Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa
File:                     3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (raw, json)
Hash identifier:          WYsfpXuk+twMKamB2Cainkplei1Yhkq2SXWGKBJS4oo=
Subject key identifier:   3B:E4:83:87:3C:DE:E5:13:B8:55:81:7A:99:4E:6F:78:BC:22:20:0A
Certificate issuer:       /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
Certificate serial:       14126023437E981C428D24F6155D2FF1FC4448B7
Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa
Signing time:             Sun 03 May 2026 02:25:00 +0000
ROA not before:           Sun 03 May 2026 02:20:00 +0000
ROA not after:            Sun 02 May 2027 02:25:00 +0000
asID:                     141935
IP address blocks:        103.166.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl
                          rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:12:60:23:43:7e:98:1c:42:8d:24:f6:15:5d:2f:f1:fc:44:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E
        Validity
            Not Before: May  3 02:20:00 2026 GMT
            Not After : May  2 02:25:00 2027 GMT
        Subject: CN=3BE483873CDEE513B855817A994E6F78BC22200A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:73:37:21:03:cd:5b:f6:40:3d:c5:4a:fa:
                    74:7b:78:c4:6d:5e:c2:70:c5:d9:de:4f:a6:ff:f8:
                    5c:60:4c:87:53:d8:4c:af:32:bd:f7:52:0f:7f:e5:
                    91:36:2f:89:72:93:d5:e5:a7:b2:9b:e1:dd:14:c3:
                    c0:ae:93:74:f9:fb:d0:2f:ab:53:f4:8a:8e:c6:d5:
                    0f:75:14:1c:78:7b:5c:3d:2b:a0:b9:bd:4f:bd:c3:
                    ef:a4:9d:bb:08:93:41:b4:da:88:90:59:43:3e:39:
                    b1:89:93:92:34:62:99:71:ff:69:d2:89:27:28:22:
                    08:1f:d6:21:b3:da:5e:05:89:ea:fb:18:f0:70:12:
                    67:ab:6a:f1:5c:a3:ee:c1:9c:fc:cf:a6:30:ae:ea:
                    3b:db:bf:68:88:35:2e:11:99:93:52:4e:95:f9:9c:
                    7e:af:3a:38:2c:4c:51:b8:03:c3:e8:1f:b7:cf:9f:
                    f5:26:d2:90:77:7a:f0:7f:63:bc:9f:ba:b1:68:e7:
                    7d:c9:26:5d:1b:2f:49:ef:f1:1a:05:91:ea:ee:7b:
                    0a:dd:b0:46:e7:ea:ee:07:6f:11:80:e9:de:28:bc:
                    76:dd:14:f4:fa:1e:a1:06:a1:e0:68:89:80:eb:7f:
                    7d:f9:56:ba:8e:1e:9b:02:3a:b5:d4:27:a1:ac:0c:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:83:87:3C:DE:E5:13:B8:55:81:7A:99:4E:6F:78:BC:22:20:0A
            X509v3 Authority Key Identifier:
                keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:8c:c1:6e:3e:f5:44:b2:ff:b1:db:bf:87:58:5e:b3:93:
         5e:7a:9d:be:8d:6a:99:89:f2:90:d1:7a:37:09:d4:48:71:91:
         a4:b5:cc:87:e1:62:45:ca:78:b2:a5:c2:3b:f3:17:4c:eb:f3:
         32:3a:a4:2c:c6:5c:73:3f:70:08:e4:f0:bf:a1:ec:b1:50:d5:
         60:16:24:2e:5b:3f:fc:bf:72:37:5d:a7:16:30:a3:28:83:64:
         86:1a:9b:3b:64:8e:b4:6e:29:6f:29:0d:e4:8c:5a:6f:a9:50:
         81:66:35:70:d6:9a:50:27:a7:0b:cc:2d:da:dc:31:36:84:d0:
         e6:7c:f9:2a:97:0c:08:3a:2b:61:aa:51:76:47:63:84:20:b8:
         4b:b9:a6:43:de:5f:99:84:1f:db:6f:55:15:ca:d3:c6:9e:74:
         d7:6d:c9:c0:79:90:2a:05:f2:ee:ed:51:f4:6d:10:89:68:e9:
         65:18:0f:5c:f9:83:a2:26:4c:07:7e:51:68:68:a9:db:45:c1:
         a1:1f:02:b8:76:dd:49:39:af:ba:da:a2:fe:0e:b4:55:be:5c:
         a4:5e:2f:51:ed:38:43:c5:76:fb:e5:a7:f6:57:94:7a:02:bc:
         05:76:5d:72:4c:9a:34:fc:60:00:70:51:0d:bf:96:79:6b:ea:
         6f:a0:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:17 2026 by rpki-client