Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34362e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          UedpVAHn21ooqLw8ovvpIgJ1soqSurJAxq23sQ+qlfw=
Subject key identifier:   2E:61:23:BD:36:4D:98:3E:E7:3C:C7:55:0D:91:E0:86:57:CB:4F:BB
Certificate issuer:       /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial:       18C526CC48A5D5C3C942900C3E90ED976202D1CA
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
Signing time:             Sun 03 May 2026 02:49:36 +0000
ROA not before:           Sun 03 May 2026 02:44:36 +0000
ROA not after:            Sun 02 May 2027 02:49:36 +0000
asID:                     23694
IP address blocks:        103.66.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
                          rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c5:26:cc:48:a5:d5:c3:c9:42:90:0c:3e:90:ed:97:62:02:d1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
        Validity
            Not Before: May  3 02:44:36 2026 GMT
            Not After : May  2 02:49:36 2027 GMT
        Subject: CN=2E6123BD364D983EE73CC7550D91E08657CB4FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:fc:f1:43:e2:e6:c4:65:8b:c7:b4:11:1c:
                    b9:2a:1d:cf:36:1d:49:70:6d:6f:8e:b0:c2:30:0d:
                    18:ed:f6:8d:4d:f1:b5:b5:f3:09:a2:15:ec:e2:72:
                    6a:ba:57:44:c0:6e:6b:8b:a9:18:cd:b9:21:6f:b6:
                    8a:26:d5:06:94:c4:23:2f:27:b8:45:e2:ae:32:05:
                    b4:bf:cd:00:e6:cd:5f:a9:f9:31:09:68:ae:3a:5f:
                    9f:6e:57:94:72:1d:c0:09:d8:1e:15:86:49:ca:f9:
                    98:ba:0f:2c:ed:d6:06:0a:62:cb:58:04:ba:f4:3d:
                    e7:7d:91:99:88:45:50:52:fa:24:95:4c:88:fe:80:
                    69:f2:9d:b8:91:a2:0e:e2:f1:b4:b8:9c:a5:a4:a2:
                    2b:8f:ac:87:9b:98:87:f8:99:c0:54:ca:ef:e5:3d:
                    c2:41:7b:86:87:cb:73:f8:f9:40:92:7b:ce:be:f6:
                    ff:dc:32:dd:08:e1:cf:bf:d1:63:48:c5:1a:73:b6:
                    d6:3e:2a:7b:41:ca:ec:eb:29:0d:f7:7a:cb:3e:1f:
                    e4:3f:30:61:b0:26:aa:81:4a:63:a6:17:07:d7:85:
                    a6:69:4b:fb:51:18:a7:48:1d:17:90:97:d6:c6:a6:
                    b4:ab:d7:f9:9e:87:81:42:ff:17:dc:6d:c7:ee:27:
                    ca:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:23:BD:36:4D:98:3E:E7:3C:C7:55:0D:91:E0:86:57:CB:4F:BB
            X509v3 Authority Key Identifier:
                keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:47:56:87:4a:47:af:8f:58:c0:40:f3:ab:1c:58:62:34:88:
         6b:78:7c:6d:58:18:23:8c:da:df:27:68:3f:87:32:2d:83:11:
         58:86:94:fa:62:36:b8:d3:72:d3:81:50:99:92:cb:6e:bd:78:
         0c:cf:4a:d0:9c:ec:f9:f4:d4:3e:7e:23:07:f2:00:e5:e0:dd:
         0a:ba:4d:13:64:d4:3d:d4:41:a2:e8:1a:4b:1e:4b:f8:17:5c:
         98:20:f2:f6:ea:92:75:02:19:8b:54:4a:a0:66:cc:77:4b:e0:
         80:a6:fc:4d:be:99:88:98:ca:51:a0:e0:a4:0d:e2:37:36:3f:
         d8:d4:9f:15:a5:57:f4:13:93:af:2c:f0:c1:59:bc:d5:58:09:
         bc:92:15:b7:50:41:50:e9:fc:ed:72:06:8f:ea:6f:f7:ac:a2:
         a7:7f:c8:e8:69:72:68:8f:f6:c8:f7:35:41:a9:13:07:05:3c:
         04:77:d0:30:1e:be:fd:42:d7:e7:b9:24:13:5a:04:8a:8d:a8:
         2a:4c:96:2d:04:51:27:9f:3e:aa:3f:df:b7:a7:d4:77:a6:9b:
         f2:52:89:de:7e:5d:97:6f:e9:05:fe:8b:5f:cb:2a:4c:12:66:
         16:c6:3e:d9:0e:0e:6a:a4:d1:1b:55:f5:3f:d3:70:63:60:8c:
         21:f2:cb:9d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGMUmzEil1cPJQpAMPpDtl2IC0cowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFNTQ0NTVCQkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1
RjEzQjQ2NzAeFw0yNjA1MDMwMjQ0MzZaFw0yNzA1MDIwMjQ5MzZaMDMxMTAvBgNV
BAMTKDJFNjEyM0JEMzY0RDk4M0VFNzNDQzc1NTBEOTFFMDg2NTdDQjRGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4O/zxQ+LmxGWLx7QRHLkqHc82
HUlwbW+OsMIwDRjt9o1N8bW18wmiFezicmq6V0TAbmuLqRjNuSFvtoom1QaUxCMv
J7hF4q4yBbS/zQDmzV+p+TEJaK46X59uV5RyHcAJ2B4VhknK+Zi6Dyzt1gYKYstY
BLr0Ped9kZmIRVBS+iSVTIj+gGnynbiRog7i8bS4nKWkoiuPrIebmIf4mcBUyu/l
PcJBe4aHy3P4+UCSe86+9v/cMt0I4c+/0WNIxRpzttY+KntByuzrKQ33ess+H+Q/
MGGwJqqBSmOmFwfXhaZpS/tRGKdIHReQl9bGprSr1/meh4FC/xfcbcfuJ8rRAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQULmEjvTZNmD7nPMdVDZHghlfLT7swHwYDVR0j
BBgwFoAUueVEVbut7kBR952Qe3RT6V8TtGcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
OGI0Zjg1MTEtMDdiMy00YTYxLWJkMDQtMmU2NjVjOTI3OGZjLzAvQjlFNTQ0NTVC
QkFERUU0MDUxRjc5RDkwN0I3NDUzRTk1RjEzQjQ2Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9COUU1NDQ1NUJCQURFRTQwNTFGNzlEOTA3Qjc0NTNFOTVGMTNC
NDY3LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzhiNGY4NTExLTA3YjMtNGE2MS1i
ZDA0LTJlNjY1YzkyNzhmYy8wLzMxMzAzMzJlMzYzNjJlMzQzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzMzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnQi4wDQYJKoZIhvcN
AQELBQADggEBAEZHVodKR6+PWMBA86scWGI0iGt4fG1YGCOM2t8naD+HMi2DEViG
lPpiNrjTctOBUJmSy269eAzPStCc7Pn01D5+IwfyAOXg3Qq6TRNk1D3UQaLoGkse
S/gXXJgg8vbqknUCGYtUSqBmzHdL4ICm/E2+mYiYylGg4KQN4jc2P9jUnxWlV/QT
k68s8MFZvNVYCbySFbdQQVDp/O1yBo/qb/esoqd/yOhpcmiP9sj3NUGpEwcFPAR3
0DAevv1C1+e5JBNaBIqNqCpMli0EUSefPqo/37en1Hemm/JSid5+XZdv6QX+i1/L
KkwSZhbGPtkODmqk0RtV9T/TcGNgjCHyy50=
-----END CERTIFICATE-----
Generated at Wed May 13 05:25:53 2026 by rpki-client