Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/3130332e38302e39362e302f32332d3234203d3e203539323733.roa
File:                     3130332e38302e39362e302f32332d3234203d3e203539323733.roa (raw, json)
Hash identifier:          qNlfohJ3WOBafcQQyCsmPggpebtLDtOqmRqZd6CMuVU=
Subject key identifier:   EF:A5:1B:91:4C:A3:34:19:F3:09:65:CC:28:52:D3:51:F2:BE:40:16
Certificate issuer:       /CN=75FF16C5740BEF1582FECB48A8BAAFF769D3F20C
Certificate serial:       0A1C0B35820037395A3ECAEC4E2917CFCFA2E904
Authority key identifier: 75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/3130332e38302e39362e302f32332d3234203d3e203539323733.roa
Signing time:             Mon 19 Oct 2026 10:01:54 +0000
ROA not before:           Mon 19 Oct 2026 09:56:54 +0000
ROA not after:            Mon 18 Oct 2027 10:01:54 +0000
asID:                     59273
IP address blocks:        103.80.96.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.crl
                          rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 00:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:0b:35:82:00:37:39:5a:3e:ca:ec:4e:29:17:cf:cf:a2:e9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75FF16C5740BEF1582FECB48A8BAAFF769D3F20C
        Validity
            Not Before: Oct 19 09:56:54 2026 GMT
            Not After : Oct 18 10:01:54 2027 GMT
        Subject: CN=EFA51B914CA33419F30965CC2852D351F2BE4016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:aa:81:bb:d1:e6:28:86:9d:57:66:d5:9e:
                    7a:a1:89:39:ee:e0:fe:4d:9e:16:31:e2:44:2a:20:
                    18:cb:5d:ce:7f:c1:aa:56:78:c9:a3:9b:5b:35:61:
                    44:a8:8e:fb:d8:a7:c8:7b:e3:86:1b:4c:86:71:04:
                    82:f8:cc:7e:6f:db:8a:55:c7:94:81:1b:c3:b8:1a:
                    2e:2f:f9:f8:0f:31:e9:ad:38:39:a9:56:e7:24:06:
                    74:3f:f5:57:f4:bc:61:92:92:dd:6c:0d:c8:a1:3d:
                    75:7e:20:26:3b:84:e1:f3:c3:7e:a7:84:9e:2f:53:
                    a3:e5:b9:34:8b:3e:39:d7:83:68:e1:39:4c:8e:4a:
                    46:f4:32:46:7d:4a:18:8e:10:0f:6c:96:92:16:eb:
                    bc:42:c9:78:54:5c:2e:14:d8:0d:39:c2:98:bd:5b:
                    c4:08:dc:a4:17:4a:6c:71:f2:f2:a1:d1:e0:0b:e7:
                    e6:ec:ba:fd:a4:bb:78:de:48:ce:85:25:1a:fe:2e:
                    9f:1e:58:75:9c:37:6f:c3:74:ca:3b:80:61:3c:e1:
                    ec:cc:33:b5:95:4d:9b:a6:15:47:c1:51:96:a8:14:
                    de:9b:31:51:7c:54:02:3b:50:97:11:c8:01:05:50:
                    aa:b6:07:f9:36:06:af:47:6c:c5:6e:ef:93:65:28:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:1B:91:4C:A3:34:19:F3:09:65:CC:28:52:D3:51:F2:BE:40:16
            X509v3 Authority Key Identifier:
                keyid:75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/3130332e38302e39362e302f32332d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:14:2c:2f:23:65:3a:5e:5d:b8:5e:ef:c9:83:cf:a0:bf:44:
         c1:f0:c1:a1:55:3d:e6:8b:10:0e:66:f4:67:3d:12:eb:66:6f:
         d7:27:e0:9c:d0:09:9d:bf:46:1f:77:86:75:cb:69:fb:a7:26:
         3e:d5:37:94:82:d2:c8:49:b8:0e:8b:ca:13:c2:a2:98:40:db:
         80:0b:58:a1:44:ab:fa:51:c1:4d:ac:8c:4c:87:63:81:61:17:
         51:29:15:e1:4e:06:e6:da:07:8a:60:67:1f:1a:1b:3d:7c:fd:
         fa:c0:a6:35:66:41:2d:8a:2e:97:0f:06:63:26:7b:92:70:f1:
         0d:d2:c0:42:3f:d9:b2:fe:8c:6e:e6:12:f4:47:f5:50:5c:85:
         fa:4b:e6:14:6c:e2:13:50:7b:48:73:3f:d3:f4:93:05:10:69:
         4b:87:4b:61:1f:09:75:a4:22:9d:ae:65:5c:db:a6:84:ed:d9:
         ad:88:d8:b1:51:e6:bf:da:84:37:63:9c:f6:13:ec:27:21:84:
         e6:e4:ba:4b:a2:83:6a:ba:07:95:73:4d:b8:fa:f0:29:e2:eb:
         5e:b8:d3:87:a8:fe:01:0f:40:79:4c:3b:30:3a:ac:a5:c3:eb:
         0d:53:41:13:85:c9:35:f2:8e:19:b9:d2:37:58:9c:81:02:4a:
         d7:38:79:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:20:20 2026 by rpki-client