Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34342e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          2mLm97PKk/N/WXNzhaOaTxfsyhNhB+sw5XmUg9N2fSM=
Subject key identifier:   43:9B:51:53:CF:C5:90:1C:5A:97:C0:6C:2C:D7:52:7D:DC:9A:75:0D
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       6FF312E894A9066F5BA53C0D0B780005D1FCDAFF
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 09 Apr 2026 11:00:02 +0000
ROA not before:           Thu 09 Apr 2026 10:55:02 +0000
ROA not after:            Thu 08 Apr 2027 11:00:02 +0000
asID:                     23694
IP address blocks:        103.66.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:12:e8:94:a9:06:6f:5b:a5:3c:0d:0b:78:00:05:d1:fc:da:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Apr  9 10:55:02 2026 GMT
            Not After : Apr  8 11:00:02 2027 GMT
        Subject: CN=439B5153CFC5901C5A97C06C2CD7527DDC9A750D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:2b:1a:b9:ae:90:fc:42:d4:ec:80:37:a3:94:
                    be:ea:e5:3a:5a:77:a9:2e:1e:d0:95:d1:86:41:65:
                    fb:47:98:f7:af:5c:cf:73:13:1a:1e:f6:3f:85:33:
                    20:15:80:50:65:5f:79:9d:18:a5:08:98:b2:99:bd:
                    f9:82:7b:4e:f4:1e:d5:5d:87:31:8c:69:d6:5a:fc:
                    5f:8e:e6:68:52:77:8f:bb:05:98:77:6e:4b:bd:54:
                    40:82:a7:f6:29:5b:c8:26:de:1c:1c:91:bf:28:2c:
                    8c:32:4f:74:a0:ef:cd:74:4b:51:68:2d:ad:b7:75:
                    25:82:ff:37:c7:09:d3:0d:1d:40:f7:0d:9b:ed:33:
                    28:c8:6f:74:e4:2e:9a:45:e9:b9:2e:3e:8f:cd:89:
                    12:d3:db:8a:b6:8d:2c:d0:35:cf:9c:7e:74:2b:c3:
                    19:76:d8:c1:9c:26:57:4e:7b:19:e0:b2:a9:73:2e:
                    d1:35:db:cf:4f:c4:73:bf:b9:c3:9d:de:55:0b:93:
                    3a:2e:ee:98:98:fc:9b:75:94:3a:f3:a4:c4:6c:3b:
                    17:64:a7:d3:5f:6e:df:48:ff:11:f4:77:08:a3:56:
                    6c:df:1b:66:2e:e2:9a:75:1e:c8:3f:8d:a1:bf:4a:
                    70:ec:06:99:b8:a2:b9:24:c3:b0:e5:73:c9:df:fd:
                    b9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9B:51:53:CF:C5:90:1C:5A:97:C0:6C:2C:D7:52:7D:DC:9A:75:0D
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34342e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:d9:52:8d:3c:72:16:f3:54:17:19:92:af:4f:3d:3a:c9:
         44:15:93:56:02:90:58:f0:95:a1:3e:8d:aa:9b:c1:be:62:6f:
         33:4c:36:1e:2e:80:c0:53:6e:ac:71:0a:b8:8f:e8:df:4b:77:
         ff:b4:dd:7b:b5:45:84:aa:02:1d:7c:e3:15:e0:d2:f9:08:38:
         e3:33:93:6d:35:fa:86:7a:41:ef:cb:3c:4c:80:a6:ee:22:db:
         5c:a7:c6:ee:86:f0:86:13:7f:9b:dd:ce:97:40:cd:50:84:88:
         9b:b7:62:30:ce:4e:5b:e8:77:9f:e1:fd:b3:82:da:62:69:da:
         55:a0:75:64:80:6b:37:e0:8d:a2:8d:82:ba:38:97:02:06:7c:
         bd:bc:fa:61:1c:98:7a:1c:ad:7b:06:db:1f:e4:22:9e:8f:a5:
         89:6a:23:cd:a2:23:f7:ee:2e:ca:70:ff:3f:84:d9:67:e6:81:
         74:97:89:4e:02:87:6c:e4:8a:45:2c:54:a2:a0:3a:2e:e2:d4:
         d5:15:a6:93:0b:c0:27:e4:83:4b:88:cb:34:61:10:af:ad:39:
         38:8e:d6:25:e7:e2:98:2e:30:6f:78:1c:df:48:ce:7d:a6:23:
         49:82:ab:60:7d:db:ae:6c:43:d3:29:24:4c:ab:23:99:50:22:
         41:c9:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:21 2026 by rpki-client