Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34362e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          k1S7F23R8eG1LRhjTB3+I4onoSj++9fna5xIs5SQKrk=
Subject key identifier:   F2:7E:D6:E2:84:23:7E:F1:25:0C:89:65:77:4D:97:8A:31:37:EA:57
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       604EA420BED3DA2DCA7825BD6141A03019AE4DDE
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 09 Apr 2026 11:00:02 +0000
ROA not before:           Thu 09 Apr 2026 10:55:02 +0000
ROA not after:            Thu 08 Apr 2027 11:00:02 +0000
asID:                     23694
IP address blocks:        103.66.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4e:a4:20:be:d3:da:2d:ca:78:25:bd:61:41:a0:30:19:ae:4d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Apr  9 10:55:02 2026 GMT
            Not After : Apr  8 11:00:02 2027 GMT
        Subject: CN=F27ED6E284237EF1250C8965774D978A3137EA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8e:46:27:0d:3a:51:2c:67:f8:01:65:16:29:
                    54:3b:97:a3:d0:b9:f0:49:5e:2d:12:32:da:96:1c:
                    7b:29:15:11:e3:ea:a9:16:a2:cc:6c:45:8c:c1:4d:
                    e7:6d:28:78:9f:ca:4a:9f:a8:3a:9e:54:56:d3:14:
                    ad:a1:db:1f:a8:cf:5a:32:ba:8a:d7:23:30:8b:82:
                    f8:c5:87:37:89:dd:45:b6:82:c2:52:59:60:6a:67:
                    af:97:b3:15:7a:2d:63:5a:53:b8:bc:05:be:3e:13:
                    48:2b:ac:fc:f4:4c:35:f5:35:62:2a:2d:e0:e5:c0:
                    86:26:56:79:ec:57:a2:e8:27:1f:b9:e8:84:f7:98:
                    13:be:75:55:c2:18:38:31:88:d0:d6:d9:c8:7f:90:
                    a7:02:66:1c:10:1b:98:d2:40:1c:7f:f2:57:bf:aa:
                    f6:70:0b:e3:ad:76:d6:b3:cc:c3:1c:da:2d:f9:05:
                    91:3b:41:f8:02:d7:8a:e3:18:ac:38:bf:52:4f:43:
                    4b:3f:be:89:b4:a6:a6:ea:7c:28:5f:cb:02:78:aa:
                    a4:7e:0e:d1:f5:b5:6c:b0:af:6b:83:c0:13:43:f8:
                    d9:b5:ac:2a:ee:50:47:c7:68:8c:d4:b3:c8:10:03:
                    2a:46:32:87:54:94:5c:e3:32:0d:35:8a:e9:89:34:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7E:D6:E2:84:23:7E:F1:25:0C:89:65:77:4D:97:8A:31:37:EA:57
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:73:22:62:92:48:7c:10:c7:73:5c:24:e4:44:8e:c1:35:49:
         29:d8:2e:8b:a6:b5:d5:e4:7b:a8:ea:15:d1:62:c6:b6:17:b5:
         81:ed:c4:58:37:75:32:58:50:4d:ff:22:f4:ec:54:67:7d:de:
         01:69:a6:30:d2:85:2e:2c:09:76:cf:d9:d9:17:47:e0:7d:4d:
         30:01:c2:f9:c8:28:dc:7a:ed:bd:c7:76:fc:ac:72:e0:9f:34:
         96:07:9e:5c:0a:d6:85:41:f6:a5:03:62:ee:87:a7:b3:8d:b7:
         be:0c:c4:f4:e6:1a:fe:25:22:92:8f:99:00:8c:08:98:6e:be:
         ca:32:33:1a:e9:50:5f:1a:23:00:da:db:07:d3:57:96:32:53:
         dd:99:62:24:0e:d3:48:71:f4:2f:72:a5:c3:44:16:4f:17:73:
         b3:38:19:a7:41:77:07:b1:e1:6a:f2:15:df:45:ed:d4:29:a3:
         ce:bc:b5:59:4b:bd:64:71:0b:04:9c:00:78:f0:03:f1:19:d9:
         92:47:67:18:15:1a:e5:1e:e6:47:59:0a:b3:09:0e:94:ed:ad:
         4f:9c:ee:39:61:31:dd:d9:ae:f0:f1:b7:ec:35:5b:d4:31:f9:
         d5:72:fc:81:1f:bf:f0:7b:3e:f7:ca:43:d3:ec:5c:67:2e:34:
         c5:2b:50:47
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYE6kIL7T2i3KeCW9YUGgMBmuTd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJE
NjI3RUQzNjAeFw0yNjA0MDkxMDU1MDJaFw0yNzA0MDgxMTAwMDJaMDMxMTAvBgNV
BAMTKEYyN0VENkUyODQyMzdFRjEyNTBDODk2NTc3NEQ5NzhBMzEzN0VBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jkYnDTpRLGf4AWUWKVQ7l6PQ
ufBJXi0SMtqWHHspFRHj6qkWosxsRYzBTedtKHifykqfqDqeVFbTFK2h2x+oz1oy
uorXIzCLgvjFhzeJ3UW2gsJSWWBqZ6+XsxV6LWNaU7i8Bb4+E0grrPz0TDX1NWIq
LeDlwIYmVnnsV6LoJx+56IT3mBO+dVXCGDgxiNDW2ch/kKcCZhwQG5jSQBx/8le/
qvZwC+OtdtazzMMc2i35BZE7QfgC14rjGKw4v1JPQ0s/vom0pqbqfChfywJ4qqR+
DtH1tWywr2uDwBND+Nm1rCruUEfHaIzUs8gQAypGModUlFzjMg01iumJNGvhAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU8n7W4oQjfvElDIlld02XijE36lcwHwYDVR0j
BBgwFoAUPg0GDyFN+OZJMkMDPr0wq9Yn7TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjRmODUxMS0wN2IzLTRhNjEtYmQwNC0yZTY2NWM5Mjc4ZmMvMC8zRTBEMDYwRjIx
NERGOEU2NDkzMjQzMDMzRUJEMzBBQkQ2MjdFRDM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0UwRDA2MEYyMTRERjhFNjQ5MzI0MzAzM0VCRDMwQUJENjI3
RUQzNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNGY4NTExLTA3YjMtNGE2MS1i
ZDA0LTJlNjY1YzkyNzhmYy8wLzMxMzAzMzJlMzYzNjJlMzQzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzMzNjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnQi4wDQYJKoZIhvcN
AQELBQADggEBANtzImKSSHwQx3NcJOREjsE1SSnYLoumtdXke6jqFdFixrYXtYHt
xFg3dTJYUE3/IvTsVGd93gFppjDShS4sCXbP2dkXR+B9TTABwvnIKNx67b3Hdvys
cuCfNJYHnlwK1oVB9qUDYu6Hp7ONt74MxPTmGv4lIpKPmQCMCJhuvsoyMxrpUF8a
IwDa2wfTV5YyU92ZYiQO00hx9C9ypcNEFk8Xc7M4GadBdwex4WryFd9F7dQpo868
tVlLvWRxCwScAHjwA/EZ2ZJHZxgVGuUe5kdZCrMJDpTtrU+c7jlhMd3ZrvDxt+w1
W9Qx+dVy/IEfv/B7PvfKQ9PsXGcuNMUrUEc=
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:16 2026 by rpki-client