Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313335343434.roa
File:                     3130332e3136302e33372e302f32342d3234203d3e20313335343434.roa (raw, json)
Hash identifier:          Tn1UVr/mLOXX2K04j0mLIt4iqmii+0nYPTY8SB4pgag=
Subject key identifier:   B6:22:EC:8D:B8:B2:A8:47:8A:32:EC:BA:39:70:1D:C7:19:9C:11:F9
Certificate issuer:       /CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
Certificate serial:       40C70BADFF4464FBE34E948F8DD6550C9A858FFB
Authority key identifier: E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313335343434.roa
Signing time:             Tue 13 Oct 2026 03:50:46 +0000
ROA not before:           Tue 13 Oct 2026 03:45:46 +0000
ROA not after:            Tue 12 Oct 2027 03:50:46 +0000
asID:                     135444
IP address blocks:        103.160.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl
                          rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 08:39:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c7:0b:ad:ff:44:64:fb:e3:4e:94:8f:8d:d6:55:0c:9a:85:8f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9A8A6B9E08D026673630DC1A26DBE73DFA16132
        Validity
            Not Before: Oct 13 03:45:46 2026 GMT
            Not After : Oct 12 03:50:46 2027 GMT
        Subject: CN=B622EC8DB8B2A8478A32ECBA39701DC7199C11F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:49:66:7d:a4:4e:75:6e:63:11:dc:db:39:
                    37:87:17:56:de:f8:21:67:ef:92:be:64:4e:e3:2d:
                    fd:85:a0:3b:28:33:cf:8f:fd:78:97:8f:d7:a7:38:
                    e7:f8:8f:b9:a0:af:22:cb:b5:d6:33:9b:ef:c5:ee:
                    65:d3:0f:79:cd:f2:75:71:51:14:4c:26:f8:49:b3:
                    14:04:a8:5f:f0:c9:1d:c2:79:cc:6d:fa:73:54:97:
                    ca:f7:a6:74:f6:00:8c:b2:90:d3:b4:42:20:65:6e:
                    da:65:c8:06:a4:5f:57:d3:37:d6:af:d3:e1:e6:60:
                    ed:5c:1f:4c:8e:92:ec:eb:2a:b8:76:54:74:61:84:
                    c8:33:8e:38:f2:88:2d:4d:1d:c8:36:d6:b8:88:c1:
                    dd:92:ea:fb:41:d9:ca:d8:90:6f:35:c3:02:09:3d:
                    c8:1d:d4:b1:24:f5:78:a4:21:44:45:39:67:c4:07:
                    96:bb:ff:3c:77:d3:e1:52:e8:d9:7b:23:e4:14:61:
                    cb:7f:e3:9a:6b:91:e4:9f:45:6d:26:e1:ea:e9:c4:
                    1e:4d:e7:e5:6f:a8:3a:af:59:86:83:aa:d1:71:5c:
                    23:af:b8:d4:f2:6e:10:a9:ee:93:e6:fe:f7:2b:d1:
                    28:6e:93:63:bd:2d:23:3c:19:92:39:50:d0:62:2c:
                    89:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:22:EC:8D:B8:B2:A8:47:8A:32:EC:BA:39:70:1D:C7:19:9C:11:F9
            X509v3 Authority Key Identifier:
                keyid:E9:A8:A6:B9:E0:8D:02:66:73:63:0D:C1:A2:6D:BE:73:DF:A1:61:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E9A8A6B9E08D026673630DC1A26DBE73DFA16132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/3130332e3136302e33372e302f32342d3234203d3e20313335343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:1e:54:75:23:8e:22:e0:7d:d4:79:77:26:4c:f7:5e:30:
         e3:1d:c1:eb:fd:2d:e5:74:fc:ed:f8:c4:64:02:f7:7c:7d:7c:
         c8:21:86:43:ee:96:f1:e9:80:a0:ed:b3:40:f0:b8:f1:51:9c:
         b7:64:8b:99:01:b6:39:00:b5:35:8c:5a:3d:00:41:80:81:d9:
         49:60:22:a9:0d:65:d6:66:3a:0c:63:d1:65:28:55:01:67:4c:
         08:0a:49:b7:cc:27:a5:01:ee:9a:38:98:a4:41:bc:85:28:e0:
         6d:5d:81:4c:2e:0f:8d:47:1a:d3:cd:31:73:8a:5e:07:d5:27:
         fd:e6:5e:43:83:24:c0:42:b2:58:7e:94:5c:77:11:b4:ed:4a:
         c2:1f:2d:86:0e:10:21:e3:f7:dc:3f:27:00:49:5d:25:71:96:
         39:f1:79:96:ec:0e:90:e8:18:9d:e2:fa:66:d8:7e:2b:c6:77:
         28:6a:ad:73:33:10:63:15:cc:82:a9:ba:4b:35:9c:07:11:3b:
         98:09:31:cf:6f:73:68:9e:d4:e0:a6:47:b2:59:d1:50:e9:74:
         fd:ff:16:d5:8a:13:38:13:86:f1:56:72:6c:86:6d:47:0a:ea:
         2b:dc:ec:28:3c:b5:ab:c5:fb:d8:52:70:fa:23:4d:f4:63:31:
         a1:b6:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:05:03 2026 by rpki-client