Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa
File:                     3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa (raw, json)
Hash identifier:          i09Z8Tx2AGUJCoOM8U7S48IwaKRFx1XbdhDarsrxQWY=
Subject key identifier:   74:B0:8A:84:53:08:72:F7:41:A8:BA:05:5D:4D:2B:16:AD:2C:66:B0
Certificate issuer:       /CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0
Certificate serial:       39279DD8CAF1C5592E3B13600DFEB87B8A2DA83B
Authority key identifier: CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa
Signing time:             Mon 10 Aug 2026 15:06:06 +0000
ROA not before:           Mon 10 Aug 2026 15:01:06 +0000
ROA not after:            Mon 09 Aug 2027 15:06:06 +0000
asID:                     58820
IP address blocks:        103.167.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl
                          rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 06:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:27:9d:d8:ca:f1:c5:59:2e:3b:13:60:0d:fe:b8:7b:8a:2d:a8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0
        Validity
            Not Before: Aug 10 15:01:06 2026 GMT
            Not After : Aug  9 15:06:06 2027 GMT
        Subject: CN=74B08A84530872F741A8BA055D4D2B16AD2C66B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:2a:90:6d:fe:76:1e:3d:54:19:85:cb:6f:
                    b3:87:e3:35:a1:8b:af:8c:ad:c8:5e:b5:b1:3c:f5:
                    85:95:a4:80:46:83:23:3a:04:c5:1a:8e:05:55:cb:
                    53:db:0e:f7:b7:7a:b3:ef:ee:c1:55:ac:18:59:49:
                    95:3f:9c:3d:65:94:4a:9d:99:ed:79:9d:d6:7e:fc:
                    43:c9:ff:cc:3a:7d:0c:d3:67:72:06:a6:94:ae:28:
                    a5:91:34:de:b8:e6:91:92:1c:80:37:83:12:8f:e7:
                    f5:f5:8c:41:e7:8b:95:58:71:be:35:4f:a8:57:14:
                    bc:eb:6d:cb:69:2a:97:5b:6b:b8:2d:55:6a:c1:48:
                    e6:1b:06:78:6c:1c:72:f3:52:d5:ef:71:db:e8:83:
                    89:6a:c3:06:92:35:cb:8d:53:ea:4e:64:ca:54:93:
                    a2:37:73:c3:54:2a:8e:d0:25:db:c5:10:98:a2:9d:
                    10:16:43:de:60:1c:20:a1:46:53:11:ec:58:50:24:
                    de:c2:c0:ca:ba:96:7e:2b:4a:9d:af:69:f4:8c:de:
                    18:e1:bd:1e:37:d6:89:b8:a0:7f:10:72:46:f6:ec:
                    9b:b4:d2:81:00:b6:6d:46:0a:94:c6:13:aa:4c:ca:
                    84:b8:6b:28:fd:da:40:bc:75:3e:30:1a:15:81:3e:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B0:8A:84:53:08:72:F7:41:A8:BA:05:5D:4D:2B:16:AD:2C:66:B0
            X509v3 Authority Key Identifier:
                keyid:CC:7A:2E:C6:A7:80:5B:D3:03:06:C3:D6:4A:D2:92:AC:05:24:CF:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CC7A2EC6A7805BD30306C3D64AD292AC0524CFF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3233203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:de:6d:f9:5a:22:cf:f9:83:c4:c2:2d:e5:1b:61:bc:1a:
         50:18:05:ff:df:ed:58:35:d1:19:f1:a1:60:84:aa:98:23:f7:
         7e:45:80:21:d6:34:a2:67:d9:2b:f1:42:42:f1:83:ad:ac:4e:
         14:ea:00:16:6d:03:a1:e4:5b:7b:e8:65:52:01:3a:0e:11:5b:
         35:e9:b2:a1:a6:c9:b6:82:e6:b2:f3:58:46:5f:a5:a5:de:b2:
         1f:62:11:d8:a2:03:c4:d4:62:14:29:e2:da:4c:e3:5d:81:87:
         fe:0e:a7:b7:2d:09:15:01:6b:5d:cc:3a:f6:a8:cf:2b:68:a2:
         89:55:c1:39:44:d7:cb:01:48:9d:a6:57:9f:18:53:f6:84:57:
         59:1b:08:f3:6a:57:45:ff:1c:fa:a7:39:bd:96:92:c8:f0:87:
         b0:f7:c6:44:cb:14:ce:10:be:f3:d9:c5:ed:d9:b0:ac:34:42:
         0e:44:3b:bb:df:4e:dc:a1:89:bd:92:9a:0e:74:c0:80:40:f3:
         aa:0d:85:4e:43:00:fe:cb:db:95:fc:e8:ff:50:9d:d8:29:4f:
         81:63:ae:fd:af:b1:48:99:05:bf:1f:9a:51:65:82:40:74:9b:
         b0:bb:2e:20:49:57:c6:57:24:b2:00:d7:83:87:97:a3:0c:d5:
         4f:3f:fd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:18:07 2026 by rpki-client