Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa
File:                     3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa (raw, json)
Hash identifier:          MzMoXvwp2stngvRucIeMRj/ZickQ1zvi8Fxd3aMU4jw=
Subject key identifier:   1A:FF:73:64:D9:38:CE:F5:0F:B9:06:07:9B:88:8C:D5:A9:F6:F6:CA
Certificate issuer:       /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Certificate serial:       02C274B08FC86FA221EC1DF8D7D661654047BC1B
Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa
Signing time:             Mon 10 Aug 2026 15:11:55 +0000
ROA not before:           Mon 10 Aug 2026 15:06:55 +0000
ROA not after:            Mon 09 Aug 2027 15:11:55 +0000
asID:                     58820
IP address blocks:        103.167.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
                          rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 09:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c2:74:b0:8f:c8:6f:a2:21:ec:1d:f8:d7:d6:61:65:40:47:bc:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
        Validity
            Not Before: Aug 10 15:06:55 2026 GMT
            Not After : Aug  9 15:11:55 2027 GMT
        Subject: CN=1AFF7364D938CEF50FB906079B888CD5A9F6F6CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:82:90:20:2e:0a:07:f4:87:13:e7:40:b2:
                    48:1b:75:8c:32:2d:f7:d5:9d:27:e1:e4:e5:9a:fc:
                    14:ef:0b:a0:ef:a2:14:7e:2d:67:9c:50:df:bf:dc:
                    35:20:4c:22:e1:4f:d6:f9:57:16:21:67:a6:1e:92:
                    71:88:47:06:d3:b3:35:6a:e6:07:7d:fe:3f:06:e1:
                    67:60:e2:b2:56:db:ab:b2:72:f7:a2:b7:05:4b:6a:
                    9b:eb:73:c3:a8:57:f5:7d:54:6c:03:f7:8d:8c:f7:
                    7d:d4:91:84:81:29:58:a0:19:39:13:89:99:68:c1:
                    30:52:5e:a6:34:3c:1d:6c:38:7a:cf:69:cf:db:f7:
                    79:79:c0:9e:d3:2f:d6:c0:c2:76:d3:75:65:aa:f1:
                    ac:ed:e3:65:fa:2e:63:37:cb:49:19:e8:a1:5e:12:
                    b3:b4:cf:14:0e:c3:81:87:94:46:d4:99:b8:60:7c:
                    01:e9:8f:40:92:6c:02:e0:90:a6:2d:fa:d1:dc:4e:
                    45:76:31:e5:59:06:52:e1:c5:62:e1:d9:b1:ce:3e:
                    e2:bc:3d:0b:4b:d3:9f:89:10:81:b3:1e:be:d6:31:
                    2d:73:70:7e:8a:ec:4f:26:08:a0:c6:05:05:84:6f:
                    3d:97:f7:5c:5e:26:c0:84:db:c4:24:fe:d1:c2:10:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FF:73:64:D9:38:CE:F5:0F:B9:06:07:9B:88:8C:D5:A9:F6:F6:CA
            X509v3 Authority Key Identifier:
                keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32332d3233203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:fa:e0:3b:3f:06:b8:09:5e:ef:8b:28:3c:e2:11:e5:66:
         e8:db:56:11:0b:0e:2c:16:53:bc:a5:6e:cf:ee:a1:00:90:b6:
         69:18:ac:0a:d7:61:52:9a:4e:53:8b:9d:bf:8a:35:ae:d9:fa:
         01:64:14:ea:da:df:99:dc:dc:e9:81:d6:4a:cc:63:41:78:f5:
         c9:f7:de:7c:07:51:32:f2:c3:59:5e:90:05:6b:81:40:ea:fb:
         bb:51:ec:24:60:60:87:f5:a4:8e:19:30:7e:c9:51:a0:5c:d0:
         c9:5a:63:bf:f4:0e:c9:56:56:ac:8a:2c:11:70:65:ec:e3:2b:
         dc:ee:91:04:fd:f4:63:9b:e1:29:6b:ff:21:9c:36:b2:4c:95:
         dd:ae:53:e3:da:67:93:60:5f:bc:77:6e:f2:d3:03:43:33:50:
         fc:2a:4b:b5:9d:f3:b7:b6:7c:c8:3c:47:db:c7:d0:00:97:31:
         d0:6d:f1:4c:f8:5e:2d:e6:1d:3c:41:1e:8f:9a:51:52:a0:df:
         a3:7a:e4:20:72:f5:8f:40:69:96:20:c0:83:53:3f:98:90:cf:
         7d:cc:f5:ff:a2:c2:13:58:31:07:32:74:89:64:3a:ce:9e:c7:
         1f:09:22:2f:b6:90:cd:bf:9b:2f:ba:1e:99:cc:49:fd:2f:26:
         98:a8:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:17:50 2026 by rpki-client