Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa
File:                     3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          5P1W95x+b+VcAeWv+Uihp1cvRwss8nuTjkrW2k6u0F4=
Subject key identifier:   6D:7C:17:B8:12:7F:13:CA:F8:FA:53:42:DE:A7:83:76:97:34:DF:B1
Certificate issuer:       /CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
Certificate serial:       3A43D9CD30AE04C7A41B81DED47C8C32ECA145D0
Authority key identifier: CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa
Signing time:             Mon 10 Aug 2026 15:00:32 +0000
ROA not before:           Mon 10 Aug 2026 14:55:32 +0000
ROA not after:            Mon 09 Aug 2027 15:00:32 +0000
asID:                     139456
IP address blocks:        103.185.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl
                          rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:43:d9:cd:30:ae:04:c7:a4:1b:81:de:d4:7c:8c:32:ec:a1:45:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE872C7F7E881E738FBB983FF5D84A20A1B4A35
        Validity
            Not Before: Aug 10 14:55:32 2026 GMT
            Not After : Aug  9 15:00:32 2027 GMT
        Subject: CN=6D7C17B8127F13CAF8FA5342DEA783769734DFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1f:d5:7c:24:78:e8:fa:f5:29:37:6c:23:6f:
                    fb:ca:dd:ad:82:de:90:86:5a:80:6a:cf:55:a7:37:
                    51:18:c1:37:2b:57:c2:fb:1e:37:71:dc:25:ba:18:
                    eb:d6:cc:8f:56:1a:a4:e9:4e:a3:3a:69:41:bc:38:
                    6e:03:17:f2:04:76:ce:eb:1a:45:0d:9f:d6:07:81:
                    5f:65:ff:e8:fa:8d:cf:a2:1b:56:f4:dd:5d:0a:a6:
                    15:9d:d0:e6:98:d0:dc:17:bd:34:fc:62:4e:09:e4:
                    d6:18:5e:03:70:72:47:ec:34:43:89:39:bb:89:e6:
                    96:5b:25:66:04:f9:ed:2a:6f:e2:08:64:26:57:2b:
                    48:c2:a7:0c:bb:0e:82:a2:e5:25:66:35:3d:74:f3:
                    32:f0:31:ca:a2:8a:72:1a:3b:f2:a9:57:cc:06:ba:
                    2d:b6:47:0e:d7:c0:99:b1:31:10:89:68:9d:f9:c4:
                    bb:6d:23:c6:0a:57:c2:cf:38:24:5a:2e:3e:67:27:
                    96:ea:bf:32:b0:8e:19:26:12:5b:04:f1:be:0f:42:
                    19:9d:a0:77:6b:55:93:c6:e3:64:36:71:2d:fc:58:
                    76:2b:74:b3:62:43:9e:27:7c:d4:39:c6:6f:56:21:
                    c4:6d:68:57:5d:7f:9d:36:8b:73:e7:0d:26:99:48:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:17:B8:12:7F:13:CA:F8:FA:53:42:DE:A7:83:76:97:34:DF:B1
            X509v3 Authority Key Identifier:
                keyid:CB:E8:72:C7:F7:E8:81:E7:38:FB:B9:83:FF:5D:84:A2:0A:1B:4A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CBE872C7F7E881E738FBB983FF5D84A20A1B4A35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec5f2e4f-45d4-4d62-92cf-d78b5c541a1c/0/3130332e3138352e34352e302f32342d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:eb:2c:a4:d7:cb:1d:5d:f2:42:6b:8d:60:48:30:3d:9d:59:
         0f:78:f1:88:f9:af:46:c4:67:3f:45:aa:ae:3c:ec:a7:51:53:
         6e:4e:86:d2:7f:24:32:92:b4:e4:e5:bb:29:39:c1:96:95:2d:
         b6:83:2b:8b:39:8d:7a:f0:90:eb:60:61:95:a3:03:21:8b:08:
         69:1d:80:ec:64:9b:94:ad:b4:af:96:94:32:5c:70:da:be:87:
         64:aa:d7:9c:2c:bb:75:48:17:2f:09:7a:69:0c:5d:36:84:97:
         aa:e0:0c:8e:bb:a9:68:dc:9f:00:52:06:26:9b:35:f3:58:ed:
         85:95:3d:c4:4a:5f:d2:ea:74:d0:9a:3e:67:63:e6:42:d4:e7:
         db:e6:0e:be:b9:1e:8a:69:ed:b9:4e:97:35:52:a7:78:a4:b1:
         84:15:17:1a:0d:20:1c:3d:55:eb:7a:80:77:4c:7e:8e:d9:b6:
         18:f0:89:db:69:2f:09:46:fd:e4:9d:55:ee:70:90:37:93:d9:
         8f:e9:fb:1e:7a:2c:b8:2c:d7:76:55:a1:f0:43:e9:1a:c0:e2:
         aa:d9:10:fd:a4:11:af:40:18:53:9d:de:cd:2c:78:eb:83:a6:
         b6:fa:a4:4a:23:2e:7b:d5:57:65:a3:c8:f9:c3:57:b2:69:19:
         d7:b7:75:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:30:20 2026 by rpki-client