Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e31362e37382e302f32342d3234203d3e20313331373732.roa
File:                     3130332e31362e37382e302f32342d3234203d3e20313331373732.roa (raw, json)
Hash identifier:          3WQZvx1XPymzc9soyj43moQO8cyr3834Rj6M7pO3c1Q=
Subject key identifier:   B9:3F:53:1D:1B:07:A1:4A:43:F8:1F:9C:51:16:D2:16:3E:A8:6E:62
Certificate issuer:       /CN=4C020B9A7E561E4B66C4D84205960DF774E08E45
Certificate serial:       068F0004B958D2F180F8082076699C3893D2E12D
Authority key identifier: 4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e31362e37382e302f32342d3234203d3e20313331373732.roa
Signing time:             Tue 22 Sep 2026 14:13:34 +0000
ROA not before:           Tue 22 Sep 2026 14:08:34 +0000
ROA not after:            Tue 21 Sep 2027 14:13:34 +0000
asID:                     131772
IP address blocks:        103.16.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl
                          rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 17:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8f:00:04:b9:58:d2:f1:80:f8:08:20:76:69:9c:38:93:d2:e1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C020B9A7E561E4B66C4D84205960DF774E08E45
        Validity
            Not Before: Sep 22 14:08:34 2026 GMT
            Not After : Sep 21 14:13:34 2027 GMT
        Subject: CN=B93F531D1B07A14A43F81F9C5116D2163EA86E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c8:38:61:c5:df:42:f7:14:78:35:9b:5f:4d:
                    0a:aa:95:54:5e:ff:a5:9e:64:75:ab:20:16:b0:ec:
                    1b:b2:cf:23:d5:e3:8b:90:e2:47:ff:b8:09:31:5c:
                    33:9f:6d:ab:55:bc:c0:8e:ec:00:4c:46:1d:e8:ed:
                    c1:f4:5e:7e:9b:4e:24:78:ad:32:96:90:be:0f:ef:
                    f8:ab:ea:aa:c3:2f:4c:6e:38:a0:12:b1:ce:6a:77:
                    b0:6d:31:93:c1:c0:94:e9:1a:e7:47:b8:8b:38:48:
                    9b:be:17:38:fc:71:0a:41:6e:4f:a0:db:7e:29:1e:
                    5b:a8:29:c2:65:0e:de:f9:fa:07:91:2b:91:6d:b5:
                    b3:23:79:48:21:2b:b2:e3:0c:16:32:46:84:da:13:
                    77:9d:7c:30:07:91:c7:ce:a6:3e:98:36:96:ca:07:
                    22:e5:2b:ca:b8:cd:bd:29:ab:72:2c:f1:b4:9e:2b:
                    04:c8:be:de:66:ff:62:4a:21:80:79:a5:31:67:d9:
                    3e:6a:9a:e0:18:69:16:51:54:0a:c0:bd:d6:55:7a:
                    0b:7e:69:e7:d7:f6:80:99:7c:74:fa:56:5f:b7:c4:
                    b9:c3:2b:96:62:bf:d2:0a:5c:aa:11:eb:54:c5:ad:
                    9d:38:03:5a:2a:9e:49:27:93:43:fd:06:51:75:30:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3F:53:1D:1B:07:A1:4A:43:F8:1F:9C:51:16:D2:16:3E:A8:6E:62
            X509v3 Authority Key Identifier:
                keyid:4C:02:0B:9A:7E:56:1E:4B:66:C4:D8:42:05:96:0D:F7:74:E0:8E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/4C020B9A7E561E4B66C4D84205960DF774E08E45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C020B9A7E561E4B66C4D84205960DF774E08E45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2701f161-0808-4ab4-9608-65038f1eeb3a/0/3130332e31362e37382e302f32342d3234203d3e20313331373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:5e:1a:73:c6:9e:01:36:0a:27:3f:7e:48:df:8d:cc:68:
         43:a5:2e:67:47:80:da:46:ad:bd:d4:b5:db:2a:80:71:54:74:
         aa:9f:97:a1:11:86:10:ae:47:c2:92:38:dd:29:3b:0a:66:f9:
         d6:3c:d7:03:db:b0:ad:dc:e5:04:c8:14:48:94:21:6d:86:ee:
         44:2e:6b:03:a8:32:96:11:8f:81:33:71:38:c7:b1:8a:81:ff:
         9a:a5:9e:26:45:d7:a9:57:5d:56:44:fb:d5:d8:27:bd:2d:c9:
         37:e6:12:5c:82:aa:07:f0:35:e8:fc:b4:19:3e:35:24:d9:79:
         c4:e1:1c:92:46:8c:c1:39:1e:e0:9e:f6:5e:67:15:0d:07:82:
         26:f5:0f:c6:df:7e:fd:ff:9c:5e:c3:1b:67:e3:a4:42:39:a4:
         79:62:38:b8:1c:ff:ca:e9:57:60:69:3c:45:83:d7:33:2b:0e:
         ec:90:0c:1a:44:90:00:3c:a9:f1:af:ae:d7:ea:8c:21:c9:26:
         91:30:20:1b:a3:11:a1:29:8a:0d:33:71:76:50:b4:d7:4f:12:
         ff:97:a0:b2:5a:2e:bd:b2:eb:73:46:a0:c2:d0:f7:41:72:75:
         66:1e:17:81:29:a8:8b:c1:16:6a:15:66:bb:db:da:86:11:52:
         f7:7d:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:54 2026 by rpki-client