Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34352e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          NPw1Lo+YjKLvGNtWeZz9XqehI9DzH5RN06kVgFiciSk=
Subject key identifier:   EA:8A:8E:A7:3F:2A:8D:62:51:5B:E6:9E:80:BF:5A:12:64:B6:64:4D
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       65628168B91E446580EDCD4C61708C5D83ACB591
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 09 Apr 2026 11:00:01 +0000
ROA not before:           Thu 09 Apr 2026 10:55:01 +0000
ROA not after:            Thu 08 Apr 2027 11:00:01 +0000
asID:                     23694
IP address blocks:        103.66.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:62:81:68:b9:1e:44:65:80:ed:cd:4c:61:70:8c:5d:83:ac:b5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Apr  9 10:55:01 2026 GMT
            Not After : Apr  8 11:00:01 2027 GMT
        Subject: CN=EA8A8EA73F2A8D62515BE69E80BF5A1264B6644D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:24:c3:a9:f8:ac:64:d8:60:74:78:27:eb:
                    fe:cd:2c:76:b0:dc:1d:90:5d:ea:eb:05:32:40:38:
                    23:0d:3b:c8:59:bd:1c:cd:b2:eb:e6:10:9f:d2:05:
                    7a:87:5f:88:99:dd:f3:65:9f:7f:34:78:1f:2b:26:
                    59:7b:23:a4:56:b7:aa:ea:45:07:6f:43:e4:59:a4:
                    8d:7a:8d:84:18:33:9a:11:59:2d:ae:c6:1e:38:87:
                    09:af:b8:da:b2:45:3e:ae:33:bf:f7:16:05:25:c2:
                    e0:89:94:d2:8a:a4:16:6c:d0:ed:b7:56:45:e4:a1:
                    b9:32:f8:61:62:bb:ad:69:05:76:50:1f:ca:ca:b3:
                    7f:1c:2f:97:fa:d7:4e:b6:1f:92:8a:33:23:52:63:
                    70:44:e3:61:50:98:b6:c6:52:e2:89:a6:8c:fe:57:
                    5a:1d:9a:ca:b9:1c:c1:15:60:0a:29:73:fe:ae:48:
                    d2:65:1e:fc:5d:8b:27:15:9f:c8:a6:1d:dd:d4:be:
                    99:73:45:ba:46:aa:23:34:78:ed:a4:dc:23:79:74:
                    e6:1a:c6:0e:ff:56:85:06:b4:91:1b:a2:23:4b:9d:
                    0a:3b:e0:aa:1b:d4:49:d3:47:05:0d:f6:ad:58:35:
                    4e:78:04:b8:71:e7:eb:ce:c4:aa:b4:da:6f:c6:73:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8A:8E:A7:3F:2A:8D:62:51:5B:E6:9E:80:BF:5A:12:64:B6:64:4D
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34352e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e4:8d:78:a6:5d:c3:f8:9c:1d:d0:0a:a8:35:ad:6e:9b:70:
         9d:a5:d3:90:93:0b:6c:26:dc:9e:05:33:35:80:78:02:d4:a4:
         ae:e1:9b:f0:34:f4:85:f0:32:c6:43:a0:65:21:e4:af:cb:60:
         b7:1c:de:90:b8:15:94:f1:e1:74:42:78:7e:0b:81:c9:35:38:
         97:62:6e:2f:bf:85:bb:8a:86:a8:74:6a:ff:d0:d6:95:93:dc:
         cc:a5:4c:5d:37:51:9d:b2:17:2d:17:a6:ea:0d:41:30:70:a4:
         1f:e0:6c:92:11:8d:73:a5:72:1a:44:a6:1d:13:34:21:e7:0a:
         d3:18:ae:02:d8:6c:69:70:09:9d:92:86:03:b1:69:ae:a9:dc:
         53:9b:55:46:c5:9b:ea:06:cb:4b:86:6f:57:64:32:d5:0e:c4:
         43:ec:f2:a7:6c:ab:d6:3d:6c:86:d2:e0:db:10:92:d1:3f:a1:
         bc:47:4b:8a:02:34:9e:44:f9:eb:50:c6:00:d7:14:c6:7c:12:
         e8:11:8d:b0:90:8c:9e:cf:ba:7c:d9:f0:46:e9:b9:d9:0f:c7:
         ba:bc:29:42:43:89:62:bf:13:f0:b5:9d:50:c5:d7:c5:c7:3e:
         ed:7c:1b:83:00:b6:31:2b:da:1f:38:0c:2b:1d:f7:76:b0:08:
         db:63:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:20 2026 by rpki-client