Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
File:                     AS63490.roa (raw, json)
Hash identifier:          fyz4sp37jiemh1akRplYuLHBDt9AKiHTvKjorCKZ7pY=
Subject key identifier:   A5:B2:55:AB:CC:96:9C:0F:69:5E:55:F3:79:7B:13:B6:FE:B3:5F:01
Certificate issuer:       /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
Certificate serial:       475F24F2EE5A23B0212398E97B0342686442276F
Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa
Signing time:             Sun 03 May 2026 05:39:08 +0000
ROA not before:           Sun 03 May 2026 05:34:08 +0000
ROA not after:            Sun 02 May 2027 05:39:08 +0000
asID:                     63490
IP address blocks:        103.93.236.0/24 maxlen: 24
                          103.93.237.0/24 maxlen: 24
                          103.235.66.0/24 maxlen: 24
                          103.235.67.0/24 maxlen: 24
                          202.46.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5f:24:f2:ee:5a:23:b0:21:23:98:e9:7b:03:42:68:64:42:27:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E
        Validity
            Not Before: May  3 05:34:08 2026 GMT
            Not After : May  2 05:39:08 2027 GMT
        Subject: CN=A5B255ABCC969C0F695E55F3797B13B6FEB35F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:dd:26:a7:d2:2d:88:1f:1f:4d:bd:5c:41:
                    fa:de:96:86:dc:e0:e7:18:40:43:ef:8f:cc:82:d9:
                    85:f3:f0:a0:c4:b3:82:5c:b8:9c:89:c9:b4:9b:06:
                    ff:e6:8c:93:90:b7:95:a1:d5:f4:2c:2f:bd:e6:9b:
                    2d:8b:40:a3:0a:99:ec:10:8b:22:6e:e7:09:95:47:
                    22:ec:4e:41:a5:89:ad:7c:2c:8a:8e:9a:d4:31:a7:
                    de:46:a9:19:0c:ca:d7:f4:55:cb:49:67:e4:7c:91:
                    eb:3d:f7:c5:ca:ce:6c:e8:70:16:60:35:a5:61:db:
                    e9:29:29:35:a8:d2:de:15:f0:5d:05:79:bc:b3:7a:
                    58:74:6a:c3:6f:c9:54:fb:37:1c:f9:d7:f3:d6:99:
                    d6:15:81:50:c2:65:11:80:46:72:46:30:03:82:8d:
                    03:7b:22:8d:ff:0e:7f:d0:52:42:c2:a8:7b:82:60:
                    2f:ad:95:94:53:16:36:1d:7e:68:63:96:9d:0c:21:
                    aa:19:05:b3:15:b9:b9:b6:83:51:ba:44:00:d3:07:
                    e3:a0:bc:41:4b:7d:ba:e5:24:31:82:c7:17:4f:2a:
                    8c:cd:80:ae:66:3f:25:6b:23:81:e0:49:fe:81:a2:
                    95:fb:6f:8f:10:da:96:59:84:bf:7f:75:49:b0:49:
                    87:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B2:55:AB:CC:96:9C:0F:69:5E:55:F3:79:7B:13:B6:FE:B3:5F:01
            X509v3 Authority Key Identifier:
                keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AS63490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.236.0/23
                  103.235.66.0/23
                  202.46.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:55:7d:1f:5e:51:54:15:c5:94:62:5f:87:d5:b8:b5:fb:ab:
         48:35:b5:40:c2:a2:80:33:56:fb:73:0e:78:ce:95:4c:36:5d:
         c2:1b:a7:06:de:05:87:91:f0:14:32:42:74:da:93:a4:23:11:
         2d:3d:cc:1c:a1:1d:eb:37:19:0f:f5:fe:27:4f:52:a9:6d:48:
         20:de:27:3e:5f:9b:09:82:ec:a3:3b:e0:08:4a:43:a8:7b:16:
         13:c0:3a:5d:5f:70:18:a5:1c:c6:44:0a:7b:4a:6f:fa:60:d2:
         da:94:5e:e5:90:ca:08:85:aa:34:46:a6:3d:a3:b1:66:33:cb:
         7a:20:df:b6:8b:4f:15:f4:18:cd:ce:a8:7f:e4:e7:7f:34:78:
         a4:3a:32:1b:66:00:ac:cd:11:89:12:d4:27:e8:13:e2:78:7e:
         b9:41:f0:a0:41:d2:f1:f8:f6:88:91:dd:e9:1e:a1:88:f1:ae:
         e6:71:39:6c:0c:82:f8:4b:86:c3:8f:39:02:55:9d:23:f7:25:
         b3:ee:c0:a8:b5:fa:99:eb:69:15:3a:5d:19:39:81:71:41:a4:
         9a:98:7d:9d:1c:b4:a5:b2:3c:08:bc:fc:52:87:b9:86:57:1c:
         67:36:33:ef:61:cd:4b:cc:16:ed:86:eb:58:b3:79:99:1b:41:
         b2:34:16:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:42:45 2026 by rpki-client