Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa
File:                     3130332e39302e32352e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          y59gW5BEgEi3F+rl6LRjNXAc9apuX+ON4CV36/Ae45k=
Subject key identifier:   F0:30:6E:1E:86:DD:46:4C:65:B3:B9:2A:58:D9:1B:57:05:E6:F5:15
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       787E955DC4B58457441C15FF107E18FAD219C209
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 02:55:54 +0000
ROA not before:           Sun 03 May 2026 02:50:54 +0000
ROA not after:            Sun 02 May 2027 02:55:54 +0000
asID:                     63497
IP address blocks:        103.90.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7e:95:5d:c4:b5:84:57:44:1c:15:ff:10:7e:18:fa:d2:19:c2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: May  3 02:50:54 2026 GMT
            Not After : May  2 02:55:54 2027 GMT
        Subject: CN=F0306E1E86DD464C65B3B92A58D91B5705E6F515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b8:2b:38:3c:4d:33:c9:06:ae:57:d2:d5:0a:
                    95:48:36:60:25:73:c5:f7:1e:00:c9:d8:1a:db:96:
                    74:1b:16:0f:e6:8c:8c:77:f7:c3:d4:39:c0:88:a4:
                    95:50:08:03:e3:50:ba:25:84:ff:98:ed:01:ea:26:
                    38:17:92:46:9b:02:9f:33:c1:7b:84:e8:7a:9f:84:
                    f5:6d:1d:1d:63:79:4f:34:93:5b:a4:e0:64:18:45:
                    e6:cb:ea:70:82:85:de:27:97:0d:38:68:34:9c:30:
                    43:ca:c0:3c:2d:20:4b:3c:30:22:7b:72:7e:4c:1e:
                    05:06:05:a2:a9:94:dd:a0:36:63:a5:cc:d1:8f:d0:
                    f4:fa:69:c0:73:19:bc:44:9f:b6:c1:95:68:3a:de:
                    01:3a:db:fd:75:58:8c:49:b8:d8:31:f1:f8:8d:40:
                    0d:38:d0:23:89:a0:73:13:98:8b:33:fb:c1:0b:0e:
                    0a:b0:ec:3f:30:e9:20:ef:3c:7f:4a:e8:d0:02:26:
                    53:b5:41:1c:d3:71:e9:74:55:76:df:53:c8:83:ba:
                    a7:8b:8e:10:16:07:b0:5e:76:21:4b:14:93:9c:70:
                    77:1e:c7:e8:7e:6c:86:18:7b:a5:70:3f:4a:3f:fd:
                    b0:af:90:4a:72:72:e0:d2:cf:78:6a:2d:d7:e8:0f:
                    9b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:6E:1E:86:DD:46:4C:65:B3:B9:2A:58:D9:1B:57:05:E6:F5:15
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:92:89:27:fb:a3:81:33:92:8b:7c:8f:25:f9:e7:e9:ad:c9:
         98:99:a5:1a:8b:9d:b6:10:a1:1c:d7:74:1f:fa:f5:22:2c:a7:
         ac:4c:90:35:ca:99:83:7e:e3:50:c8:bb:0a:de:9f:6e:bf:25:
         bd:05:66:9a:a4:be:a9:92:d5:17:46:01:2c:64:c1:38:0f:6d:
         87:80:fb:d6:cd:38:17:71:b2:cc:97:6b:d8:42:7b:60:f4:9e:
         a8:09:ae:41:79:7c:9a:da:70:05:10:5d:cb:a9:90:b0:2d:ee:
         b0:3e:1d:ad:5d:e5:e9:e6:47:1e:6b:a9:a5:3b:6f:77:f2:56:
         e7:3f:27:7b:0a:fa:ce:7e:4a:ef:fc:16:c7:25:ba:7f:3d:a9:
         49:84:97:c4:ec:e6:f1:38:5f:89:01:00:ba:0e:2c:ab:c3:eb:
         a1:a8:d9:ac:ca:cc:79:71:3a:07:e0:55:b9:cd:09:33:94:f3:
         34:40:78:98:e1:c8:8a:89:30:43:6a:d0:eb:e0:cd:71:e9:bb:
         0e:4f:cf:41:8d:0b:3f:5b:cf:e7:80:86:a2:7a:dc:74:7e:e2:
         10:2b:1d:6f:b7:09:b0:8e:0f:de:47:a6:d5:b2:7c:c3:62:b3:
         b9:f4:9c:89:c2:40:47:51:e7:5b:f3:d2:f4:89:36:93:70:e0:
         c5:c9:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:33 2026 by rpki-client