Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa
File:                     3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          DKDIZFIIa7OPxQWCaUBiuhGDeGm6kz/UIChkAD3FgzA=
Subject key identifier:   81:F6:B6:7F:AD:5B:DA:73:43:33:63:FB:E0:44:1D:C3:46:7D:77:DE
Certificate issuer:       /CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
Certificate serial:       7E660F44E265994CCE8D11E3A74A76D2A7AD9334
Authority key identifier: 9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa
Signing time:             Sun 03 May 2026 03:03:04 +0000
ROA not before:           Sun 03 May 2026 02:58:04 +0000
ROA not after:            Sun 02 May 2027 03:03:04 +0000
asID:                     45312
IP address blocks:        103.134.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl
                          rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:66:0f:44:e2:65:99:4c:ce:8d:11:e3:a7:4a:76:d2:a7:ad:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9D4BDD4311519F6A96141040EA1E98B3363388
        Validity
            Not Before: May  3 02:58:04 2026 GMT
            Not After : May  2 03:03:04 2027 GMT
        Subject: CN=81F6B67FAD5BDA73433363FBE0441DC3467D77DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:c0:08:51:df:5d:9b:1a:0b:b7:89:be:f3:
                    41:32:a7:44:b1:8b:92:b6:e7:dd:a4:53:6c:a1:ef:
                    c4:55:1b:44:4b:09:09:c6:a0:3d:66:f0:3b:bb:49:
                    08:8e:de:70:6b:d2:f8:5e:8a:99:e0:0c:80:69:c5:
                    49:59:16:15:93:75:7f:a9:f6:72:95:1f:5e:4b:0b:
                    dc:f5:40:88:ad:4e:ea:ea:ad:bc:76:7a:f8:dc:9d:
                    0b:af:2c:a7:f5:3b:6c:22:22:63:f4:51:5a:12:f6:
                    80:02:37:5e:ff:e6:37:a7:6b:ed:db:6f:37:7d:11:
                    30:b1:74:f8:6a:9e:e5:4b:58:9e:46:c4:db:17:e0:
                    bd:67:8d:ca:30:13:b2:35:c6:ee:a9:67:85:02:e7:
                    c6:ca:f8:15:5f:52:98:a3:eb:cb:be:44:f5:f7:2c:
                    ad:9a:95:1b:cb:8b:ab:2a:29:5e:df:58:81:96:21:
                    08:30:fb:5b:a9:f9:c5:da:41:85:58:5f:59:77:ad:
                    d1:80:8a:bf:44:fc:03:92:53:44:66:71:70:f3:83:
                    35:6e:a9:bf:af:36:6b:27:ab:32:53:83:0e:6a:1b:
                    92:7f:f3:b2:52:24:93:7e:63:95:8c:0b:69:64:e2:
                    d5:4e:6d:75:16:f7:7e:f6:b6:b8:4b:fa:8e:55:8c:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F6:B6:7F:AD:5B:DA:73:43:33:63:FB:E0:44:1D:C3:46:7D:77:DE
            X509v3 Authority Key Identifier:
                keyid:9A:9D:4B:DD:43:11:51:9F:6A:96:14:10:40:EA:1E:98:B3:36:33:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/9A9D4BDD4311519F6A96141040EA1E98B3363388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9A9D4BDD4311519F6A96141040EA1E98B3363388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/3130332e3133342e36362e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:27:7a:d8:77:49:e7:21:9b:e4:12:4b:26:f6:37:85:fa:d0:
         40:9d:62:d9:b6:6d:56:ce:f0:95:b9:a7:43:51:b9:bc:f3:8c:
         e3:42:92:61:f0:2f:80:ff:20:83:21:59:66:18:3a:8d:65:ce:
         f9:78:8b:09:a5:fb:88:f4:d7:c0:f5:20:d6:4a:af:ca:ba:ef:
         4c:cd:79:d9:85:6d:19:72:d0:b9:f2:93:7b:ab:20:f1:ae:8c:
         ea:52:c6:e3:46:f2:eb:98:31:82:9e:9c:21:53:eb:4c:02:37:
         64:aa:ed:2e:0b:3d:50:36:e9:a4:f0:6b:20:ed:58:b7:c6:b1:
         9f:f3:80:0a:fb:f8:e5:f7:25:9f:8e:30:e0:6d:57:9e:9a:59:
         88:68:f0:01:b0:08:21:4e:60:92:e6:c3:87:1e:f7:8a:d4:97:
         23:88:bf:93:97:e5:f9:4f:dd:48:93:e0:e0:a1:d4:ba:58:1c:
         fb:a3:c9:c4:b9:2b:00:58:8e:75:8d:05:89:fe:e0:45:1b:26:
         9a:5d:88:bd:69:f9:4d:ed:ce:e9:9e:ba:a1:9c:a8:b8:61:4e:
         da:4f:bc:2c:47:77:08:fd:d6:5a:20:ff:e3:c6:52:08:05:92:
         db:f1:c3:73:49:e3:f1:0e:68:99:7f:78:64:28:f3:e8:f7:64:
         ce:d6:9d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:09 2026 by rpki-client