Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa
File:                     3130332e36362e33362e302f32342d3234203d3e20313530323233.roa (raw, json)
Hash identifier:          cbw+qMwfHCXDiTnr7sY/MlfwfCUda213WDrCyTfAh4Y=
Subject key identifier:   80:3E:1C:F8:94:5C:40:4D:A6:E2:C8:44:F8:0A:64:3F:F5:29:24:5A
Certificate issuer:       /CN=71468BECC53B96325385ED8BB32F3639F1F5E487
Certificate serial:       31DDAAE05BB430C8FF6E41879064E25646BCA759
Authority key identifier: 71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa
Signing time:             Sun 03 May 2026 02:33:22 +0000
ROA not before:           Sun 03 May 2026 02:28:22 +0000
ROA not after:            Sun 02 May 2027 02:33:22 +0000
asID:                     150223
IP address blocks:        103.66.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl
                          rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:dd:aa:e0:5b:b4:30:c8:ff:6e:41:87:90:64:e2:56:46:bc:a7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71468BECC53B96325385ED8BB32F3639F1F5E487
        Validity
            Not Before: May  3 02:28:22 2026 GMT
            Not After : May  2 02:33:22 2027 GMT
        Subject: CN=803E1CF8945C404DA6E2C844F80A643FF529245A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:c5:9d:ce:bf:df:48:00:1f:ea:d8:6d:d6:
                    59:c1:6e:48:cb:6a:fc:bb:e3:45:ad:17:1d:38:af:
                    c5:73:b4:23:35:64:5c:f6:03:ef:4a:da:e7:66:8c:
                    69:8b:0c:47:ae:7a:f8:63:d7:45:d6:10:2e:50:3a:
                    f5:96:8b:72:01:37:2b:4f:17:5a:c0:29:a7:fb:ce:
                    7f:03:c2:82:49:f8:1d:4b:63:e1:5f:11:fd:6b:a6:
                    7a:8a:6a:85:82:b6:fd:29:d3:d1:12:34:8b:84:f7:
                    1e:b1:9f:66:64:e2:03:dd:47:6a:4b:90:80:27:67:
                    0e:9f:68:b5:f5:54:72:2c:3d:02:a8:9a:6d:5c:32:
                    7d:9b:ee:5f:bc:41:bc:80:01:1c:df:53:50:1c:ee:
                    75:d9:e3:76:74:9c:ad:03:f7:01:2b:31:db:55:a2:
                    12:30:87:e4:b1:bc:ff:b9:c9:50:f2:a5:08:cf:bc:
                    a5:cb:29:76:07:97:c2:24:cc:ee:73:cb:d7:63:02:
                    f3:ef:77:60:66:21:34:81:d1:90:6d:a4:55:17:f7:
                    60:ef:c6:d8:d3:e3:6f:16:b0:0e:39:b1:61:ab:c0:
                    33:87:2f:8b:9b:33:fc:d4:a1:6f:c6:30:92:b8:62:
                    c6:ad:83:28:5f:0c:54:11:a6:4c:9f:43:ff:5b:03:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3E:1C:F8:94:5C:40:4D:A6:E2:C8:44:F8:0A:64:3F:F5:29:24:5A
            X509v3 Authority Key Identifier:
                keyid:71:46:8B:EC:C5:3B:96:32:53:85:ED:8B:B3:2F:36:39:F1:F5:E4:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/71468BECC53B96325385ED8BB32F3639F1F5E487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/71468BECC53B96325385ED8BB32F3639F1F5E487.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/52dbd785-6bca-493b-8a65-3b5277007fed/0/3130332e36362e33362e302f32342d3234203d3e20313530323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:b3:7c:98:ee:d6:63:89:ef:55:da:c0:b2:22:dd:a1:96:
         36:94:ba:f3:8a:92:1e:78:7d:89:26:8c:f0:1e:bd:9f:1f:d9:
         f9:50:d6:17:84:0a:5a:07:1f:9b:c1:6c:97:30:52:01:5e:63:
         4c:c8:9a:9d:c6:7f:2b:ae:40:27:90:71:92:de:69:96:d7:48:
         3e:8e:1b:06:39:55:8d:60:af:06:f7:d3:13:8c:26:a8:85:9f:
         06:61:3c:6d:8b:05:c9:1c:f7:ab:7e:8f:fb:41:34:fb:e9:4b:
         d8:72:0d:63:82:2c:70:6c:dd:bb:17:9c:a8:79:eb:ec:00:9f:
         5e:5b:b4:d2:57:38:aa:03:30:f8:c4:1a:55:30:5f:93:d3:74:
         6d:ca:9e:94:ba:6d:d2:ed:64:96:bf:5d:ca:b5:31:a3:c6:d5:
         99:8a:01:0f:84:86:28:89:dc:07:da:a5:1d:64:fe:dd:d0:e1:
         a8:ec:1a:62:33:f1:75:2f:63:ca:ac:f3:b9:7f:f1:af:d6:94:
         e4:a0:c3:cb:b2:07:a7:a7:cb:a1:92:c8:ee:08:2a:2a:45:4d:
         59:38:10:6f:ec:73:80:2c:1e:06:a4:e7:d8:a7:a3:13:b3:68:
         ba:f5:69:18:01:93:0d:04:30:2a:9a:25:e5:8b:bf:f6:e6:55:
         55:7b:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:47:29 2026 by rpki-client