Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
File:                     3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (raw, json)
Hash identifier:          eouhZL8KRzKxSED1dcGBFmzqWDAKHQivhxiq0mmIE9Y=
Subject key identifier:   D7:66:93:D2:05:BD:E5:FA:80:ED:BE:38:1D:AE:79:AC:E7:AC:C1:34
Certificate issuer:       /CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
Certificate serial:       444ED06DA086C7EAE974952F76A05B039A3D7FEB
Authority key identifier: AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa
Signing time:             Tue 18 Aug 2026 13:59:54 +0000
ROA not before:           Tue 18 Aug 2026 13:54:54 +0000
ROA not after:            Tue 17 Aug 2027 13:59:54 +0000
asID:                     139980
IP address blocks:        103.132.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl
                          rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 12:22:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4e:d0:6d:a0:86:c7:ea:e9:74:95:2f:76:a0:5b:03:9a:3d:7f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD8CCE6412E4764FB5C9BDF831F80624AA21028B
        Validity
            Not Before: Aug 18 13:54:54 2026 GMT
            Not After : Aug 17 13:59:54 2027 GMT
        Subject: CN=D76693D205BDE5FA80EDBE381DAE79ACE7ACC134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:75:0d:15:40:ca:39:06:c3:0e:16:63:71:
                    95:55:93:e1:99:50:94:da:0b:c4:2c:36:80:9d:cb:
                    32:c9:30:07:b0:31:ee:c6:4b:cd:9d:b9:9e:23:17:
                    a6:3e:b2:a4:51:3d:4c:02:bb:8b:5a:9c:df:68:ed:
                    11:3d:03:8d:0f:79:04:f3:e2:93:5c:4d:2e:41:5b:
                    e3:4f:32:40:9a:27:76:97:30:81:76:e3:f5:71:63:
                    39:6d:21:0c:96:da:61:de:d4:c5:fb:86:ba:e7:ce:
                    0d:a6:8b:0d:84:73:b7:0c:ae:ca:6c:5f:06:7a:3c:
                    de:17:b0:bb:ee:3e:4c:70:44:a0:fd:32:47:a6:9f:
                    ea:a4:f5:97:23:d1:55:87:e2:ff:84:81:7b:a5:4a:
                    b7:eb:7d:e6:e8:78:07:84:62:29:24:33:00:4f:04:
                    f1:06:0c:36:24:37:57:87:1b:a4:3e:06:a5:62:4b:
                    a9:bc:32:58:42:fb:98:a7:76:32:d6:82:9a:49:cb:
                    b6:0d:f9:b3:99:13:97:5a:1b:04:2f:08:5f:4f:c0:
                    4b:d9:3d:04:7f:84:ef:15:85:bd:09:55:17:d8:93:
                    2c:c3:a8:57:b8:eb:b1:28:d6:f6:91:e6:a2:05:16:
                    7c:d4:91:b3:0d:51:e0:6a:7e:31:ed:a3:78:bc:53:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:66:93:D2:05:BD:E5:FA:80:ED:BE:38:1D:AE:79:AC:E7:AC:C1:34
            X509v3 Authority Key Identifier:
                keyid:AD:8C:CE:64:12:E4:76:4F:B5:C9:BD:F8:31:F8:06:24:AA:21:02:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AD8CCE6412E4764FB5C9BDF831F80624AA21028B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:e2:ab:b9:4e:70:08:fb:3f:62:d8:33:e3:88:d9:de:3c:1d:
         7f:2f:46:cf:ed:bf:99:ea:59:ab:ea:f0:c5:ba:46:3a:1a:a1:
         57:24:81:7f:17:d4:a3:43:ea:c5:8f:08:28:db:89:d9:99:83:
         2d:2a:ce:f8:83:b2:fa:9d:07:51:5d:8f:e9:19:d2:5b:7f:71:
         71:b1:e0:82:63:79:1a:c2:4c:e4:0b:fb:df:49:50:99:d2:b5:
         93:d0:56:5c:0d:02:f6:6d:74:f4:4f:17:e5:39:68:8e:d6:73:
         23:fb:bd:28:10:84:8d:25:03:94:16:82:5f:ca:b8:3f:c9:47:
         be:fe:3e:c0:88:70:b1:2a:62:46:18:b9:19:8c:d3:36:e6:77:
         fa:b4:f5:9b:70:09:0e:3f:50:9a:f9:e5:88:e9:21:ab:76:cf:
         e1:76:d8:87:8d:7e:42:73:77:e4:e1:c9:a8:bb:1e:45:7d:5f:
         79:05:c6:24:8d:eb:38:91:80:61:e9:02:d9:03:39:2a:79:c2:
         e2:74:11:4e:7d:e3:67:bd:f2:19:af:fb:fa:bb:8a:0c:46:97:
         33:5f:91:31:8e:c7:ca:45:cd:b5:02:87:6a:29:2d:5b:6e:b5:
         63:b0:1c:91:31:cd:04:c2:0c:0f:82:0a:0e:44:00:ea:9a:38:
         db:5d:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:27 2026 by rpki-client