Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
File:                     3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa (raw, json)
Hash identifier:          fNPzl5pgP5THqHKexY3+BO0XOu1eYuUYqBqSIA0oDIk=
Subject key identifier:   C5:AB:CB:DE:79:46:F9:9C:FF:72:D3:17:3E:74:BB:F4:AA:F8:C6:06
Certificate issuer:       /CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
Certificate serial:       496D78A27FEE12B9312FF2F589133BB73EA30218
Authority key identifier: F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa
Signing time:             Mon 07 Sep 2026 12:28:21 +0000
ROA not before:           Mon 07 Sep 2026 12:23:21 +0000
ROA not after:            Mon 06 Sep 2027 12:28:21 +0000
asID:                     141933
IP address blocks:        103.166.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl
                          rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:78:a2:7f:ee:12:b9:31:2f:f2:f5:89:13:3b:b7:3e:a3:02:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9E76265CB34B4EEC43D8EE049601C2FA861D304
        Validity
            Not Before: Sep  7 12:23:21 2026 GMT
            Not After : Sep  6 12:28:21 2027 GMT
        Subject: CN=C5ABCBDE7946F99CFF72D3173E74BBF4AAF8C606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:73:15:c9:2c:3f:97:8d:d7:09:b2:29:06:
                    04:c5:08:6b:e9:31:ff:e8:bb:7f:04:60:98:ef:71:
                    53:4a:04:26:21:f3:cc:dd:72:3e:9c:5f:7d:68:a4:
                    1a:dd:f9:12:8d:8e:a3:19:fe:7c:3d:39:3c:de:a8:
                    38:b5:9a:f3:f9:db:7e:7b:2b:7e:79:53:9e:1d:48:
                    02:3a:f7:3a:d4:db:85:c4:df:df:fd:a1:0b:2b:41:
                    64:3f:f2:2e:f8:60:85:0c:56:b8:35:26:12:9e:47:
                    c2:f3:8d:d9:d7:13:7b:2a:bb:e4:6e:b8:ae:bf:92:
                    36:4d:87:a7:23:d8:0e:ee:e1:a5:a4:46:15:24:25:
                    a7:17:8f:c3:d0:a5:fc:7b:c0:43:9f:7b:57:c3:5f:
                    a8:96:ee:26:c2:17:a9:c6:24:52:db:57:6f:27:a3:
                    16:ae:00:2e:7a:c1:b2:17:03:29:32:34:a7:28:53:
                    4b:49:c1:b7:a2:b0:9d:b7:4f:46:53:e0:bd:ba:5d:
                    fc:c3:ac:1d:5b:a4:b9:cc:84:02:36:ec:34:c3:92:
                    a9:52:9b:23:aa:df:2e:a0:76:6f:f5:a0:bb:37:a4:
                    d0:24:f0:67:56:4c:7d:2f:75:ab:79:64:63:1d:d0:
                    c6:b8:51:5f:19:39:ce:7a:4a:9a:43:06:08:cd:2c:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:CB:DE:79:46:F9:9C:FF:72:D3:17:3E:74:BB:F4:AA:F8:C6:06
            X509v3 Authority Key Identifier:
                keyid:F9:E7:62:65:CB:34:B4:EE:C4:3D:8E:E0:49:60:1C:2F:A8:61:D3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/F9E76265CB34B4EEC43D8EE049601C2FA861D304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F9E76265CB34B4EEC43D8EE049601C2FA861D304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/3130332e3136362e36342e302f32342d3234203d3e20313431393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:5f:fb:a2:96:83:55:60:70:eb:d4:b5:1a:f2:30:68:42:6f:
         06:d7:b3:4d:c4:b1:f4:95:36:32:d2:1a:90:20:7f:80:3e:3a:
         e8:20:25:c3:8a:30:d1:1f:b3:ac:61:17:dc:b6:84:f8:da:e7:
         64:73:7c:29:23:67:5c:b2:e1:bf:c4:2b:7a:4f:6e:18:7f:a5:
         ed:13:5b:ae:30:2e:b5:13:db:cc:06:08:b6:a7:b1:dd:19:b2:
         27:12:d0:d9:d4:17:d4:3c:38:90:ef:c3:04:9f:9f:fb:7c:52:
         68:f2:c4:9d:c6:97:43:b2:a6:37:94:03:b2:4d:d1:d7:04:20:
         db:35:a8:57:6d:1d:1a:22:28:9b:24:02:e1:b3:63:27:8a:c2:
         df:8d:c7:29:7f:09:d8:9d:13:49:a9:5a:70:2c:59:ba:28:2c:
         fe:06:cd:e0:1f:b2:7e:f9:c5:3c:c8:cf:bf:2b:0e:03:49:e2:
         6c:0f:16:88:ab:bc:3b:3e:de:4c:9d:d0:81:5e:b0:f3:b9:c7:
         8f:2b:d4:4f:00:02:8e:12:0a:a4:d9:59:d8:0e:4e:c4:2b:61:
         55:95:71:75:b4:b3:4b:7c:f2:e4:a7:23:36:a2:a9:1e:7f:94:
         80:08:6d:26:30:cb:d8:59:a9:6b:6a:9a:fe:58:d1:4f:dd:e4:
         8c:4c:14:57
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSW14on/uErkxL/L1iRM7tz6jAhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFNzYyNjVDQjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZB
ODYxRDMwNDAeFw0yNjA5MDcxMjIzMjFaFw0yNzA5MDYxMjI4MjFaMDMxMTAvBgNV
BAMTKEM1QUJDQkRFNzk0NkY5OUNGRjcyRDMxNzNFNzRCQkY0QUFGOEM2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz7XMVySw/l43XCbIpBgTFCGvp
Mf/ou38EYJjvcVNKBCYh88zdcj6cX31opBrd+RKNjqMZ/nw9OTzeqDi1mvP52357
K355U54dSAI69zrU24XE39/9oQsrQWQ/8i74YIUMVrg1JhKeR8LzjdnXE3squ+Ru
uK6/kjZNh6cj2A7u4aWkRhUkJacXj8PQpfx7wEOfe1fDX6iW7ibCF6nGJFLbV28n
oxauAC56wbIXAykyNKcoU0tJwbeisJ23T0ZT4L26XfzDrB1bpLnMhAI27DTDkqlS
myOq3y6gdm/1oLs3pNAk8GdWTH0vdat5ZGMd0Ma4UV8ZOc56SppDBgjNLMF/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUxavL3nlG+Zz/ctMXPnS79Kr4xgYwHwYDVR0j
BBgwFoAU+ediZcs0tO7EPY7gSWAcL6hh0wQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MDEwZmVmNDgtMWVlOC00MzQyLWE1NDEtMjUxMGZiMTViOTZiLzAvRjlFNzYyNjVD
QjM0QjRFRUM0M0Q4RUUwNDk2MDFDMkZBODYxRDMwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GOUU3NjI2NUNCMzRCNEVFQzQzRDhFRTA0OTYwMUMyRkE4NjFE
MzA0LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzAxMGZlZjQ4LTFlZTgtNDM0Mi1h
NTQxLTI1MTBmYjE1Yjk2Yi8wLzMxMzAzMzJlMzEzNjM2MmUzNjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6ZAMA0GCSqG
SIb3DQEBCwUAA4IBAQCGX/uiloNVYHDr1LUa8jBoQm8G17NNxLH0lTYy0hqQIH+A
PjroICXDijDRH7OsYRfctoT42udkc3wpI2dcsuG/xCt6T24Yf6XtE1uuMC61E9vM
Bgi2p7HdGbInEtDZ1BfUPDiQ78MEn5/7fFJo8sSdxpdDsqY3lAOyTdHXBCDbNahX
bR0aIiibJALhs2MnisLfjccpfwnYnRNJqVpwLFm6KCz+Bs3gH7J++cU8yM+/Kw4D
SeJsDxaIq7w7Pt5MndCBXrDzucePK9RPAAKOEgqk2VnYDk7EK2FVlXF1tLNLfPLk
pyM2oqkef5SACG0mMMvYWalrapr+WNFP3eSMTBRX
-----END CERTIFICATE-----
Generated at Thu Sep 17 14:38:45 2026 by rpki-client