Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20313338303737.roa
File:                     3130332e31302e3133362e302f32322d3234203d3e20313338303737.roa (raw, json)
Hash identifier:          8G1T9/A9nu3W17VcuXuJRcBy9h5bvUBnPCqqBGQYDt4=
Subject key identifier:   C6:C0:C4:A3:62:5A:B8:FD:5E:6C:4E:EF:E1:D2:72:27:FF:F0:B4:C9
Certificate issuer:       /CN=CA547F005E84823E6A8A471723C17168E8E44644
Certificate serial:       7E637540453BAEABC544012FA3238A1A0A9AB9EF
Authority key identifier: CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20313338303737.roa
Signing time:             Thu 17 Sep 2026 03:15:53 +0000
ROA not before:           Thu 17 Sep 2026 03:10:53 +0000
ROA not after:            Thu 16 Sep 2027 03:15:53 +0000
asID:                     138077
IP address blocks:        103.10.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl
                          rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 20:04:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:75:40:45:3b:ae:ab:c5:44:01:2f:a3:23:8a:1a:0a:9a:b9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA547F005E84823E6A8A471723C17168E8E44644
        Validity
            Not Before: Sep 17 03:10:53 2026 GMT
            Not After : Sep 16 03:15:53 2027 GMT
        Subject: CN=C6C0C4A3625AB8FD5E6C4EEFE1D27227FFF0B4C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:fb:da:86:61:ff:d4:ba:15:c1:27:e4:63:
                    9d:28:ff:40:1e:54:a0:6f:dd:0b:bb:10:43:36:26:
                    4d:91:d5:c9:5b:b3:70:a9:70:a2:8f:b4:da:6b:cc:
                    22:a3:82:62:fc:ff:ab:d6:b0:46:52:7c:a7:44:5b:
                    6b:b5:28:ab:ba:b8:7f:63:a2:3c:c5:d6:25:9c:0d:
                    c7:8b:5f:e0:1a:82:74:42:6e:be:cd:64:ae:8b:88:
                    e2:20:c9:c5:5e:54:09:d1:92:81:45:99:7e:05:40:
                    df:a8:19:24:63:e2:16:0f:26:9c:10:d2:9f:4b:ed:
                    82:75:d8:cd:bc:1d:60:ca:96:be:c1:48:92:37:1b:
                    d0:70:f0:02:17:23:9a:f3:94:29:c9:19:89:dc:e3:
                    3d:fa:a7:23:fa:f4:21:09:03:f0:a0:23:68:b1:57:
                    e3:47:f0:02:5a:4b:94:04:cf:cc:a8:fc:40:67:cd:
                    1a:a8:3d:2e:aa:f1:91:da:cc:95:b4:20:26:2e:66:
                    7a:24:5f:29:4b:32:8b:5f:d6:af:0a:a9:82:53:a3:
                    6e:c2:5d:31:5d:18:9b:7d:fd:01:03:36:58:80:a1:
                    27:c2:ab:2b:a0:b8:ad:c0:01:70:1d:5b:f0:7f:04:
                    28:9d:31:40:58:49:d4:18:06:7b:83:c6:1f:f1:70:
                    59:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C0:C4:A3:62:5A:B8:FD:5E:6C:4E:EF:E1:D2:72:27:FF:F0:B4:C9
            X509v3 Authority Key Identifier:
                keyid:CA:54:7F:00:5E:84:82:3E:6A:8A:47:17:23:C1:71:68:E8:E4:46:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/CA547F005E84823E6A8A471723C17168E8E44644.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CA547F005E84823E6A8A471723C17168E8E44644.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133362e302f32322d3234203d3e20313338303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:db:29:4b:5f:9d:96:41:b9:26:a7:b8:bc:3a:d5:48:56:77:
         cc:f1:74:62:64:3b:7e:01:ad:24:1b:ac:fe:2d:38:bd:80:e0:
         15:01:dd:b6:b9:63:6c:b3:c9:8e:ee:4b:fd:d5:f2:d5:3c:9f:
         48:45:81:78:c9:23:4c:60:ab:18:98:e8:d9:da:9e:1d:1f:e5:
         00:39:4e:3a:24:80:dd:fb:dd:db:59:b2:af:15:6e:9b:a4:87:
         dd:ba:cd:b4:3a:6b:9c:dc:6e:07:f6:76:b9:5e:6a:0b:54:3c:
         8b:b5:31:72:cf:e1:98:ff:62:ae:25:08:49:72:fd:b2:13:e5:
         42:54:53:5b:8e:d1:74:2d:04:eb:20:34:ba:83:98:b3:d5:30:
         37:33:00:1e:b5:0b:57:9e:4c:0d:d1:71:6f:3c:7d:26:74:ba:
         d8:c5:f5:29:4b:45:da:ab:da:1a:63:4e:a6:51:78:88:61:3d:
         95:40:63:4b:b1:d7:33:c3:e5:6f:dc:c7:94:c0:5e:10:99:4e:
         fc:e5:02:84:c9:c8:5f:30:08:4c:fe:fe:93:60:80:2a:92:f0:
         73:4a:60:1c:e9:05:5f:4f:b0:90:59:24:9f:2e:3d:03:e6:54:
         a7:df:07:4d:e1:aa:1c:b8:53:68:6e:b8:61:fd:fe:98:b5:a7:
         8a:21:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:43 2026 by rpki-client