Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa
File:                     3130332e39302e32362e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          yEBegNseO4WhgSgnMf0UD1P9unzjG8GGfBUDaVupNxw=
Subject key identifier:   E0:83:8D:6D:08:D9:C6:B0:7F:DA:6B:D4:12:F0:90:CE:56:40:2A:0E
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       7F402F89F037856DFDA3E2546EC29AC02752C66C
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 02:55:53 +0000
ROA not before:           Sun 03 May 2026 02:50:53 +0000
ROA not after:            Sun 02 May 2027 02:55:53 +0000
asID:                     63497
IP address blocks:        103.90.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:40:2f:89:f0:37:85:6d:fd:a3:e2:54:6e:c2:9a:c0:27:52:c6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: May  3 02:50:53 2026 GMT
            Not After : May  2 02:55:53 2027 GMT
        Subject: CN=E0838D6D08D9C6B07FDA6BD412F090CE56402A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:19:a4:f4:11:60:c4:fa:84:42:99:25:de:
                    51:9a:b6:d8:4e:e8:dd:ca:85:de:a7:18:36:2b:4d:
                    5e:fb:01:0e:65:5f:af:3f:57:9a:e2:de:52:40:2e:
                    a5:cb:ce:42:5b:43:cc:e2:8a:51:95:a8:bd:58:f1:
                    b7:66:41:4b:61:62:2f:63:9d:d2:c9:51:cb:45:25:
                    86:39:b0:c9:3a:d1:92:93:60:f3:ee:8c:fc:7a:a0:
                    6b:5b:55:5c:59:6c:cc:20:aa:92:28:64:e5:7c:b2:
                    d6:19:1b:5d:f1:8e:65:d6:ee:d2:37:98:31:12:50:
                    90:0c:3b:8f:75:78:71:b7:32:77:58:f8:ec:6e:78:
                    10:ee:a1:a6:68:60:f6:6d:cc:a3:64:c0:df:5b:9f:
                    53:11:90:5d:32:f4:7e:3b:34:cc:65:20:8a:f2:f5:
                    c7:0c:72:74:da:27:dd:ec:31:8e:82:8f:f2:a9:98:
                    87:0a:17:28:42:80:4d:68:93:9d:6a:15:a8:bc:91:
                    a3:f7:d4:74:59:9e:fa:7e:e0:3c:63:63:3e:91:31:
                    b3:ee:d5:a4:6a:d1:7a:11:c1:89:32:36:67:2b:fb:
                    85:16:ef:d0:0d:06:c0:37:66:38:85:ea:00:54:bb:
                    6f:52:b0:e3:69:bc:3c:7a:92:66:5f:5c:06:7d:4f:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:83:8D:6D:08:D9:C6:B0:7F:DA:6B:D4:12:F0:90:CE:56:40:2A:0E
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32362e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:99:66:be:72:95:17:9f:15:a9:9a:27:1a:ca:b3:7f:1b:
         d6:92:e8:b3:91:f0:b2:e0:d0:bb:1b:af:22:3f:f1:e5:83:a5:
         d9:25:c0:82:d7:75:98:fc:9c:81:c7:80:2b:42:d4:8f:51:1d:
         80:ac:45:6e:a0:56:73:87:cf:63:95:94:e9:f5:04:04:d4:a7:
         86:4c:6e:4a:f1:3d:82:0d:05:1c:95:7a:a5:02:ad:02:af:ef:
         a4:83:46:c5:1f:07:2e:79:9e:57:1a:45:aa:2b:e0:31:58:1a:
         d0:d4:23:54:7a:1f:28:45:a4:8c:6a:6a:25:fc:b8:cd:37:5d:
         3e:00:f0:c2:20:78:26:cf:43:ef:cb:97:f0:31:5c:cc:da:c4:
         80:f0:48:56:c5:f3:8e:77:c9:bc:91:dd:73:52:1c:d5:60:69:
         13:95:67:92:71:80:da:49:10:69:3f:88:da:15:a9:d2:57:14:
         41:cd:9c:b5:a6:1c:90:02:31:cb:7d:51:0b:2c:1f:ff:c9:68:
         84:3f:1e:e3:90:5c:91:df:9a:20:80:43:b7:a6:cb:04:f1:48:
         6c:6e:0c:02:6f:b2:37:71:70:6b:14:ae:d8:66:52:1f:9d:34:
         12:14:1a:9c:f7:65:4e:99:e8:a3:d7:c3:49:67:75:6c:09:14:
         a6:31:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:24 2026 by rpki-client