Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32342d3234203d3e20313431353830.roa
File:                     3130332e3136302e35362e302f32342d3234203d3e20313431353830.roa (raw, json)
Hash identifier:          ynPgxjqXM55FFb2WELNbBlvabWVg49LCJa1iMFmDZX4=
Subject key identifier:   50:AC:93:57:2F:A2:B8:78:B9:80:17:F0:51:04:C0:E3:00:3E:61:41
Certificate issuer:       /CN=81770AE7AB1C0710552300F570246437C33AF966
Certificate serial:       0206612F9775D4528AA95A89E63AAF79E51561B8
Authority key identifier: 81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32342d3234203d3e20313431353830.roa
Signing time:             Sun 01 Nov 2026 17:31:08 +0000
ROA not before:           Sun 01 Nov 2026 17:26:08 +0000
ROA not after:            Sun 31 Oct 2027 17:31:08 +0000
asID:                     141580
IP address blocks:        103.160.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl
                          rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:06:61:2f:97:75:d4:52:8a:a9:5a:89:e6:3a:af:79:e5:15:61:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81770AE7AB1C0710552300F570246437C33AF966
        Validity
            Not Before: Nov  1 17:26:08 2026 GMT
            Not After : Oct 31 17:31:08 2027 GMT
        Subject: CN=50AC93572FA2B878B98017F05104C0E3003E6141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:ac:13:8a:7d:01:7d:07:63:10:a7:fc:aa:
                    1e:78:73:88:b8:cd:6d:8f:86:2d:ad:43:8e:92:d5:
                    af:75:7b:5e:b1:6d:55:ca:07:0a:26:d2:4c:e8:3b:
                    4a:9d:bd:a3:52:2d:4e:30:e7:35:ef:9a:a0:d1:68:
                    96:2b:41:1a:62:14:fd:bc:39:af:9e:64:c9:61:e2:
                    f0:49:d4:1d:fb:61:8e:45:c3:f8:8d:5c:b3:8a:c6:
                    9f:1a:83:2a:f9:dc:e8:c7:b9:b6:6e:51:ac:99:1c:
                    b2:6f:87:50:f6:dc:73:da:51:7c:17:89:a4:18:49:
                    02:0f:9b:4c:48:00:10:d7:9e:98:2f:6e:82:6e:00:
                    89:79:2c:e3:cf:16:fd:e6:a0:b2:c0:87:63:e8:0f:
                    67:25:37:a9:73:a1:55:be:a8:18:9e:33:6d:50:1e:
                    19:41:61:15:82:90:e2:13:14:9a:28:d2:e4:6a:f4:
                    14:99:82:c2:cb:5b:c8:90:89:f1:ff:5a:b6:ee:71:
                    8b:52:17:71:63:d5:32:2f:77:99:81:df:fd:c0:9b:
                    2d:da:23:74:7c:12:1a:a6:86:a7:e0:a9:84:d9:8c:
                    f2:63:81:5e:d5:61:23:4b:e3:df:2c:52:6c:b0:40:
                    27:d9:f8:8f:81:43:82:ae:ab:a1:7c:36:1c:ba:18:
                    d0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:93:57:2F:A2:B8:78:B9:80:17:F0:51:04:C0:E3:00:3E:61:41
            X509v3 Authority Key Identifier:
                keyid:81:77:0A:E7:AB:1C:07:10:55:23:00:F5:70:24:64:37:C3:3A:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/81770AE7AB1C0710552300F570246437C33AF966.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/81770AE7AB1C0710552300F570246437C33AF966.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f1b93687-2b20-41c9-bfbb-005f67e96a8c/0/3130332e3136302e35362e302f32342d3234203d3e20313431353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:59:ce:3c:82:91:11:e9:17:cd:4f:a1:a2:f4:d8:01:ea:67:
         a5:e9:fa:e3:8a:19:b1:8c:68:cb:f4:fc:d7:ed:35:91:15:bf:
         b5:92:67:19:ea:73:85:dd:ab:b6:3a:27:69:c8:7d:c9:9f:14:
         1a:71:66:bd:f6:1a:c9:b8:42:c1:57:5a:60:64:6f:7f:21:0d:
         15:a8:03:d0:ef:d8:3b:02:1f:98:b9:b0:8e:ad:f6:37:8d:ae:
         d5:4c:e4:7c:8b:71:2a:38:49:7d:c9:9e:c9:ed:e8:65:05:70:
         4a:de:f2:5d:1a:f5:9c:94:be:71:a6:37:71:15:be:12:4c:b0:
         f3:ed:39:66:a3:33:59:7d:e5:68:71:cf:97:e2:89:2f:9d:32:
         44:28:23:0f:50:fd:81:ee:58:61:ea:31:a6:e7:22:b8:64:94:
         a7:31:ff:8e:67:57:75:69:6c:d5:1c:cd:3f:ed:81:be:99:ca:
         e1:74:24:ee:62:7c:2e:98:1b:b8:40:2f:4c:ea:0f:d5:59:a6:
         14:de:28:a8:0e:0d:5e:a7:57:39:da:20:9e:ba:c5:03:32:c5:
         cb:8b:0d:a6:cb:d2:30:5c:91:51:cf:ed:00:80:3a:67:d0:fc:
         b3:dc:51:49:f8:80:7f:7f:79:a6:71:8a:e6:f0:46:3e:da:ee:
         b7:71:33:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 08:26:01 2026 by rpki-client