Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3233203d3e20313431353830.roa
File:                     3130332e3136302e35362e302f32332d3233203d3e20313431353830.roa (raw, json)
Hash identifier:          /MeCV8JqKi1lQO4VDBV1ZdMDFv97aWv30d0KphIpNcI=
Subject key identifier:   9E:0C:C2:BF:2B:1A:7D:C5:C4:29:EA:B0:80:6A:3C:10:8D:0D:1E:72
Certificate issuer:       /CN=81770AE7AB1C0710552300F570246437C33AF966
Certificate serial:       6E97D4647422A3A62567DEE87DE4871DB7914C5D
Authority key identifier: 81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3233203d3e20313431353830.roa
Signing time:             Sun 01 Nov 2026 17:31:50 +0000
ROA not before:           Sun 01 Nov 2026 17:26:50 +0000
ROA not after:            Sun 31 Oct 2027 17:31:50 +0000
asID:                     141580
IP address blocks:        103.160.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl
                          rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:97:d4:64:74:22:a3:a6:25:67:de:e8:7d:e4:87:1d:b7:91:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81770AE7AB1C0710552300F570246437C33AF966
        Validity
            Not Before: Nov  1 17:26:50 2026 GMT
            Not After : Oct 31 17:31:50 2027 GMT
        Subject: CN=9E0CC2BF2B1A7DC5C429EAB0806A3C108D0D1E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:9a:4e:7f:22:00:b6:58:27:72:b9:d1:79:
                    23:21:1f:2e:04:81:a4:e7:fd:cd:6b:7d:61:df:83:
                    c3:ec:8e:bb:17:f7:6c:6b:17:33:2c:1a:18:ce:c1:
                    50:e8:71:06:3b:96:29:39:99:d0:31:25:20:b6:ca:
                    7b:38:1d:30:8d:73:c9:43:0f:33:dd:3b:ec:5c:32:
                    45:a6:79:f0:43:53:cc:97:d6:7c:d3:ec:40:22:d9:
                    eb:1a:0a:e1:e6:f2:1c:d7:3a:e2:ea:d8:b1:08:62:
                    c6:d8:c0:5c:60:12:6b:38:99:3e:12:28:5d:86:e5:
                    69:d7:ca:82:30:be:c4:59:16:f4:85:81:7f:8c:33:
                    32:91:74:6f:ac:88:fc:31:73:3e:88:32:68:60:d9:
                    d8:c4:b6:22:c9:b3:56:2a:10:bf:2a:1e:42:18:80:
                    13:34:e6:b6:4b:3c:d3:2e:59:c6:e3:7f:b9:41:f2:
                    07:99:07:49:6d:12:87:25:98:80:9a:d5:dc:89:42:
                    68:1b:47:1c:4a:30:99:5d:c2:9b:0d:e3:cb:03:b2:
                    70:a3:a3:20:93:65:c0:87:5c:91:7a:cc:39:27:dd:
                    6b:23:26:31:ae:48:39:54:6e:6a:03:fa:6e:c1:8f:
                    eb:43:06:ba:c3:37:70:e1:32:96:51:f9:47:15:b5:
                    b9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0C:C2:BF:2B:1A:7D:C5:C4:29:EA:B0:80:6A:3C:10:8D:0D:1E:72
            X509v3 Authority Key Identifier:
                keyid:81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32332d3233203d3e20313431353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:83:c9:88:ac:1a:64:de:e0:67:d2:b7:79:f2:48:ac:dc:
         5e:bb:85:93:18:0d:28:bc:ff:91:34:37:54:b4:18:50:92:7d:
         61:1a:3f:01:8d:ca:5e:aa:4c:4b:a2:5f:06:67:12:9f:eb:1b:
         9a:4f:20:11:ae:f5:9b:87:97:60:f2:7e:2a:f9:16:16:a9:c5:
         b0:ca:00:eb:21:e2:55:d3:a6:98:d9:c7:d2:03:de:09:2b:43:
         2f:50:d4:cc:95:ee:1c:62:7b:11:31:d2:8c:e4:c8:eb:7b:99:
         ae:0e:6d:0a:3e:c2:48:ab:bd:df:cf:a7:90:83:7f:5e:6e:78:
         45:d4:37:f8:dd:dd:06:d4:56:34:73:6b:bf:86:27:3e:04:90:
         ee:da:29:59:28:cd:ce:f8:60:dc:41:b1:a9:2a:21:27:bf:68:
         8f:8c:5b:bd:37:e7:23:98:dd:87:93:f2:e4:d1:d8:bd:3b:17:
         94:3b:7d:46:01:9c:d8:19:9d:79:2f:11:08:a1:63:d6:bd:86:
         03:ef:4e:61:e4:f6:89:17:ce:b2:8b:16:6c:41:8d:75:d5:e6:
         08:cd:5c:ae:68:d6:30:22:dd:c0:f3:a1:da:85:16:9e:43:5e:
         4d:d3:96:ba:b3:51:0c:15:aa:44:e8:47:d1:1c:56:9f:dc:d1:
         76:2b:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:01 2026 by rpki-client