Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa
File:                     3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa (raw, json)
Hash identifier:          SaD8e6GIVRQQpU4CT4qZc563tb2DJTmlzJS/OsFb3w8=
Subject key identifier:   E5:0F:66:2F:7A:FB:14:90:40:47:39:F2:F1:82:91:26:11:14:9E:D1
Certificate issuer:       /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial:       6DCF0AFCC5EB372270A09C1A6EF278FD516FCA98
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa
Signing time:             Fri 28 Aug 2026 08:55:29 +0000
ROA not before:           Fri 28 Aug 2026 08:50:29 +0000
ROA not after:            Fri 27 Aug 2027 08:55:29 +0000
asID:                     136885
IP address blocks:        103.105.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
                          rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:0a:fc:c5:eb:37:22:70:a0:9c:1a:6e:f2:78:fd:51:6f:ca:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
        Validity
            Not Before: Aug 28 08:50:29 2026 GMT
            Not After : Aug 27 08:55:29 2027 GMT
        Subject: CN=E50F662F7AFB1490404739F2F182912611149ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:7b:dd:10:05:49:06:59:cb:61:f7:7b:50:
                    29:3b:39:06:09:99:2b:d9:93:cd:da:c9:4a:a5:82:
                    40:5f:9a:34:5a:45:64:4c:e7:23:1d:8d:fc:23:df:
                    74:ca:d1:4d:40:9e:a6:9d:66:4f:2d:3c:b5:eb:3f:
                    b2:cd:96:7d:82:a9:1e:23:93:a3:9c:8e:ac:6e:81:
                    1e:ed:02:82:ff:59:35:18:0e:42:01:9c:87:45:0e:
                    04:8b:fc:15:a9:35:7a:0d:c5:73:6c:e4:30:a7:7f:
                    55:da:7e:d8:57:8c:68:48:c9:62:bc:2b:2b:d6:21:
                    ac:5c:e6:ad:e3:da:cd:f0:89:08:fd:7a:3d:e9:76:
                    25:49:e5:d5:91:60:7c:06:8e:43:59:26:80:4f:8b:
                    f8:de:a8:98:07:2a:37:45:fc:1f:9a:86:2d:fd:e3:
                    bc:c4:d6:2d:e5:bf:eb:79:2c:7c:e6:9c:26:1d:90:
                    19:38:d0:9d:1e:16:ad:fe:cd:ab:1f:ba:3a:87:29:
                    c5:22:4d:b8:7f:9f:59:56:e3:80:e8:2d:d2:a6:b3:
                    a8:4b:b5:60:3f:52:da:dd:60:76:aa:43:ac:a4:fc:
                    a0:a3:72:f6:9a:1e:2c:81:92:d3:d1:be:e0:62:1b:
                    99:5a:d3:8d:1a:09:cb:e1:7d:67:61:01:40:e0:32:
                    db:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:66:2F:7A:FB:14:90:40:47:39:F2:F1:82:91:26:11:14:9E:D1
            X509v3 Authority Key Identifier:
                keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235332e302f32342d3234203d3e20313336383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:3c:56:f8:fb:ba:fb:96:3a:b6:69:53:0c:b1:ee:63:8c:
         8b:30:11:d4:a3:5a:42:d0:41:4f:25:32:44:b3:18:61:3a:a7:
         b0:7f:2e:0e:b3:8b:bb:80:c4:32:cb:5a:eb:12:9a:64:00:9f:
         23:9d:60:67:ee:28:64:a8:a5:d6:13:1e:7f:7c:0c:29:05:2a:
         75:aa:1a:cc:fa:e8:3c:01:57:b8:6d:02:50:20:ab:f0:65:c8:
         95:65:e3:4c:e3:8d:9c:aa:a7:06:0e:2c:68:1f:be:12:eb:d6:
         0f:7b:75:18:9a:fa:b1:12:95:d1:92:90:cd:ec:35:21:80:d1:
         5c:1c:c9:97:67:dc:75:5e:cb:3f:48:49:68:8e:e3:af:f6:5e:
         f9:9d:19:8e:58:91:85:7c:0c:8d:50:85:da:bc:a2:c2:4b:cc:
         51:43:0a:5a:57:5e:4a:c7:e1:85:53:8d:e7:db:c4:88:f1:c3:
         c6:7d:1c:f8:39:12:22:2d:84:c0:ff:b0:9a:d0:c9:a6:86:d4:
         8c:41:e1:3a:2b:20:69:5a:92:ea:26:dc:e8:79:74:1e:8f:df:
         91:d0:e2:62:b6:89:4f:cb:20:34:32:99:7d:db:29:4a:6d:66:
         05:f0:65:89:98:4c:b6:ab:d6:a5:05:4b:3c:38:40:be:b9:90:
         6a:d2:b8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:17:13 2026 by rpki-client