Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
File:                     3130332e36362e34342e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier:          rUzHPQC8rSGdW9E/HydLJJfVCcp4Cg41fMK32WaXBLQ=
Subject key identifier:   9C:1A:61:FD:FF:47:BE:79:BD:DA:83:EA:D7:2D:23:86:1A:5F:21:F0
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       28F6F48755267DD7B723B86D06C6DA758E868F3C
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa
Signing time:             Thu 09 Apr 2026 11:00:01 +0000
ROA not before:           Thu 09 Apr 2026 10:55:01 +0000
ROA not after:            Thu 08 Apr 2027 11:00:01 +0000
asID:                     23694
IP address blocks:        103.66.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:f6:f4:87:55:26:7d:d7:b7:23:b8:6d:06:c6:da:75:8e:86:8f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Apr  9 10:55:01 2026 GMT
            Not After : Apr  8 11:00:01 2027 GMT
        Subject: CN=9C1A61FDFF47BE79BDDA83EAD72D23861A5F21F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:cd:85:96:87:35:4b:de:e5:2c:b7:86:f3:
                    98:88:7c:a8:4f:00:33:7b:85:53:10:df:3e:e9:e6:
                    eb:dd:7b:3a:e0:b8:46:7b:21:1e:af:18:d1:ec:01:
                    90:cd:86:f5:3d:15:19:f4:c7:8c:3a:9d:b9:7f:ec:
                    0a:47:9a:26:55:8e:00:39:0c:1d:64:5c:e6:eb:81:
                    35:24:3d:f5:22:c0:7d:b8:7b:dd:91:a9:b3:e1:94:
                    cf:41:cd:27:98:15:02:c2:1e:01:0f:c2:36:1a:2b:
                    0d:71:c6:8d:5a:5c:e3:c0:20:36:a4:9f:70:cc:f0:
                    c6:85:fd:3c:93:4c:2e:70:a5:7c:9d:3a:e4:5c:d7:
                    b8:69:44:99:78:93:23:b8:07:02:c3:c2:46:1c:40:
                    74:62:19:70:57:21:4c:82:e8:49:fa:be:0d:89:96:
                    26:03:93:78:16:53:9a:96:d8:c5:f7:8f:c8:33:d2:
                    b2:3b:b7:e9:2f:a6:ad:ea:11:fa:fb:77:44:60:75:
                    5e:19:37:e8:3c:dc:9d:ad:71:3d:87:5b:6c:16:ab:
                    01:fc:fd:6f:2e:b4:0b:56:52:20:32:1b:43:3a:bb:
                    8b:7e:95:1e:ba:29:44:60:0d:60:4f:0a:5b:88:35:
                    9e:36:5d:dc:52:1f:b7:f4:27:9f:0f:de:29:f4:c4:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1A:61:FD:FF:47:BE:79:BD:DA:83:EA:D7:2D:23:86:1A:5F:21:F0
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32332d3233203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:60:5d:c2:11:41:20:9e:fa:ae:12:0d:c8:b8:d2:8c:c6:30:
         ed:a8:48:04:2c:5f:ce:48:94:21:9f:4f:75:99:c5:6c:ca:ce:
         e4:09:cb:b4:77:8d:d7:bc:d5:43:7f:a2:a7:3f:69:58:68:d6:
         29:53:b8:c0:df:a9:fc:16:fa:1f:3a:cd:be:40:1a:b9:48:df:
         47:9a:53:63:d9:26:22:fd:58:d4:6f:b1:2e:7b:19:a3:03:c3:
         ae:80:9a:6c:97:b4:41:69:f6:ff:91:b9:4b:32:2d:7a:ff:84:
         3f:f5:bd:3e:df:9a:50:d4:69:86:3e:cf:d2:cb:0b:b0:b2:91:
         f3:fc:85:4c:a6:ac:c3:7c:2c:4d:fc:81:e2:8e:97:77:21:a5:
         e4:b0:e0:dd:a0:82:ae:c7:4e:7a:b4:14:b1:d9:0d:af:3b:e0:
         35:41:6a:69:77:31:a8:c8:80:df:3a:e3:9f:a7:fe:0a:d6:cc:
         c4:4c:44:cd:ed:ab:2b:9e:2b:ba:9b:d4:9a:41:da:01:69:12:
         cd:79:57:93:f2:2f:82:20:67:ed:0f:56:e3:32:31:b8:ed:be:
         b3:a0:ab:1d:19:17:fb:73:fe:4f:c8:00:c2:64:e3:62:c3:b3:
         88:58:e7:9f:9a:ee:79:3b:b5:e9:bf:ed:49:d7:95:d5:93:27:
         83:be:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:33 2026 by rpki-client