Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203535363538.roa
File:                     3130332e31302e36302e302f32342d3234203d3e203535363538.roa (raw, json)
Hash identifier:          WPTgJgBZn9zU0LYC1z2CqvjiQ+vcOey/7diMUlVA1oM=
Subject key identifier:   D0:18:0C:9B:1A:1A:C0:9E:2B:51:43:5B:82:FF:63:DA:4B:A5:22:71
Certificate issuer:       /CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
Certificate serial:       6A3FE89668E96331C84C20363F3676779C3C0E69
Authority key identifier: B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203535363538.roa
Signing time:             Fri 31 Jul 2026 07:37:17 +0000
ROA not before:           Fri 31 Jul 2026 07:32:17 +0000
ROA not after:            Fri 30 Jul 2027 07:37:17 +0000
asID:                     55658
IP address blocks:        103.10.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl
                          rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 21:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3f:e8:96:68:e9:63:31:c8:4c:20:36:3f:36:76:77:9c:3c:0e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A1A7850FE4606645CDB993613F0326921CB0E7
        Validity
            Not Before: Jul 31 07:32:17 2026 GMT
            Not After : Jul 30 07:37:17 2027 GMT
        Subject: CN=D0180C9B1A1AC09E2B51435B82FF63DA4BA52271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:1b:ee:d1:12:f9:7c:2e:c8:7e:33:3f:8c:
                    ee:c9:5f:c4:90:6b:0c:b6:83:ce:27:22:ed:ca:ef:
                    10:81:a7:0a:b5:0f:2d:de:5b:6c:36:97:54:ea:44:
                    47:86:98:a2:e2:b8:9c:f1:09:fe:ac:d3:e7:8b:99:
                    28:02:73:2c:3d:d3:55:5e:58:22:71:fd:3d:5f:c8:
                    cd:30:dc:88:08:02:68:9c:1c:d9:3d:34:6f:89:36:
                    19:2a:31:8c:01:b5:99:18:68:04:eb:d5:4e:7c:3b:
                    0d:02:a7:ad:9e:88:32:a6:c7:a0:20:92:a4:53:7e:
                    b1:61:92:41:43:69:4e:be:9f:d7:cd:9c:7a:4e:fb:
                    ef:00:9e:e2:fb:8e:b2:62:ef:a8:c8:ee:63:c1:86:
                    5e:d6:4f:f9:15:20:db:2d:af:d9:b4:38:a9:c4:78:
                    c9:76:5c:45:d1:6c:81:3e:ba:30:9d:6d:b9:16:06:
                    f9:c3:6b:65:fa:7e:1e:80:76:36:6e:7e:ab:fc:e9:
                    05:e4:eb:c5:d6:03:af:7b:9b:f3:27:b0:b5:bd:7c:
                    59:f5:4a:2e:c2:52:ca:85:5b:36:a0:f4:6d:aa:40:
                    25:75:73:ef:ef:2e:f6:55:43:38:d8:b5:ff:67:3c:
                    c1:1a:02:b5:6b:85:d3:b0:1d:47:cf:40:55:51:73:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:18:0C:9B:1A:1A:C0:9E:2B:51:43:5B:82:FF:63:DA:4B:A5:22:71
            X509v3 Authority Key Identifier:
                keyid:B8:A1:A7:85:0F:E4:60:66:45:CD:B9:93:61:3F:03:26:92:1C:B0:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/B8A1A7850FE4606645CDB993613F0326921CB0E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B8A1A7850FE4606645CDB993613F0326921CB0E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36302e302f32342d3234203d3e203535363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:2b:fa:06:34:d4:9c:b7:f4:b4:15:8a:6c:a1:0a:89:17:ba:
         fc:fa:ba:17:31:2e:47:fe:a9:48:c6:df:e1:bb:23:8b:be:f6:
         e9:da:fc:e3:92:b4:31:be:ee:69:55:67:c1:0e:75:3a:40:6b:
         53:5f:9a:89:7f:fe:8a:09:16:8c:e4:d9:c1:56:6e:77:74:cc:
         23:82:64:c2:cc:0d:5b:b8:e6:b2:1a:d5:b7:7e:d5:fe:95:60:
         b6:4c:c6:a0:5b:d0:f6:a8:f5:0b:f1:86:12:27:02:3d:21:06:
         f0:f9:b7:64:d1:cd:cd:8a:cf:a3:12:e6:23:c0:01:68:df:27:
         6b:be:3f:8e:d6:d2:68:af:24:e2:ae:1e:9d:0e:73:da:6b:c7:
         e7:0a:21:ce:09:f1:d0:98:94:b4:b9:26:ae:2a:3d:04:58:ea:
         a2:6e:49:2d:98:a8:f0:f7:6e:26:b8:7b:e0:4a:a6:c1:0b:6f:
         86:ed:59:66:76:12:d4:7b:d4:90:84:c6:f5:b8:17:55:ce:4d:
         61:ec:9a:64:2e:39:90:94:1b:53:30:86:f4:a7:ba:e6:bd:bb:
         93:d7:bc:e0:1b:76:04:3d:65:97:a5:6e:02:a7:10:0a:95:5f:
         2a:b2:b3:c2:18:a9:2c:34:9d:6a:c5:e0:46:80:9e:09:77:ad:
         dd:01:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:10 2026 by rpki-client