Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa
File:                     3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (raw, json)
Hash identifier:          HnENUUYM0kbvUs9NmK+JbWee/N7YOJOVKTfwCVimUf0=
Subject key identifier:   62:57:82:7B:65:CD:0F:44:35:5E:62:EC:51:1A:2D:F3:13:23:CF:B7
Certificate issuer:       /CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
Certificate serial:       63EB810C7CDF40933BEFBFB332A4B3F549B5A7BE
Authority key identifier: C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa
Signing time:             Sun 03 May 2026 02:51:24 +0000
ROA not before:           Sun 03 May 2026 02:46:24 +0000
ROA not after:            Sun 02 May 2027 02:51:24 +0000
asID:                     55666
IP address blocks:        103.140.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl
                          rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:eb:81:0c:7c:df:40:93:3b:ef:bf:b3:32:a4:b3:f5:49:b5:a7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
        Validity
            Not Before: May  3 02:46:24 2026 GMT
            Not After : May  2 02:51:24 2027 GMT
        Subject: CN=6257827B65CD0F44355E62EC511A2DF31323CFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:81:e1:90:60:77:8e:c8:89:2f:5c:54:c5:
                    e9:2e:39:e5:64:85:7a:52:43:e4:e5:3b:e8:b2:e4:
                    7d:f4:0b:13:ec:a2:53:37:41:aa:a3:0a:88:c6:f2:
                    38:b1:7b:8c:61:5e:d7:73:00:82:d3:9c:19:c0:44:
                    d5:b0:e6:06:22:b3:d4:66:ff:9c:40:43:26:ee:03:
                    1f:ee:6d:5a:01:41:3c:c2:3e:17:2f:e5:78:8e:cd:
                    50:9d:7e:49:7e:01:bd:54:79:e2:2d:d3:ec:a6:4f:
                    0d:78:fe:fb:96:8e:4b:d8:23:bc:bd:ea:88:23:a5:
                    bf:33:53:b4:da:47:39:a1:88:4c:ea:f2:3a:34:ee:
                    bd:c9:06:34:73:fb:4b:c3:e9:f8:68:c5:15:d4:4e:
                    e2:5d:07:40:e4:38:a1:f4:3d:bc:93:48:e5:ba:81:
                    fb:e7:73:29:38:69:33:2c:7c:12:20:c8:65:ea:77:
                    f0:74:f1:b3:7a:5c:3e:eb:14:96:5c:56:43:71:2e:
                    8f:9d:70:35:4c:5b:38:82:36:bc:77:f9:41:1d:9f:
                    17:d3:6e:22:8c:e9:4c:5f:27:e4:aa:e7:4d:07:48:
                    3f:e8:29:f5:7f:72:cb:0a:bf:fb:6a:8e:05:b3:ae:
                    96:d0:1d:d7:9d:d0:c5:ee:b9:de:a7:b6:7c:33:76:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:57:82:7B:65:CD:0F:44:35:5E:62:EC:51:1A:2D:F3:13:23:CF:B7
            X509v3 Authority Key Identifier:
                keyid:C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/3130332e3134302e37372e302f32342d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:c3:32:5f:10:99:35:62:0b:2c:aa:7c:93:44:d9:d8:36:
         ed:ca:c9:1b:46:13:cb:aa:6b:45:c9:1b:d2:ed:58:99:46:3e:
         96:a8:49:b5:d6:56:89:40:f7:18:2f:0b:66:ee:bc:d9:d0:5f:
         35:f0:22:53:b3:03:e3:76:7f:54:6d:d4:e0:b3:05:cb:65:6a:
         51:4a:ba:3b:7a:99:c8:32:ee:92:83:4c:bc:2f:63:86:e8:4b:
         3c:d5:de:ec:4d:74:83:1c:73:3f:7e:82:70:b5:41:06:f8:df:
         d5:4e:fc:7c:62:c2:e3:36:b6:40:4b:31:b3:df:54:5a:95:66:
         73:53:a5:f1:99:7d:9b:41:fe:44:55:6e:1a:61:85:f0:14:1f:
         2b:1c:fc:ed:9a:9b:b9:03:d4:68:e6:a2:4e:d4:db:c3:18:5a:
         68:c0:1f:2b:e0:c7:46:b6:78:85:23:8b:51:b7:2e:91:4c:16:
         0e:d6:02:6f:d3:d6:43:0a:14:af:64:ec:aa:51:da:02:56:bc:
         c0:c1:2f:89:fa:04:c1:7f:39:e8:ce:01:c7:4c:df:78:65:15:
         f9:cb:a2:68:f0:05:5b:97:64:0d:79:5f:4e:2f:05:ce:a2:ed:
         f4:35:9e:40:02:7e:c6:b3:9c:39:d6:03:01:af:01:e1:dd:c4:
         a6:07:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:10 2026 by rpki-client