5C22D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:38:e3:52:5d:ea:7f:ca:8e:1f:68:02:61:
                    ef:17:cc:76:df:44:9b:f6:1e:de:ab:b2:1f:42:1a:
                    3c:cf:48:da:59:ea:5d:0d:98:88:a2:2c:e0:f4:e9:
                    cc:e3:c8:e5:c3:04:e8:a5:1c:b3:1b:bd:38:74:a6:
                    5f:32:02:f5:d7:a5:e4:c2:8a:24:85:6d:64:4b:13:
                    3d:cc:ab:3f:96:b2:f1:66:35:03:67:7f:6b:7c:d0:
                    8e:50:c2:4d:b3:fa:26:34:e4:b5:32:6a:f6:cc:ef:
                    7b:42:6d:48:fe:bc:cf:73:70:7c:d5:26:cc:23:79:
                    af:a0:d4:28:5b:cb:85:54:41:9b:35:8b:3e:9e:37:
                    9d:0b:35:f6:7b:44:71:c8:d2:7c:ea:c4:9f:a8:14:
                    1c:0b:cd:c8:64:da:4c:63:da:ac:30:b7:2e:fc:eb:
                    77:69:c2:df:f9:98:c8:a7:62:ae:66:e4:69:5d:8c:
                    d9:86:9c:02:e9:5e:1a:3b:76:20:0e:0e:a5:32:a0:
                    3f:5c:14:3d:ab:69:d4:ee:bb:83:a7:9f:3d:f8:20:
                    11:3f:81:73:c1:1f:0e:78:f7:4d:bc:6c:c3:cb:a3:
                    57:a3:16:57:09:30:17:43:e4:aa:a8:97:60:1d:e8:
                    e6:4f:75:74:ac:25:58:ce:a2:43:b2:64:61:cc:46:
                    f9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:D3:AA:44:F5:9B:E6:87:A2:D5:EE:19:6F:61:4E:EA:5C:22:D0
            X509v3 Authority Key Identifier:
                keyid:72:7A:C0:F0:CE:BC:17:5B:24:91:3F:AB:F3:E3:DD:AE:88:40:4A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/727AC0F0CEBC175B24913FABF3E3DDAE88404AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34392e302f32342d3234203d3e20313431313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ac:d0:91:11:2a:e6:3e:5c:09:c3:72:df:cf:f0:48:4f:f4:
         0d:8f:13:84:75:7e:ea:0a:b0:81:f9:3a:f5:c4:55:d6:3e:f7:
         e5:14:d7:25:ad:b2:2d:c6:a5:b1:1e:c9:ab:f0:34:14:7e:4e:
         ed:94:05:32:13:3d:0b:91:80:ce:bc:ac:c0:63:64:0e:07:94:
         69:51:fa:5b:d7:ce:61:2e:56:3e:b7:e6:cd:93:5d:ac:25:2a:
         b8:f4:50:4e:a5:5b:8c:56:db:a0:35:f0:b2:82:09:9c:ad:90:
         46:71:03:71:64:23:18:24:31:63:b3:24:db:4f:e8:b3:9a:60:
         51:f1:07:40:e7:c7:fd:37:ac:3c:c1:50:0c:cc:b5:9f:e1:e5:
         5d:98:c7:e8:84:b5:b9:c6:79:b5:0b:21:bd:90:dc:33:72:b1:
         4a:00:9f:09:14:b5:e2:48:ee:3e:12:be:2e:17:0d:d0:cd:19:
         56:67:09:22:cb:5f:9b:77:21:89:40:27:9d:a5:c8:53:14:ca:
         e6:87:ed:79:c1:f8:eb:bd:a5:cc:ac:00:14:97:1a:b2:c4:ad:
         f3:3a:f4:0e:f6:89:a9:d1:43:c5:40:38:30:34:c5:3d:56:3a:
         7d:cc:0e:c2:b8:22:d3:72:60:b7:4f:76:18:51:ca:de:0c:ad:
         7a:4f:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:35 2026 by rpki-client