Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa
File:                     3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa (raw, json)
Hash identifier:          CTpJAxD8b2QNT5h88jTGFlELSNgnWrFO4BmZ/0YXD9c=
Subject key identifier:   1E:D9:95:56:CA:C7:F8:E1:A5:CF:2D:0A:61:AE:9A:5B:8C:87:77:3C
Certificate issuer:       /CN=218F42D6775F39C04AD2042E61C557053D4A69FE
Certificate serial:       0FE025305A4E059D3D41D0D61FC37104EE0A3238
Authority key identifier: 21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa
Signing time:             Wed 16 Sep 2026 04:51:44 +0000
ROA not before:           Wed 16 Sep 2026 04:46:44 +0000
ROA not after:            Wed 15 Sep 2027 04:51:44 +0000
asID:                     149378
IP address blocks:        103.181.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl
                          rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:33:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e0:25:30:5a:4e:05:9d:3d:41:d0:d6:1f:c3:71:04:ee:0a:32:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=218F42D6775F39C04AD2042E61C557053D4A69FE
        Validity
            Not Before: Sep 16 04:46:44 2026 GMT
            Not After : Sep 15 04:51:44 2027 GMT
        Subject: CN=1ED99556CAC7F8E1A5CF2D0A61AE9A5B8C87773C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:86:6a:ef:cd:b1:be:76:8c:64:9e:09:83:
                    31:5a:d5:ba:1d:27:e7:85:67:9b:4e:79:d3:e3:f1:
                    e9:c8:f1:16:33:fd:4e:7d:89:42:58:93:96:5a:2f:
                    1b:60:76:df:bb:68:e2:6f:0b:46:ae:31:85:bf:90:
                    c8:a4:8f:e9:c8:3c:ba:b9:75:58:cf:25:e7:40:8a:
                    67:2f:af:ad:c3:6e:3d:1e:34:3e:5c:1b:7c:26:b4:
                    c5:e6:31:a9:aa:e3:ee:35:f6:8f:be:09:80:bc:fb:
                    ee:52:67:4f:80:6f:c4:d7:15:a3:f9:bf:c1:0d:56:
                    d2:45:e7:f0:cc:fe:f9:e0:53:ba:34:02:a9:5f:e8:
                    11:8f:80:59:5f:cd:24:99:f1:83:dc:23:22:17:ff:
                    b3:61:58:89:d2:2c:75:84:91:00:f1:23:bf:e1:93:
                    c2:9c:cc:85:35:71:39:a5:85:02:f7:ee:69:6f:dc:
                    cc:67:5a:1a:09:e3:cc:b2:93:cf:24:30:ad:bd:4f:
                    e7:b0:2d:c5:99:99:21:47:62:d8:94:03:a9:ea:7b:
                    65:5e:9b:18:e6:ae:2d:c8:2e:32:d1:ed:05:21:de:
                    36:ae:79:f4:56:41:12:94:bc:01:57:93:6d:7b:76:
                    33:c1:cb:99:31:f1:c2:85:ee:42:d6:39:9b:e9:04:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D9:95:56:CA:C7:F8:E1:A5:CF:2D:0A:61:AE:9A:5B:8C:87:77:3C
            X509v3 Authority Key Identifier:
                keyid:21:8F:42:D6:77:5F:39:C0:4A:D2:04:2E:61:C5:57:05:3D:4A:69:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/218F42D6775F39C04AD2042E61C557053D4A69FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/218F42D6775F39C04AD2042E61C557053D4A69FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/36cc4734-beb6-4e33-9b1c-46dcd16425a1/0/3130332e3138312e37372e302f32342d3234203d3e20313439333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:7f:5e:f8:b2:86:ce:94:3d:98:27:34:74:1a:c6:c9:26:
         74:0d:a9:c4:fe:78:77:25:ed:73:e3:bc:17:a1:03:58:23:d1:
         fa:5c:75:59:76:4a:57:4e:e2:f3:e1:d9:f4:6d:7f:69:af:40:
         62:55:5c:a0:12:83:9c:f8:20:93:b8:3b:ea:2c:74:9e:0f:23:
         87:3b:40:94:80:cd:c7:c5:45:41:71:33:59:a6:67:7f:ba:c5:
         93:b4:b3:67:77:52:1c:a7:e8:1c:b3:cf:17:46:fd:65:22:45:
         d6:84:7b:fb:e0:95:8b:c3:2c:4a:24:d3:93:a4:78:14:d0:e3:
         8d:c2:64:ac:b2:6f:53:72:ed:94:39:e2:4f:66:6e:00:b5:15:
         f1:6d:28:d9:54:d5:aa:da:de:b2:58:54:a0:6e:b3:61:5d:a8:
         be:4f:63:ae:61:14:43:25:11:3e:61:cb:d6:28:8e:04:50:ec:
         68:74:43:59:25:8b:20:37:22:44:03:0b:ee:62:a5:62:57:31:
         c4:91:6c:67:fa:e7:d9:4f:af:5f:03:6e:29:2d:ed:75:5e:93:
         ea:77:5e:83:63:ac:46:f8:86:29:99:9d:19:d4:cd:c9:cc:ee:
         a5:26:c1:e7:ec:da:9b:22:3e:03:3e:79:e2:00:6c:00:30:86:
         bb:98:1f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:56 2026 by rpki-client