Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
File:                     3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (raw, json)
Hash identifier:          axp2eq8WjJ3oyW6DrRyrSevP2DkGuYbEvHXLlB0V2P0=
Subject key identifier:   AA:2E:8F:32:8A:DF:00:CB:2D:DA:98:55:65:F8:5C:C8:B3:90:91:99
Certificate issuer:       /CN=B9306D640F988742BB1CB2B19AB9D729636922A3
Certificate serial:       7DFC1473FC47F09CA3C2E3B11CDF1DB03E3F34B1
Authority key identifier: B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa
Signing time:             Sun 03 May 2026 02:24:48 +0000
ROA not before:           Sun 03 May 2026 02:19:48 +0000
ROA not after:            Sun 02 May 2027 02:24:48 +0000
asID:                     150241
IP address blocks:        103.66.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl
                          rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:fc:14:73:fc:47:f0:9c:a3:c2:e3:b1:1c:df:1d:b0:3e:3f:34:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9306D640F988742BB1CB2B19AB9D729636922A3
        Validity
            Not Before: May  3 02:19:48 2026 GMT
            Not After : May  2 02:24:48 2027 GMT
        Subject: CN=AA2E8F328ADF00CB2DDA985565F85CC8B3909199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:f9:52:12:43:4b:f3:20:01:44:04:1b:7a:
                    0b:42:45:45:5e:93:b0:cb:a8:8c:11:19:79:11:94:
                    bf:ff:19:90:e7:40:60:65:52:ae:5c:ff:ce:9e:56:
                    8a:2a:86:f9:7a:cc:c2:69:a2:8c:38:55:49:8b:bb:
                    dc:55:16:e1:93:6b:79:12:e2:50:c3:26:9a:6d:25:
                    30:2a:3e:9c:32:3c:ce:e3:09:e8:8f:1e:fa:f2:62:
                    0e:9d:46:7d:2d:d7:53:46:bd:76:6c:0e:02:98:88:
                    b3:91:13:5a:8b:81:06:e4:24:b6:da:a3:b3:e0:2f:
                    67:85:9f:55:17:ab:55:a9:a0:d1:28:89:5d:50:a3:
                    f0:5e:24:50:43:a7:e8:29:a1:88:6f:d4:de:e3:56:
                    f0:4c:4b:b2:d8:9f:c6:fb:0d:f8:ef:04:8d:18:5a:
                    a2:df:43:fb:76:b2:0a:ab:b1:10:bd:2e:99:d6:53:
                    71:65:43:d7:64:79:94:a7:98:8f:af:a3:9a:4d:8f:
                    0d:37:24:c8:85:cf:ef:ff:1d:1a:4f:fc:5c:3a:9a:
                    f6:98:01:33:37:e2:d9:a2:e0:38:05:74:04:77:19:
                    c0:e0:86:57:61:8c:d4:5f:6a:4f:73:ba:a5:ed:3b:
                    e3:a5:6b:de:f0:42:57:e9:c9:31:14:d7:c2:13:4f:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:8F:32:8A:DF:00:CB:2D:DA:98:55:65:F8:5C:C8:B3:90:91:99
            X509v3 Authority Key Identifier:
                keyid:B9:30:6D:64:0F:98:87:42:BB:1C:B2:B1:9A:B9:D7:29:63:69:22:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/B9306D640F988742BB1CB2B19AB9D729636922A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9306D640F988742BB1CB2B19AB9D729636922A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/3130332e36362e33382e302f32342d3234203d3e20313530323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:2e:ad:07:98:0e:c7:a0:77:fb:df:16:21:93:17:ca:41:15:
         4f:18:0d:6d:ab:54:89:b1:21:62:25:b6:44:2e:9b:08:71:39:
         14:6e:f8:d7:31:55:27:0b:5b:48:ac:14:6a:1a:eb:90:42:62:
         4f:41:d1:d4:bc:d7:00:9c:09:a3:3f:b7:aa:1a:aa:c1:4c:b5:
         03:ba:77:47:dc:cd:86:9b:8e:64:49:f5:2c:8c:9e:54:62:35:
         00:d0:0e:17:6e:36:f9:26:aa:f6:ef:45:b7:15:61:16:74:6d:
         bc:9f:55:46:58:22:c3:54:40:2d:46:2c:12:4d:35:88:b4:f9:
         0b:f4:da:3c:70:f0:73:09:41:a6:e3:12:68:91:40:49:83:56:
         cb:21:c4:fe:07:23:c3:6f:ce:15:da:0d:bc:53:f0:4a:49:9c:
         1e:dd:e8:27:cb:cb:2f:42:7e:24:65:fc:1b:6c:d9:99:30:05:
         85:f7:69:49:8e:2d:5e:65:de:3b:3e:cb:a5:94:a9:12:42:83:
         bf:5f:de:c0:2a:e6:85:c9:66:87:8a:e4:2d:7f:1b:92:4e:66:
         75:43:e1:ab:af:80:1e:73:76:bf:0b:3e:c1:53:f3:00:53:49:
         83:3b:95:95:b3:4d:63:50:a6:eb:a1:24:68:ee:f3:3c:95:78:
         ff:e5:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:38 2026 by rpki-client