Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
File:                     3130332e36362e34362e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier:          wr2AUAIBj15wOmk+O8JERfUGMC5W1ujwy25yjBMhvGA=
Subject key identifier:   33:72:FE:7C:72:E9:1F:2D:35:DF:EE:08:8D:DB:97:FF:CB:6A:AB:AD
Certificate issuer:       /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial:       63D0075879171BDC36047EA527E9C9E6FBEE01FD
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
Signing time:             Sun 03 May 2026 02:49:36 +0000
ROA not before:           Sun 03 May 2026 02:44:36 +0000
ROA not after:            Sun 02 May 2027 02:49:36 +0000
asID:                     23694
IP address blocks:        103.66.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
                          rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d0:07:58:79:17:1b:dc:36:04:7e:a5:27:e9:c9:e6:fb:ee:01:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
        Validity
            Not Before: May  3 02:44:36 2026 GMT
            Not After : May  2 02:49:36 2027 GMT
        Subject: CN=3372FE7C72E91F2D35DFEE088DDB97FFCB6AABAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:c3:35:01:d5:84:a0:5c:99:a8:6d:60:26:
                    19:16:f3:76:d5:b0:c3:79:f3:76:1d:8a:7e:e1:23:
                    5c:29:6f:46:a1:b9:b6:90:a8:88:9a:04:1f:70:d1:
                    ff:7b:fb:4c:fd:b3:b7:6d:ba:a3:a0:ab:61:2f:b4:
                    a5:20:46:90:0c:26:06:09:51:9e:dd:60:f3:e4:40:
                    bd:8b:71:4d:ea:c7:8b:84:10:89:76:9b:a1:a4:c1:
                    ba:7f:cc:9b:a3:b8:48:ee:fd:83:dc:b5:25:54:1c:
                    e5:46:73:3f:fb:b7:5e:7f:35:69:4f:cb:1f:b6:45:
                    75:48:10:ae:2d:7e:cc:0d:fc:da:c6:fa:be:58:eb:
                    7c:3e:a4:43:38:4e:a3:69:51:e4:43:97:7b:1c:4b:
                    c5:e5:c9:e1:aa:48:92:99:5b:72:e7:6e:9c:85:a6:
                    3a:5d:04:42:71:97:62:4c:7e:8b:ef:7e:8f:85:35:
                    88:f1:63:29:3e:04:0b:b2:37:7a:08:d0:22:c2:0c:
                    9d:e7:c9:cf:3e:d6:76:a0:14:70:5d:f0:0d:36:d0:
                    fd:26:cc:bc:ce:59:54:a7:dd:ab:c0:51:1e:41:a0:
                    c1:87:3d:bc:07:14:cb:35:52:11:96:b9:5e:02:6f:
                    c5:10:76:94:16:ca:28:9c:58:5d:6e:d8:87:78:d6:
                    ea:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:72:FE:7C:72:E9:1F:2D:35:DF:EE:08:8D:DB:97:FF:CB:6A:AB:AD
            X509v3 Authority Key Identifier:
                keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:52:b3:82:00:9b:36:08:03:39:9e:9d:29:e6:7e:87:78:47:
         08:d9:08:1b:52:d4:48:19:08:62:0c:56:7e:bf:68:af:38:1b:
         4f:8d:c9:80:2d:66:45:c8:79:d5:fe:57:6a:56:93:2d:d5:03:
         76:21:d9:36:e0:c6:84:d8:30:a1:a9:ee:25:b8:b0:02:fe:21:
         96:49:66:2f:e9:80:be:23:eb:19:93:06:d4:8b:79:17:46:d5:
         5e:04:52:45:62:7e:53:75:89:d7:40:e5:d0:10:4f:43:aa:7b:
         44:49:35:3e:21:64:6b:d2:25:35:42:b4:87:48:cb:1c:15:34:
         52:df:27:19:a6:08:59:62:92:80:b8:ca:2f:4e:24:b6:70:6b:
         c1:66:27:c6:9d:40:7d:89:a2:55:02:25:15:fd:69:dc:2b:26:
         1a:87:ca:17:90:aa:3b:57:b9:6f:39:58:35:1b:66:af:d0:52:
         92:d8:b3:95:bc:7c:d5:e6:25:a3:8d:06:73:4f:3f:30:ee:dd:
         1e:22:b7:81:05:96:04:00:f0:17:cf:76:dd:e8:3d:60:9b:ae:
         66:2f:65:66:2e:5d:00:f7:ab:f2:83:da:ca:ec:22:7a:53:53:
         1b:d6:5d:9a:a6:09:dc:8e:13:b9:6b:ec:6f:f6:b1:b3:b0:7a:
         81:5f:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:01 2026 by rpki-client