Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136362e33342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          +oYni9XzPTeAFRIQkMYAJOggC3zZ7YXNPLVdua7XUGk=
Subject key identifier:   D1:8D:7F:4D:CC:BC:A8:2D:DA:B9:4A:D0:2D:00:F1:6D:D1:EE:D5:9C
Certificate issuer:       /CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
Certificate serial:       5ADEE09B0D4A3692F34428004E8CF791BDE897B5
Authority key identifier: 2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa
Signing time:             Sun 03 May 2026 03:07:58 +0000
ROA not before:           Sun 03 May 2026 03:02:58 +0000
ROA not after:            Sun 02 May 2027 03:07:58 +0000
asID:                     17995
IP address blocks:        103.166.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl
                          rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 May 2026 16:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:de:e0:9b:0d:4a:36:92:f3:44:28:00:4e:8c:f7:91:bd:e8:97:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E6D1F784FD9721883D085BA15F21CADF4D9D5E9
        Validity
            Not Before: May  3 03:02:58 2026 GMT
            Not After : May  2 03:07:58 2027 GMT
        Subject: CN=D18D7F4DCCBCA82DDAB94AD02D00F16DD1EED59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:96:bd:4a:6d:b5:a1:43:07:7e:43:8d:d5:
                    ef:85:32:0c:91:47:7b:1c:17:21:e3:09:85:48:77:
                    85:56:39:ae:88:d4:28:c3:1d:09:ee:50:9a:fa:fd:
                    22:73:66:db:9f:e4:31:c6:2d:89:83:98:34:ed:c4:
                    b6:45:e5:6c:ac:13:16:a7:46:80:6e:d3:f2:47:c4:
                    fd:79:43:87:dc:a1:4f:ee:38:d7:0b:b2:5e:e3:cf:
                    d5:1c:be:af:15:c7:a6:98:c2:3a:c5:0b:87:d6:38:
                    ca:8b:2b:cc:5c:5f:cf:d3:b4:cd:c3:c1:30:fe:2d:
                    46:55:5b:2a:89:cc:54:12:e5:68:ed:e4:f5:00:8b:
                    55:1a:9c:a7:f4:b3:f5:50:90:96:c0:3d:8c:d9:40:
                    87:0f:6b:7f:fd:8c:94:ae:24:ed:3b:94:64:ca:35:
                    59:c1:31:4b:07:35:d7:be:36:41:c3:bc:45:f8:84:
                    b3:86:e5:c8:6d:93:2c:6d:ad:74:ac:2c:1b:ac:ff:
                    5c:fc:ac:b2:6b:96:ae:72:ee:47:e2:ae:62:4a:ea:
                    df:78:25:e2:eb:f9:7b:65:de:f5:93:52:77:f5:6d:
                    26:cd:94:48:03:5e:92:f1:f4:b2:33:75:7a:da:11:
                    5c:44:80:3f:56:7a:a3:2b:b1:22:f5:13:b5:96:76:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:7F:4D:CC:BC:A8:2D:DA:B9:4A:D0:2D:00:F1:6D:D1:EE:D5:9C
            X509v3 Authority Key Identifier:
                keyid:2E:6D:1F:78:4F:D9:72:18:83:D0:85:BA:15:F2:1C:AD:F4:D9:D5:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2E6D1F784FD9721883D085BA15F21CADF4D9D5E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d044f918-9332-4257-b510-381c8590ff54/0/3130332e3136362e33342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:de:26:80:59:01:f9:97:58:7b:1e:ff:eb:7c:60:f3:7a:
         15:35:e4:d0:f7:0f:db:06:0d:ee:c8:63:dc:39:a4:79:1f:e1:
         5c:51:ef:03:b0:93:bb:eb:f5:1c:b7:d7:e1:db:1c:5e:1a:1a:
         19:32:9b:ec:7d:24:ab:3e:e4:e5:e1:a5:e3:17:02:ba:66:08:
         35:52:fb:cd:cf:b3:ef:c9:ee:60:a2:c3:57:24:de:08:f9:93:
         03:d9:54:f5:5a:8f:0b:6c:84:08:6d:cc:60:96:2c:28:00:75:
         2f:16:6a:90:39:47:c3:c2:9d:cd:9f:95:a8:65:12:e7:22:50:
         26:be:8c:3a:c4:95:63:ba:08:0f:59:0d:74:42:ef:71:51:ac:
         2d:6e:88:b6:d8:c9:dc:2c:72:00:76:2e:46:55:ef:2d:85:ae:
         44:08:dc:8e:87:92:3d:a0:4b:74:98:3b:68:c4:2e:3e:4f:a0:
         ee:35:9f:80:5d:c8:04:f0:d8:85:82:82:41:2c:da:c6:fc:2b:
         27:37:01:f2:4a:d2:3d:d1:be:41:2c:39:41:69:a2:5f:f3:1b:
         82:20:be:1e:3c:1b:cf:7f:76:b9:14:65:1e:5d:e4:22:65:d3:
         d5:d8:8f:30:96:7e:d6:89:e6:01:75:55:f8:0d:8f:6d:40:98:
         96:37:46:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 06:35:16 2026 by rpki-client