Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3130332e3231382e3136362e302f32332d3234203d3e20313439333334.roa
File:                     3130332e3231382e3136362e302f32332d3234203d3e20313439333334.roa (raw, json)
Hash identifier:          xgNhTfNSRBrkRPtPemyNq0brWtK8n1B4NQuWBqAgAE8=
Subject key identifier:   AC:91:87:44:4C:BE:04:1F:E4:26:8E:76:E4:51:98:00:5D:E9:BD:EC
Certificate issuer:       /CN=B10811E98433E40D5FC6AFC366AA6FEE28172365
Certificate serial:       50B49512058C09F4DE9168CED044937B6B991FFC
Authority key identifier: B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3130332e3231382e3136362e302f32332d3234203d3e20313439333334.roa
Signing time:             Thu 22 Oct 2026 07:42:15 +0000
ROA not before:           Thu 22 Oct 2026 07:37:15 +0000
ROA not after:            Thu 21 Oct 2027 07:42:15 +0000
asID:                     149334
IP address blocks:        103.218.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl
                          rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 19:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b4:95:12:05:8c:09:f4:de:91:68:ce:d0:44:93:7b:6b:99:1f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B10811E98433E40D5FC6AFC366AA6FEE28172365
        Validity
            Not Before: Oct 22 07:37:15 2026 GMT
            Not After : Oct 21 07:42:15 2027 GMT
        Subject: CN=AC9187444CBE041FE4268E76E45198005DE9BDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:08:81:eb:ad:cb:13:5d:5c:10:0e:c1:7c:
                    4c:87:54:51:d5:a5:56:99:93:bc:6f:20:8d:e0:76:
                    20:9b:69:ce:99:9f:1f:7b:6f:5c:80:d8:e8:87:2e:
                    40:e5:3d:51:81:ce:db:55:d4:c3:55:d2:6f:78:7c:
                    fc:c3:f8:15:d1:52:e2:9a:e5:78:62:06:7f:c9:4d:
                    54:78:ec:72:62:98:92:00:28:be:72:ee:d9:08:81:
                    57:15:d1:a3:16:50:6f:ac:03:fb:79:77:58:3a:d7:
                    5f:89:91:f2:67:b8:64:2a:91:d5:ee:08:47:71:a0:
                    af:d2:b9:3d:8c:11:38:20:05:89:de:50:82:ac:a4:
                    de:d4:6b:2f:70:62:1b:6a:a5:ca:47:ef:9b:85:df:
                    b7:b4:17:be:59:79:1f:97:47:d1:1a:c3:a2:bd:8b:
                    99:af:e8:ce:88:20:70:76:0d:0d:e4:8e:17:39:a6:
                    f6:6f:0e:3d:d7:35:1b:3b:d4:58:a9:77:63:9e:f4:
                    75:6f:06:ec:fe:de:37:04:2f:53:86:f8:b8:92:3e:
                    13:ac:d3:c7:57:fb:5e:6a:82:e3:08:a8:b0:03:03:
                    79:55:69:b9:a7:1c:38:94:9b:0b:d7:76:d4:74:bb:
                    b1:9b:c0:18:36:e4:0c:93:28:4e:ea:38:ac:a9:da:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:87:44:4C:BE:04:1F:E4:26:8E:76:E4:51:98:00:5D:E9:BD:EC
            X509v3 Authority Key Identifier:
                keyid:B1:08:11:E9:84:33:E4:0D:5F:C6:AF:C3:66:AA:6F:EE:28:17:23:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/B10811E98433E40D5FC6AFC366AA6FEE28172365.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B10811E98433E40D5FC6AFC366AA6FEE28172365.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fcfc2255-e4aa-43d0-899e-e44bacbb0321/0/3130332e3231382e3136362e302f32332d3234203d3e20313439333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:d5:40:b4:53:a7:b7:07:51:97:5e:68:09:0b:db:a1:19:
         38:89:a1:fb:4c:c4:88:90:b8:58:61:2e:11:79:9c:fd:42:ac:
         36:45:e3:1e:6b:a0:2c:75:ed:b9:5d:12:ca:d6:4c:f5:ff:c1:
         b8:98:e4:76:a3:38:1a:84:ec:82:e9:f0:a6:79:a2:c0:3c:7e:
         af:03:a2:51:a2:e2:95:05:23:e6:57:2f:42:26:dc:7a:51:04:
         c4:a2:1d:43:d1:9a:4b:22:3f:b2:80:08:3f:ec:a6:3b:b2:2d:
         13:28:17:8f:9b:7d:c8:56:4b:b5:34:bd:e8:9e:09:fc:a8:b2:
         b8:17:4a:a1:c7:b8:3f:7b:14:d7:f6:61:62:4d:1f:dd:7b:00:
         62:bf:a8:78:b4:56:a8:9c:e4:99:ac:9d:94:ad:6a:98:b7:fb:
         f3:f2:1f:97:01:2b:62:ec:3c:4c:3a:c1:4d:48:d9:ef:1a:4a:
         3e:84:11:28:32:40:3f:8a:74:c5:2f:d5:75:d1:6a:26:d7:cb:
         1b:34:fd:2e:91:b9:12:83:e9:95:a4:96:cc:22:c4:35:52:40:
         e2:be:26:fa:8f:57:f2:3e:3f:c4:5d:03:46:1c:40:09:1e:cc:
         3b:13:41:48:b2:38:f8:0a:54:13:e6:bd:2a:5b:fb:99:94:f3:
         cb:18:15:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 04:41:41 2026 by rpki-client