Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa
File:                     3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa (raw, json)
Hash identifier:          gbvsVbre/1qZHWsiXoi/b+h75ZvQI1fjsMMqGabJRM8=
Subject key identifier:   22:67:72:F0:1D:B7:38:21:8D:FD:09:70:18:30:7D:69:C9:D7:BD:B2
Certificate issuer:       /CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
Certificate serial:       592911786F381E3171446A7595CC624FF2989DD8
Authority key identifier: 0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa
Signing time:             Fri 07 Aug 2026 10:14:55 +0000
ROA not before:           Fri 07 Aug 2026 10:09:55 +0000
ROA not after:            Fri 06 Aug 2027 10:14:55 +0000
asID:                     153658
IP address blocks:        103.185.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl
                          rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:29:11:78:6f:38:1e:31:71:44:6a:75:95:cc:62:4f:f2:98:9d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1
        Validity
            Not Before: Aug  7 10:09:55 2026 GMT
            Not After : Aug  6 10:14:55 2027 GMT
        Subject: CN=226772F01DB738218DFD097018307D69C9D7BDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:39:f6:96:c7:08:16:c6:12:db:26:46:f8:
                    d0:bf:24:5f:67:07:1f:42:a7:d4:df:8e:d5:c2:4f:
                    c9:a8:16:cc:d1:f6:b0:fb:06:87:21:06:6c:2e:f4:
                    27:76:c1:1e:f2:93:ce:1a:43:7b:21:35:f5:60:26:
                    bd:8c:02:78:f3:2a:cf:1d:b6:65:42:08:b6:96:21:
                    27:66:85:6f:bd:92:1a:de:5f:4c:f4:8c:a5:dc:c0:
                    01:3c:bf:27:ee:32:72:c2:2c:eb:9c:7c:24:28:cd:
                    b1:7a:2c:31:b4:37:5d:ae:91:09:e9:1d:60:67:e3:
                    34:37:7a:d7:a5:b2:a1:53:f6:33:9d:bb:02:89:ef:
                    86:3f:10:9e:a1:97:41:01:ae:de:8e:e4:07:cb:37:
                    3f:61:ff:17:9b:32:f0:af:e1:5c:02:61:f5:76:f7:
                    fc:79:b1:21:79:7b:98:73:bb:a3:81:ba:1e:49:68:
                    19:92:cc:b9:fd:2b:5d:05:2f:71:d0:ea:23:ab:49:
                    15:71:f2:1c:22:e7:3f:8e:96:00:e1:8c:77:c2:12:
                    59:c9:51:64:27:88:44:4f:ca:09:20:00:7b:18:64:
                    40:37:de:1b:9a:6e:a4:a8:11:99:80:cc:50:bd:cc:
                    72:70:71:73:bf:00:05:d3:56:f8:82:80:b9:1d:67:
                    01:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:72:F0:1D:B7:38:21:8D:FD:09:70:18:30:7D:69:C9:D7:BD:B2
            X509v3 Authority Key Identifier:
                keyid:0C:ED:1E:ED:0E:85:E2:B8:BA:5E:FF:BE:C0:25:20:3D:7C:38:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0CED1EED0E85E2B8BA5EFFBEC025203D7C384BC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38332e302f32342d3234203d3e20313533363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:44:27:c4:b5:c3:f8:0c:a2:84:2f:ed:2f:f0:f8:bd:d1:40:
         3d:0e:36:53:cb:f2:0c:c6:77:91:1d:5d:a8:c7:7f:fe:bd:57:
         b4:e6:1c:49:da:7f:18:30:35:99:be:dc:37:27:6e:27:c2:74:
         58:07:04:92:d5:f1:81:2f:cc:06:56:6c:fc:fc:b0:7e:a5:3a:
         96:87:83:90:07:35:83:09:eb:67:79:42:90:76:13:6a:d9:58:
         10:7b:c3:41:76:e1:d6:1f:fb:c9:5b:1f:8e:33:8f:35:02:65:
         f3:4d:ca:1a:84:39:69:b1:98:2e:d6:1d:04:1c:14:ce:27:da:
         4b:12:e4:bf:bf:52:4c:04:af:83:28:91:45:b7:ef:7e:a2:93:
         b7:d7:72:0a:d0:33:ee:83:a4:86:5a:87:39:2f:2b:77:7e:6e:
         9e:c4:01:74:5a:4e:10:b7:dd:b8:bb:38:55:f7:13:ba:55:d5:
         1c:30:01:8c:a4:d0:a8:52:bd:d3:e0:52:90:51:bb:32:ba:ad:
         63:62:cc:68:6a:8b:f2:06:38:f2:ca:90:f2:b2:12:56:d7:a7:
         c6:ad:18:de:ee:6b:5a:0c:20:2c:b5:50:e1:5b:1a:dc:53:bf:
         fb:f9:a9:6a:70:09:f6:c7:51:81:b8:47:75:30:ef:c5:0e:32:
         a4:bf:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:38:44 2026 by rpki-client