Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa
File:                     3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa (raw, json)
Hash identifier:          /1rF0PKS/fc9zIsV+HmvJCLuPMTuSv+M8S12SwS/eEY=
Subject key identifier:   82:80:73:DB:F3:3B:92:C9:B8:E2:E6:24:F3:75:B3:12:F9:69:8B:5C
Certificate issuer:       /CN=566E09CA4830024428EFAB32BD4C5C0588342F87
Certificate serial:       456458C7A67EABE308C94955CDBD94E6C82486C3
Authority key identifier: 56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa
Signing time:             Fri 28 Aug 2026 08:56:08 +0000
ROA not before:           Fri 28 Aug 2026 08:51:08 +0000
ROA not after:            Fri 27 Aug 2027 08:56:08 +0000
asID:                     136885
IP address blocks:        103.105.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl
                          rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:58:c7:a6:7e:ab:e3:08:c9:49:55:cd:bd:94:e6:c8:24:86:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566E09CA4830024428EFAB32BD4C5C0588342F87
        Validity
            Not Before: Aug 28 08:51:08 2026 GMT
            Not After : Aug 27 08:56:08 2027 GMT
        Subject: CN=828073DBF33B92C9B8E2E624F375B312F9698B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e7:77:3c:7b:d2:cb:84:a2:a5:a9:20:e3:73:
                    1c:88:be:76:0c:e0:c2:a3:38:ab:88:27:92:8f:cc:
                    83:bc:1c:f1:09:0c:b1:3a:8b:33:c9:35:f9:17:96:
                    86:6d:c7:18:07:e3:c9:2d:de:ed:4e:df:07:c0:6e:
                    54:dd:22:a0:5a:e4:c7:a4:4e:96:c4:44:b7:d9:fc:
                    e1:20:7d:b3:e5:f0:8d:d6:23:7e:ad:83:f6:ac:f3:
                    09:91:f5:59:63:9f:63:58:08:68:65:8a:71:90:ce:
                    f8:f4:cb:70:ad:2b:e9:81:b1:46:86:8a:17:ba:81:
                    96:e3:cc:ea:e4:03:0f:4c:31:62:80:0f:5f:a8:a3:
                    25:4b:84:87:b4:9e:a2:13:de:26:a3:4c:8e:14:28:
                    a1:82:93:ff:fc:76:84:ce:9a:ce:77:13:bf:04:c8:
                    dd:33:e7:22:27:13:4a:ca:a7:b4:6b:26:27:aa:f9:
                    68:40:64:95:1c:2a:b2:ab:17:3c:35:63:66:5a:78:
                    7d:69:a3:f7:e0:a6:dc:eb:96:32:16:e1:a4:b5:b4:
                    c6:ac:61:f6:aa:52:64:d6:56:27:95:7a:4e:33:e4:
                    5f:98:14:69:dc:08:7f:b7:0c:d4:a8:54:7f:43:e4:
                    43:f2:11:6c:ac:b5:e9:bd:66:5e:9e:b7:9d:47:74:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:73:DB:F3:3B:92:C9:B8:E2:E6:24:F3:75:B3:12:F9:69:8B:5C
            X509v3 Authority Key Identifier:
                keyid:56:6E:09:CA:48:30:02:44:28:EF:AB:32:BD:4C:5C:05:88:34:2F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/566E09CA4830024428EFAB32BD4C5C0588342F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/566E09CA4830024428EFAB32BD4C5C0588342F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/3130332e3130352e3235352e302f32342d3234203d3e20313336383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:19:4d:98:60:59:77:d1:79:13:c5:f1:51:9d:f3:1d:5f:
         1b:ab:1f:77:de:f6:4a:f8:14:47:cd:e7:92:37:5a:37:5f:31:
         a3:d1:68:76:6f:ee:d5:29:4e:9b:21:1e:27:8a:87:eb:82:d5:
         a2:fe:54:00:8a:73:42:86:c3:2a:b9:91:c7:57:91:f1:a1:54:
         d6:6c:0a:44:0e:d2:3e:68:13:38:b7:7a:64:c4:34:97:e7:dd:
         a7:19:25:1d:a5:a4:b4:9e:7f:15:55:76:3a:b5:28:b3:67:ba:
         67:85:2a:f1:cb:d8:c5:2a:0c:b5:06:87:1b:7e:3c:bd:f7:08:
         dd:64:f9:b8:e0:2b:e9:81:5b:6d:db:75:9f:52:54:1b:eb:4f:
         3e:7e:dc:79:25:23:72:4a:5a:a3:47:3b:ea:84:1a:d0:17:b2:
         3a:f9:78:64:4e:8a:a2:09:0c:12:15:12:9a:22:2a:ad:df:24:
         4f:14:0e:70:df:0a:60:8e:6c:23:89:5a:86:38:9d:79:91:7c:
         11:7c:2c:18:3c:06:ff:72:5c:40:b3:53:3d:68:58:f6:68:b3:
         fb:af:9c:4e:ea:e6:27:be:4d:d1:65:15:47:a0:2a:8b:f3:6a:
         a1:f0:82:63:06:06:54:a7:cb:80:2b:e7:e4:e9:58:7d:67:98:
         ab:e2:ae:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 08:17:13 2026 by rpki-client