Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa
File:                     3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa (raw, json)
Hash identifier:          Qko/spdBlsUVP3897WCdZTdpikFTtKKMZnOIM7RvYVs=
Subject key identifier:   C4:71:E7:2B:F2:7D:ED:40:32:FE:1E:F7:87:AB:C9:88:3A:5D:D1:73
Certificate issuer:       /CN=16A6747482288B9CE98B8471FAB375C9CC0473E3
Certificate serial:       1BC8E18287E664081D20CBEF92094B45FC707E85
Authority key identifier: 16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa
Signing time:             Mon 05 Oct 2026 13:48:09 +0000
ROA not before:           Mon 05 Oct 2026 13:43:09 +0000
ROA not after:            Mon 04 Oct 2027 13:48:09 +0000
asID:                     151587
IP address blocks:        103.216.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl
                          rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c8:e1:82:87:e6:64:08:1d:20:cb:ef:92:09:4b:45:fc:70:7e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16A6747482288B9CE98B8471FAB375C9CC0473E3
        Validity
            Not Before: Oct  5 13:43:09 2026 GMT
            Not After : Oct  4 13:48:09 2027 GMT
        Subject: CN=C471E72BF27DED4032FE1EF787ABC9883A5DD173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:03:dd:b4:5e:0d:62:7d:b4:fe:1b:aa:84:
                    f2:c1:f6:bd:7e:13:4e:b3:cb:0e:bb:71:71:88:8a:
                    fa:93:fa:35:73:3b:fb:93:82:f1:a7:33:93:0d:6f:
                    b3:f3:e5:09:e0:28:34:0d:47:05:d8:21:35:52:db:
                    7f:7d:d0:56:2a:3a:95:3e:de:18:d2:d7:6c:49:d2:
                    40:3c:c5:96:c8:bb:c9:a5:58:a5:32:a9:49:4f:1d:
                    57:0d:0f:dc:9f:b4:24:29:36:a4:61:ee:d6:b1:fc:
                    8a:1c:d2:87:fd:ca:48:86:b9:e8:0c:1c:f9:69:01:
                    94:08:67:7f:69:94:a6:f7:49:ee:c6:82:1a:8c:35:
                    40:f6:34:dd:da:48:74:b6:86:a3:04:36:0e:a7:46:
                    c9:87:cc:0c:f9:30:15:d5:60:76:9c:45:e6:8b:20:
                    b5:f5:32:02:ba:97:a2:a6:97:db:f8:52:3e:03:48:
                    8e:2f:f0:94:62:80:ad:7a:9d:10:a3:9f:6d:21:38:
                    c8:6b:d5:d4:94:cf:71:a1:bd:f6:6b:6d:d9:fd:f6:
                    12:7a:7b:c8:e4:96:11:8f:db:47:03:66:c3:dd:cd:
                    04:f6:88:d8:14:d4:94:93:ac:b7:50:17:6a:42:04:
                    0f:bc:db:1d:81:34:5d:b7:3e:16:2f:55:b1:99:e5:
                    58:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:71:E7:2B:F2:7D:ED:40:32:FE:1E:F7:87:AB:C9:88:3A:5D:D1:73
            X509v3 Authority Key Identifier:
                keyid:16:A6:74:74:82:28:8B:9C:E9:8B:84:71:FA:B3:75:C9:CC:04:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/16A6747482288B9CE98B8471FAB375C9CC0473E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16A6747482288B9CE98B8471FAB375C9CC0473E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6191bde-553d-49db-9cb6-b353e561daee/0/3130332e3231362e3130342e302f32342d3234203d3e20313531353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b8:fb:ba:8f:f3:16:a0:da:1f:6a:e3:e9:09:cc:d6:f7:2f:
         44:4b:86:a3:06:c0:35:74:99:44:d1:e5:b7:21:df:46:c9:24:
         ae:da:0c:45:58:5a:a3:30:5e:1d:05:12:df:8f:11:3d:d8:45:
         eb:f5:11:69:84:c0:08:6d:39:7f:62:46:a4:2f:f3:70:08:4b:
         3e:7a:12:71:03:a3:c1:08:88:31:fc:88:b3:30:6c:16:d4:18:
         32:c8:d8:aa:4a:da:d0:57:b4:54:f7:15:82:2d:19:34:67:dc:
         3c:b5:3c:37:a3:99:de:2c:a2:3b:d5:36:4c:31:9a:fe:04:ba:
         71:8a:e4:14:07:09:91:ac:c5:f1:ff:08:5e:72:60:aa:71:ee:
         18:56:c8:36:8d:7b:1a:c9:48:7b:d6:12:34:1f:bc:9c:2d:64:
         8a:87:a5:16:92:ea:4f:5f:cf:19:bc:45:d4:c6:d8:8a:1a:04:
         73:44:9c:55:b7:13:21:2f:b6:14:73:65:03:51:c3:b3:70:9d:
         66:fe:1d:d4:4e:e0:7c:c3:99:e3:3f:91:35:e7:ea:b9:11:2a:
         69:3a:6c:2d:a6:17:29:a8:68:5a:5a:57:63:72:9d:bf:ea:3b:
         84:31:7f:69:c7:73:ad:9a:d9:42:29:89:23:cf:60:19:7a:63:
         a6:dc:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:14 2026 by rpki-client