Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa
File:                     3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (raw, json)
Hash identifier:          ISamzj2GyfxCZEAngxKx/usD8wbe2PFgnEt/8aD0w6g=
Subject key identifier:   2E:75:06:A9:B5:BE:F3:7A:DD:E7:EA:19:A8:DF:39:E1:34:B5:22:60
Certificate issuer:       /CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
Certificate serial:       1B8BD6970742026E36E636F8A9FFE9A49737C42B
Authority key identifier: 27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa
Signing time:             Sun 03 May 2026 02:29:40 +0000
ROA not before:           Sun 03 May 2026 02:24:40 +0000
ROA not after:            Sun 02 May 2027 02:29:40 +0000
asID:                     149670
IP address blocks:        103.184.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl
                          rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8b:d6:97:07:42:02:6e:36:e6:36:f8:a9:ff:e9:a4:97:37:c4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A02CA4FEB6B2D7C98BE15935226321BC5082C3
        Validity
            Not Before: May  3 02:24:40 2026 GMT
            Not After : May  2 02:29:40 2027 GMT
        Subject: CN=2E7506A9B5BEF37ADDE7EA19A8DF39E134B52260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:ad:51:05:b5:eb:37:9c:41:6a:3e:6e:47:
                    e6:e5:33:c9:c7:5f:bf:e6:2e:20:ae:fd:91:83:1b:
                    fc:0d:6b:4e:67:4b:81:ef:12:72:2f:db:1b:77:d6:
                    8f:83:74:5a:8a:62:6e:15:ed:5f:7b:c4:87:6a:1b:
                    a4:0c:40:66:d0:8a:16:5e:25:96:d3:9a:fb:93:cc:
                    35:17:a7:8b:f3:8e:2a:8d:6f:a8:54:4b:c8:6f:10:
                    67:ef:32:2a:f3:a4:b4:2b:da:53:e3:9c:a2:ed:6e:
                    1f:26:46:16:eb:8c:d2:32:82:65:22:f0:3e:0b:f1:
                    6c:cc:6a:ba:7c:a8:dc:4d:64:bf:dc:22:75:88:90:
                    59:c7:c1:f8:64:a8:2e:2c:5b:0f:76:fe:97:a2:63:
                    a2:54:da:24:82:44:bd:69:e8:97:d7:23:4e:c7:97:
                    29:74:ed:ae:5d:f3:03:83:41:c6:4d:7e:1c:90:5d:
                    4a:70:55:14:34:81:2b:05:88:60:79:93:e8:97:d9:
                    90:e7:85:d7:ea:53:c6:3d:6f:b3:32:f0:d8:90:8b:
                    ca:f4:25:3b:fd:f1:6f:a8:04:1d:1a:ae:38:f3:b6:
                    0c:98:e9:86:e0:c4:16:64:a4:4a:d6:e1:e8:d3:56:
                    b6:92:06:87:ff:90:98:53:81:5b:3a:d8:b1:e2:45:
                    6a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:75:06:A9:B5:BE:F3:7A:DD:E7:EA:19:A8:DF:39:E1:34:B5:22:60
            X509v3 Authority Key Identifier:
                keyid:27:A0:2C:A4:FE:B6:B2:D7:C9:8B:E1:59:35:22:63:21:BC:50:82:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/27A02CA4FEB6B2D7C98BE15935226321BC5082C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:c4:2a:b4:86:3e:c1:2a:be:04:eb:a9:48:6d:94:ab:94:
         c9:3d:88:1d:90:52:03:a9:ad:15:1f:79:ca:49:b7:11:13:e9:
         f5:7c:0f:2d:ac:03:53:50:e9:c6:fe:13:82:0f:c7:b9:fe:8b:
         10:81:ac:69:c5:a8:c2:0a:33:ff:c0:67:91:45:02:9a:c8:8b:
         f5:67:f0:78:a5:1b:a0:10:fe:80:6a:e4:e7:97:38:c3:00:da:
         dd:0b:8e:22:9e:b7:dd:04:5c:ad:99:48:c2:d4:5b:99:f8:70:
         f8:c3:ba:13:fe:df:f4:8d:be:16:94:87:ee:81:d3:2c:e0:63:
         ef:93:69:a8:97:15:95:3d:77:bb:d0:7b:c0:13:c8:22:c0:35:
         d9:87:87:c3:e9:c1:4a:b4:9e:ff:a7:89:19:66:b8:50:aa:8f:
         7f:83:8b:8f:9d:13:f9:be:35:a8:d6:fb:21:9b:ba:3a:c0:06:
         93:1a:cf:8a:73:99:37:b1:01:da:16:be:37:19:0c:d5:36:a3:
         35:ff:28:ad:4a:b6:16:71:9c:f4:00:17:d5:32:22:77:8d:6b:
         a1:46:96:92:c8:11:fa:f6:95:64:97:ed:95:cc:e7:f0:b9:bf:
         57:4a:19:40:60:f5:62:8c:4f:59:de:01:5d:38:f1:a7:90:26:
         d7:f5:6d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:52 2026 by rpki-client