Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa
File:                     3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=
Subject key identifier:   9C:A5:59:E1:E0:35:41:6A:5D:4F:D5:90:E9:0A:C7:E1:75:6C:80:66
Certificate issuer:       /CN=87D1485E2D8D59808482A339E96F7B631508F371
Certificate serial:       353895622BE3D44B6899DE7BED2EE3EE82D848C3
Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa
Signing time:             Sun 03 May 2026 02:56:04 +0000
ROA not before:           Sun 03 May 2026 02:51:04 +0000
ROA not after:            Sun 02 May 2027 02:56:04 +0000
asID:                     141630
IP address blocks:        103.66.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
                          rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:38:95:62:2b:e3:d4:4b:68:99:de:7b:ed:2e:e3:ee:82:d8:48:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371
        Validity
            Not Before: May  3 02:51:04 2026 GMT
            Not After : May  2 02:56:04 2027 GMT
        Subject: CN=9CA559E1E035416A5D4FD590E90AC7E1756C8066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:b2:be:3c:32:5f:83:ee:0d:a1:71:88:bf:
                    06:a7:b5:31:f4:4c:4b:97:8c:20:c3:da:53:7f:c3:
                    ad:dd:93:88:67:eb:5a:aa:5c:5f:f4:e9:ba:c5:de:
                    e5:23:c1:0b:b5:6b:1c:6a:98:41:4b:6a:7d:89:7a:
                    1d:ae:0b:51:09:a8:e9:0b:e0:ad:e5:85:f7:48:65:
                    19:f3:b7:1a:d5:4d:67:56:c0:43:17:99:75:ba:59:
                    91:aa:f5:ab:18:be:20:8e:45:02:3b:a6:0b:17:2c:
                    f2:cf:da:dc:e1:28:7a:a4:b7:e4:b8:b2:ad:3b:9f:
                    f6:b4:d0:1d:ef:ec:8d:92:ab:17:65:da:aa:88:26:
                    5e:a0:55:60:eb:f0:ef:56:bb:60:58:5e:b2:8f:20:
                    bd:ed:de:67:6d:81:71:a4:67:b8:94:05:18:18:fc:
                    7e:1e:40:c0:e1:f9:7d:fa:28:42:31:1e:09:c7:5c:
                    4d:14:bf:38:60:b4:12:04:9d:ab:86:56:00:2e:57:
                    3a:1e:c3:d6:03:d5:d4:29:63:4d:ea:46:72:86:66:
                    9e:6a:d9:ad:e6:57:59:f7:df:9b:24:08:57:58:26:
                    b3:c7:61:f0:a3:12:02:77:d3:e8:8c:56:5a:fa:24:
                    6f:65:a4:f9:04:c0:eb:6f:b2:89:e3:f7:e3:85:ab:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:59:E1:E0:35:41:6A:5D:4F:D5:90:E9:0A:C7:E1:75:6C:80:66
            X509v3 Authority Key Identifier:
                keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/3130332e36362e36382e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:e1:22:fe:e6:64:5e:79:3a:54:ba:7e:29:aa:eb:76:b6:
         d0:2b:82:1c:26:7a:73:00:06:2c:d0:52:67:ba:bb:b9:50:ad:
         3e:71:a7:37:26:e8:23:f0:78:be:3a:50:37:45:f6:ea:75:29:
         f8:1c:9d:9a:c8:27:e1:fc:d9:c4:ca:f6:d8:9b:82:93:70:75:
         d8:15:b6:5d:d3:44:67:2f:a5:59:72:bb:ab:5a:3d:a1:a9:62:
         c4:68:54:c3:d7:75:c9:39:c1:2a:6b:ce:ee:31:6a:66:1f:1e:
         24:6e:cf:34:de:c0:37:36:34:1d:c2:fe:a4:b2:7a:df:fc:7b:
         fa:96:75:0b:af:47:79:93:3f:94:aa:f3:91:ec:be:b6:dd:be:
         d7:38:7a:d0:0b:6e:3a:fb:f4:25:a1:8a:d6:ac:4b:6d:97:67:
         7d:5e:ba:2e:4d:86:64:95:a8:b3:4f:ed:7a:1c:33:57:f6:98:
         6a:29:d9:c5:87:2a:d7:78:e8:86:16:b1:93:77:a2:c5:82:70:
         b9:35:ee:7f:ac:59:eb:de:b9:8c:37:c3:e4:fd:06:f4:3b:f3:
         16:73:e2:f2:f6:70:2e:9b:3e:e4:12:c7:ad:f8:da:75:f7:00:
         ba:20:0e:83:f4:c3:98:b7:f4:1b:5c:04:4e:cf:0d:64:6b:2f:
         2e:cd:8c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:13 2026 by rpki-client