Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
File:                     3130332e34392e32382e302f32322d3232203d3e203633383632.roa (raw, json)
Hash identifier:          iI74X3sladmzau4MBHsjwwPESmiR9DW2VEnZxuUovw4=
Subject key identifier:   19:2B:90:FE:60:60:97:7A:94:BB:DD:05:7D:FB:31:6A:94:C0:85:20
Certificate issuer:       /CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
Certificate serial:       6F8F0F7BC3F66A09F6115FF6594257D3E761418D
Authority key identifier: F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa
Signing time:             Sun 03 May 2026 02:48:40 +0000
ROA not before:           Sun 03 May 2026 02:43:40 +0000
ROA not after:            Sun 02 May 2027 02:48:40 +0000
asID:                     63862
IP address blocks:        103.49.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl
                          rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8f:0f:7b:c3:f6:6a:09:f6:11:5f:f6:59:42:57:d3:e7:61:41:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E
        Validity
            Not Before: May  3 02:43:40 2026 GMT
            Not After : May  2 02:48:40 2027 GMT
        Subject: CN=192B90FE6060977A94BBDD057DFB316A94C08520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:e7:bd:9d:7d:81:1b:01:60:68:9f:44:e1:
                    35:cd:40:3c:2f:dd:32:1f:60:e5:c5:26:a6:2b:ad:
                    a7:12:a9:fc:d1:b3:c3:bb:8c:42:e7:c7:c3:9b:6f:
                    3a:63:f9:9e:45:b8:57:24:6f:b3:14:6a:b5:66:1d:
                    9f:3a:61:3b:48:55:14:1f:31:f0:25:f8:51:65:e7:
                    aa:e0:29:3a:08:32:84:3c:07:e6:15:bd:9b:01:fe:
                    3c:99:56:a6:e9:a2:a8:b2:46:19:13:e1:11:41:91:
                    74:ae:33:ec:e4:71:c4:09:5c:82:71:5f:05:37:41:
                    fa:ab:38:f2:79:48:ba:18:2f:8e:e9:52:15:fc:44:
                    bb:26:77:19:0d:15:26:23:11:f1:b9:67:83:6e:23:
                    31:cf:67:b4:e8:14:a2:f7:88:40:4e:86:ba:45:8d:
                    ee:97:ee:38:f8:31:0f:af:37:1d:b2:92:2a:f0:5c:
                    f9:1b:6a:25:eb:2d:85:21:21:d8:4f:24:80:89:43:
                    af:2f:7e:db:26:dc:13:85:eb:a3:e7:59:67:c9:89:
                    00:92:ab:f2:8b:0f:96:bd:21:ed:0f:0e:2c:e4:7d:
                    49:85:ba:37:05:07:73:ba:5e:62:43:ed:15:f6:57:
                    76:06:6e:d9:65:94:79:91:3a:f6:c0:e2:6f:12:d5:
                    88:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2B:90:FE:60:60:97:7A:94:BB:DD:05:7D:FB:31:6A:94:C0:85:20
            X509v3 Authority Key Identifier:
                keyid:F2:F6:B0:5A:5D:9D:56:C4:7D:15:03:91:1B:2C:C0:F0:4A:BF:A5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F2F6B05A5D9D56C47D1503911B2CC0F04ABFA55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e32382e302f32322d3232203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:57:e1:ba:1b:c8:b1:50:aa:8e:45:01:3f:06:83:1b:4b:
         2d:2d:c3:6a:83:fa:a6:20:e6:5d:50:50:bf:3e:25:23:64:a5:
         14:7c:94:87:c1:60:77:11:7e:79:87:3f:27:35:26:9f:9a:b3:
         0b:96:38:8c:61:c1:14:ee:44:1f:d8:18:74:2e:01:c4:9d:58:
         a1:25:fa:3e:b5:73:fd:7f:25:b7:50:15:51:b2:d0:53:86:5b:
         15:5c:56:d7:f7:ea:64:d4:58:71:03:79:6e:38:15:c2:b0:9d:
         53:56:cf:3a:9c:75:a8:47:f4:71:c5:9d:d4:a7:6d:18:b5:43:
         47:69:d3:d5:7c:d9:17:f3:11:ce:67:81:55:8e:7c:c7:fd:d7:
         d0:8b:c9:e8:1b:6e:09:f9:40:c2:d5:f1:39:07:1f:50:d2:bc:
         8d:3b:37:61:7f:a4:64:ed:11:f2:5a:3c:e9:c3:06:c3:eb:86:
         d1:74:a0:f0:2e:90:28:43:a2:ed:72:56:8a:00:f6:99:49:db:
         fe:23:07:52:7d:98:14:b9:f1:cd:48:41:10:c7:4f:bc:5a:e2:
         56:9c:61:5e:e3:11:d7:48:57:6e:43:4e:b0:a6:70:74:fa:f5:
         55:d5:19:e5:c3:1c:df:6e:ff:7b:10:bc:36:7b:29:23:d9:40:
         f0:18:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:51:16 2026 by rpki-client