Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa
File:                     3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa (raw, json)
Hash identifier:          i7/UT3YcH1KnN8ZKGHTJm6kNrXY+Ng3CBCiwy2+npQ8=
Subject key identifier:   95:7B:B3:ED:3B:07:BD:F8:D9:D1:EA:19:C7:F0:AB:C8:00:F9:CC:C3
Certificate issuer:       /CN=4E0311031DBA1471A97F3183416162430EA78405
Certificate serial:       113EB0855440D47B41B6FA0395229E99DE2DB2FD
Authority key identifier: 4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa
Signing time:             Fri 18 Sep 2026 00:41:32 +0000
ROA not before:           Fri 18 Sep 2026 00:36:32 +0000
ROA not after:            Fri 17 Sep 2027 00:41:32 +0000
asID:                     149736
IP address blocks:        103.188.172.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl
                          rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 00:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3e:b0:85:54:40:d4:7b:41:b6:fa:03:95:22:9e:99:de:2d:b2:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E0311031DBA1471A97F3183416162430EA78405
        Validity
            Not Before: Sep 18 00:36:32 2026 GMT
            Not After : Sep 17 00:41:32 2027 GMT
        Subject: CN=957BB3ED3B07BDF8D9D1EA19C7F0ABC800F9CCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:45:84:b4:a0:d5:03:9a:0f:ad:50:02:fa:
                    68:35:71:e5:6f:ba:49:ca:a0:f1:de:cb:7f:80:a9:
                    a6:5f:2e:bb:e5:ea:b7:49:7f:02:81:aa:82:8d:7c:
                    b0:09:f9:c7:d1:c7:13:99:a2:25:c8:84:cd:f7:92:
                    53:8b:31:f2:de:2f:2b:77:40:38:3c:e9:ee:80:28:
                    b8:1a:22:a7:57:61:8e:5f:f8:19:cd:5f:0d:9a:cc:
                    0a:ed:23:ba:43:7b:38:d9:88:72:c7:99:15:3d:47:
                    fe:f5:db:3b:74:a3:7d:8e:8c:c3:a3:a5:48:9f:7b:
                    42:08:df:a5:8a:f6:9d:24:55:86:94:5a:8a:df:6a:
                    52:68:eb:99:15:52:93:1c:24:30:1c:86:21:e7:13:
                    87:c9:55:1a:c4:bc:b5:03:e9:37:01:e2:0f:b9:4e:
                    79:ce:31:fd:c4:42:db:b2:e5:07:b6:2b:64:56:94:
                    bc:98:f8:6f:8c:7f:2e:0a:ee:db:f3:85:77:8f:04:
                    38:aa:99:8c:ca:65:88:72:4f:f6:f0:05:b0:55:2c:
                    38:c4:dc:58:dd:73:e2:1c:8e:46:e8:1b:27:f9:59:
                    92:39:9d:38:56:72:1c:ef:7d:10:24:d7:d0:f4:d8:
                    19:e0:d1:bc:91:96:33:97:0d:7e:c1:8a:b6:32:6b:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:B3:ED:3B:07:BD:F8:D9:D1:EA:19:C7:F0:AB:C8:00:F9:CC:C3
            X509v3 Authority Key Identifier:
                keyid:4E:03:11:03:1D:BA:14:71:A9:7F:31:83:41:61:62:43:0E:A7:84:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/4E0311031DBA1471A97F3183416162430EA78405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4E0311031DBA1471A97F3183416162430EA78405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca8b54e6-1015-48eb-9bbd-51c16cd45445/0/3130332e3138382e3137322e302f32332d3233203d3e20313439373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:24:23:11:19:d9:8b:1d:e2:d8:16:14:23:4f:6f:dc:fc:81:
         a5:b5:77:60:0f:d3:64:d0:14:ce:4c:4b:0f:5e:2e:28:c8:7e:
         94:8e:7f:0e:38:e9:34:4f:28:4a:0e:26:65:99:3a:31:c1:25:
         c4:81:40:d5:ca:6a:67:6e:aa:8f:75:9f:dc:25:e9:2e:aa:17:
         69:0d:ce:01:e7:00:35:17:95:af:12:de:fb:75:06:17:f4:60:
         7c:b1:8c:a4:a9:b9:85:a1:46:97:a9:dd:3f:36:b2:f3:46:f4:
         e7:20:46:86:91:15:69:2f:12:21:8d:c7:a7:e4:16:5c:95:8e:
         99:98:9a:cf:89:2a:84:1a:2b:ef:13:5f:70:5a:7c:99:c0:dc:
         8a:14:fe:dc:4a:d0:cb:c5:37:cf:f5:7a:4e:ff:80:8d:6b:87:
         d1:e2:77:fd:ce:81:e1:71:f0:26:20:7f:96:30:c7:50:99:f4:
         9c:4f:61:30:2f:81:ac:2f:79:48:35:51:df:ca:c2:1f:0a:08:
         1d:df:8a:a0:21:89:54:9e:62:93:15:2f:c8:76:32:42:5a:9f:
         da:cf:80:cd:b6:f3:c6:ca:b8:cd:65:89:2a:a4:ed:15:72:8c:
         d3:05:66:86:2f:48:d0:01:3c:16:78:80:7a:5f:d7:8d:19:fc:
         13:63:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:19:07 2026 by rpki-client