Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34372e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          8BxjP7wp2ny7XMMIeYWn2YhapQVIdzgBdHrT8RAE1hI=
Subject key identifier:   B5:90:E9:D6:82:5F:87:99:18:1E:C5:3E:F3:2C:A3:68:EA:58:D4:3A
Certificate issuer:       /CN=B9E54455BBADEE4051F79D907B7453E95F13B467
Certificate serial:       1D9F573F7341A2770C7C94EEB483A51E83D5AE3D
Authority key identifier: B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
Signing time:             Sun 03 May 2026 02:49:35 +0000
ROA not before:           Sun 03 May 2026 02:44:35 +0000
ROA not after:            Sun 02 May 2027 02:49:35 +0000
asID:                     23694
IP address blocks:        103.66.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl
                          rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 17:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9f:57:3f:73:41:a2:77:0c:7c:94:ee:b4:83:a5:1e:83:d5:ae:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E54455BBADEE4051F79D907B7453E95F13B467
        Validity
            Not Before: May  3 02:44:35 2026 GMT
            Not After : May  2 02:49:35 2027 GMT
        Subject: CN=B590E9D6825F8799181EC53EF32CA368EA58D43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:34:d8:3b:18:2d:3a:0a:19:b8:02:1e:ad:
                    88:b3:5a:1d:c1:d7:38:e8:af:7f:97:6c:c3:9b:18:
                    ee:6a:54:53:81:1c:5d:fc:f6:5e:2c:a4:21:eb:67:
                    75:ae:e3:d3:44:4c:9b:c6:ee:91:ba:3e:0f:9d:6c:
                    6f:fa:da:d9:c3:52:63:81:84:e9:84:b7:1a:dd:bd:
                    e8:a5:be:a9:e3:cf:0f:73:7d:47:45:72:07:fe:d1:
                    f9:f7:42:0b:6a:9e:4b:80:54:b6:2c:21:a9:44:14:
                    92:64:43:21:cd:b9:28:65:92:d1:b0:e3:47:d3:10:
                    26:d1:ac:08:17:64:83:4e:74:4d:4d:5e:30:36:de:
                    6e:4f:23:56:80:03:5b:e9:16:61:ca:a8:1e:95:0a:
                    f6:56:94:33:9f:3d:14:5c:2a:34:16:2f:71:2e:3e:
                    a4:15:03:6c:3b:43:1a:26:83:6f:da:7b:99:47:7a:
                    84:d5:bd:84:87:dc:97:e7:c3:be:1d:60:95:c6:0a:
                    5c:00:5a:9d:56:6c:52:35:44:f5:eb:e7:bc:60:96:
                    18:af:23:62:70:8f:3f:f5:18:53:f8:fe:e5:a4:b7:
                    3a:7b:3b:1b:4c:6f:52:85:d7:47:9d:6a:b5:83:c7:
                    66:5c:61:18:94:ff:6f:dd:3d:72:a8:87:b7:b9:38:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:90:E9:D6:82:5F:87:99:18:1E:C5:3E:F3:2C:A3:68:EA:58:D4:3A
            X509v3 Authority Key Identifier:
                keyid:B9:E5:44:55:BB:AD:EE:40:51:F7:9D:90:7B:74:53:E9:5F:13:B4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/B9E54455BBADEE4051F79D907B7453E95F13B467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9E54455BBADEE4051F79D907B7453E95F13B467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:f8:0d:4e:f6:ee:e6:8b:02:99:8b:70:89:60:e8:09:f8:
         f9:00:76:9d:03:ca:10:7b:af:20:44:a7:3a:8a:a8:73:03:49:
         d5:04:bf:aa:e2:76:d8:b1:92:e9:f9:a9:df:78:2e:9c:b5:97:
         17:12:25:ac:83:67:2a:13:1d:20:33:c8:87:e1:cf:10:23:fc:
         0c:1e:7f:ca:a1:09:3c:f7:b2:a9:88:b4:e3:9e:12:4d:11:5b:
         96:10:49:3b:6d:44:b9:88:d6:49:85:c8:1b:04:f5:6d:49:90:
         87:15:43:6a:52:6d:7f:41:ca:d3:8c:7a:d0:f6:cb:a9:8e:71:
         3b:89:17:7a:3d:f4:8a:67:a0:97:d4:c9:11:46:15:7c:c2:54:
         aa:0b:91:a3:d7:de:4a:e2:b8:a8:1b:cc:e0:7f:81:76:b6:8f:
         f9:fb:bf:92:18:7d:24:4b:9b:c3:2b:b4:5f:66:f4:fe:e9:10:
         c9:3f:f8:f8:1c:a3:1e:8e:2a:a6:40:70:87:43:05:db:76:2f:
         7a:50:56:22:f7:a8:e5:9e:26:09:42:a9:7a:45:03:12:19:01:
         a4:bf:8c:7a:e3:68:95:16:05:e7:62:0d:21:37:96:41:f2:b1:
         c2:4d:18:9b:e2:77:b3:b1:2a:a6:3d:0f:91:04:6e:49:6c:e6:
         9c:96:33:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:55 2026 by rpki-client