Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa
File:                     3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          pKyTnDy4jjm+bK/0uv1ZCFmZNnZvfEkd2gMR4Mti5xA=
Subject key identifier:   5F:07:AE:B7:83:11:3F:B1:B2:10:C3:CD:1A:49:94:F9:50:45:A8:8F
Certificate issuer:       /CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
Certificate serial:       132DCEB25168875684BACFFD02B6C049A75DB329
Authority key identifier: EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa
Signing time:             Mon 10 Aug 2026 15:11:32 +0000
ROA not before:           Mon 10 Aug 2026 15:06:32 +0000
ROA not after:            Mon 09 Aug 2027 15:11:32 +0000
asID:                     139456
IP address blocks:        103.167.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl
                          rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 09:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2d:ce:b2:51:68:87:56:84:ba:cf:fd:02:b6:c0:49:a7:5d:b3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFD42907B281E79D93B3A55BE77E6957B1B4BCA9
        Validity
            Not Before: Aug 10 15:06:32 2026 GMT
            Not After : Aug  9 15:11:32 2027 GMT
        Subject: CN=5F07AEB783113FB1B210C3CD1A4994F95045A88F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:20:34:ef:81:a9:20:a3:bc:15:92:ae:56:
                    b5:84:47:2a:7e:f7:42:d7:af:1f:ff:6d:da:b9:56:
                    d7:90:f8:b6:0d:4e:88:95:d2:99:16:91:0e:01:2d:
                    e7:15:51:aa:51:5e:7f:9d:37:63:14:12:64:74:44:
                    02:bf:74:32:77:29:93:4a:13:84:1e:7e:07:a0:5d:
                    dd:80:2c:93:b4:a1:68:01:24:60:42:9e:2b:34:95:
                    c5:19:fb:26:e5:a7:7f:55:c2:60:5d:68:d0:73:6c:
                    d2:47:d3:93:69:be:d4:60:54:14:a6:29:8a:ec:85:
                    5e:84:c0:80:2f:3a:d1:05:a8:e2:42:a1:79:db:fb:
                    9e:b1:1d:bb:72:76:a8:e4:09:45:57:85:10:40:7c:
                    f7:91:4c:0c:83:de:3c:22:0d:ef:de:6e:00:b7:e7:
                    e4:ac:df:ff:af:f8:ef:5f:9c:e4:0c:b0:b4:7c:7f:
                    28:a8:b4:5c:33:2b:af:7f:66:df:75:e1:fd:e4:30:
                    51:90:23:fa:e4:91:26:a3:0e:43:7f:27:16:e8:29:
                    77:5a:e7:1d:13:08:4d:df:55:cf:61:ba:08:3a:9e:
                    27:10:16:fa:22:46:13:8a:eb:6f:52:fb:01:31:a1:
                    27:b8:70:f3:b4:9e:83:6d:d9:26:50:51:93:32:0a:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:07:AE:B7:83:11:3F:B1:B2:10:C3:CD:1A:49:94:F9:50:45:A8:8F
            X509v3 Authority Key Identifier:
                keyid:EF:D4:29:07:B2:81:E7:9D:93:B3:A5:5B:E7:7E:69:57:B1:B4:BC:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EFD42907B281E79D93B3A55BE77E6957B1B4BCA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/3130332e3136372e3133322e302f32342d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:0c:93:57:10:07:ad:d0:15:10:ef:48:37:bc:44:3c:c6:
         1d:d8:6a:5e:ae:23:9c:b6:81:e0:e6:04:35:fb:1f:fe:c9:f9:
         be:ba:52:2c:6a:e6:a5:b5:03:ad:91:1f:82:9d:d6:9b:9b:b3:
         c3:e8:26:2d:93:7b:2c:98:01:c8:2b:8b:b0:eb:c3:ed:a5:27:
         4a:e0:ab:16:de:b0:6f:28:0a:e4:2e:75:a9:1c:ef:d0:f9:f3:
         8b:1b:9d:0d:76:35:6a:aa:30:85:98:f7:bd:1e:8a:bf:f5:f1:
         1f:0f:89:45:39:7d:cc:b2:64:bd:71:ca:33:26:1e:a4:b2:c2:
         f9:99:97:ea:16:51:e6:22:f9:55:27:20:07:36:1c:6a:d6:d5:
         1d:18:5c:a3:55:b9:94:97:df:8b:73:c8:5c:09:76:24:49:e3:
         0f:09:53:8b:36:67:b1:c7:bb:c4:85:7c:4c:73:4b:7c:39:a0:
         d1:d0:8f:98:43:ee:26:e0:57:f9:f4:36:b4:73:f8:4c:13:15:
         cd:fa:1f:bf:47:f3:50:41:f1:9c:47:28:9d:29:da:71:ef:31:
         a4:cb:fd:04:6a:a5:87:33:48:66:5a:d7:c6:b2:15:65:b8:1b:
         f0:82:cd:55:9b:07:82:58:8e:ca:b6:a4:37:5e:b2:cb:1b:1a:
         91:4b:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:24 2026 by rpki-client