Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa
File:                     3130332e39302e32372e302f32342d3234203d3e20313332363733.roa (raw, json)
Hash identifier:          gEjgmPi52YAqYyRKLzVAHY/tcddAmwneB2Joo9b5lCU=
Subject key identifier:   71:B3:0E:2C:2C:26:31:CD:30:0D:79:98:9B:12:4E:37:1A:F6:38:75
Certificate issuer:       /CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
Certificate serial:       27212842C30F258D50D20F90FBDAF0837C60686C
Authority key identifier: 97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa
Signing time:             Sun 03 May 2026 02:55:53 +0000
ROA not before:           Sun 03 May 2026 02:50:53 +0000
ROA not after:            Sun 02 May 2027 02:55:53 +0000
asID:                     132673
IP address blocks:        103.90.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl
                          rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:21:28:42:c3:0f:25:8d:50:d2:0f:90:fb:da:f0:83:7c:60:68:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9796934CE983E32FE16AC8EC0968FB6FF0339712
        Validity
            Not Before: May  3 02:50:53 2026 GMT
            Not After : May  2 02:55:53 2027 GMT
        Subject: CN=71B30E2C2C2631CD300D79989B124E371AF63875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:f2:4b:a4:69:f2:7b:5d:94:75:1c:65:3a:
                    5e:6a:d6:bb:fe:2b:56:12:db:29:48:be:9b:10:f3:
                    90:a1:2a:90:65:37:2a:e8:b9:4a:14:3e:c4:eb:8d:
                    6b:8d:d7:46:d3:6d:2a:37:cd:bf:02:5c:cd:13:ff:
                    92:e7:a0:58:46:70:2b:ab:71:81:47:c3:45:2e:a7:
                    1f:d7:14:53:df:aa:06:bf:9d:75:3a:78:d5:d6:1e:
                    f2:10:c6:0c:4d:4c:91:c1:89:a4:82:e9:38:17:5d:
                    d4:fb:98:80:e1:7b:23:92:e1:b3:ec:11:69:fb:70:
                    c3:d9:7a:c7:2a:90:65:da:4a:0a:63:c3:70:c2:76:
                    51:c4:bc:b8:9e:63:5d:52:1d:56:3f:af:42:be:c0:
                    aa:fc:3f:0a:d9:e9:5e:3e:80:0a:93:84:e9:ed:ea:
                    9f:1b:19:c3:63:03:f1:d9:53:b3:df:3a:3a:dc:9f:
                    a4:9a:40:1d:b0:6b:87:4a:eb:57:cb:b1:42:f3:6b:
                    da:b2:5b:10:73:53:1a:43:57:d1:40:a6:04:d5:7f:
                    f2:45:83:54:4b:e4:b2:c8:89:d9:79:03:3f:b2:19:
                    93:1a:65:a8:8a:91:e2:c2:4c:9f:10:db:b4:87:c9:
                    e7:47:fd:2f:79:ba:5d:74:79:33:be:53:8a:3a:1f:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:0E:2C:2C:26:31:CD:30:0D:79:98:9B:12:4E:37:1A:F6:38:75
            X509v3 Authority Key Identifier:
                keyid:97:96:93:4C:E9:83:E3:2F:E1:6A:C8:EC:09:68:FB:6F:F0:33:97:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/9796934CE983E32FE16AC8EC0968FB6FF0339712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9796934CE983E32FE16AC8EC0968FB6FF0339712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32372e302f32342d3234203d3e20313332363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ea:85:41:14:5c:b8:1f:8d:2b:eb:ad:ba:6a:f4:c1:bc:8f:
         03:18:91:42:60:3d:20:0a:5d:bc:50:d2:b4:59:c0:45:ff:e7:
         c8:69:49:02:b8:30:97:fd:70:de:e9:07:b5:19:82:3c:7d:5a:
         09:7b:7f:c8:9d:11:20:7b:56:67:03:5d:48:ed:8c:4b:bf:6b:
         a4:ce:3a:2f:85:c7:5e:48:cd:ac:86:42:e2:57:19:64:84:23:
         90:f1:14:23:bb:35:c5:4c:db:a2:99:5e:d3:10:f3:86:f2:70:
         60:31:25:20:df:3f:9d:f7:01:96:ac:a1:a2:e8:b3:11:b4:ca:
         18:6c:fb:ac:13:8b:38:f2:24:86:7e:6e:7f:a9:1d:08:73:44:
         9a:cf:41:95:c9:fc:22:cb:0b:f6:96:79:98:e2:98:23:bc:59:
         77:aa:db:13:4c:b2:e1:58:76:df:5c:f6:0a:04:91:f5:76:f9:
         ab:1c:48:20:db:20:33:3c:85:25:3a:e1:94:ab:8e:44:bc:47:
         ff:3d:66:d3:60:54:cf:a0:84:e5:da:ce:98:6f:86:24:22:76:
         83:3e:0e:97:a1:2c:d3:fe:8e:17:2a:13:28:7a:9f:94:ce:4e:
         9a:e6:e2:b1:06:12:1a:44:1d:fd:6e:d5:1d:95:88:13:43:e6:
         bb:b9:c8:c1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUJyEoQsMPJY1Q0g+Q+9rwg3xgaGwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5NjkzNENFOTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZG
MDMzOTcxMjAeFw0yNjA1MDMwMjUwNTNaFw0yNzA1MDIwMjU1NTNaMDMxMTAvBgNV
BAMTKDcxQjMwRTJDMkMyNjMxQ0QzMDBENzk5ODlCMTI0RTM3MUFGNjM4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8m/JLpGnye12UdRxlOl5q1rv+
K1YS2ylIvpsQ85ChKpBlNyrouUoUPsTrjWuN10bTbSo3zb8CXM0T/5LnoFhGcCur
cYFHw0Uupx/XFFPfqga/nXU6eNXWHvIQxgxNTJHBiaSC6TgXXdT7mIDheyOS4bPs
EWn7cMPZescqkGXaSgpjw3DCdlHEvLieY11SHVY/r0K+wKr8PwrZ6V4+gAqThOnt
6p8bGcNjA/HZU7PfOjrcn6SaQB2wa4dK61fLsULza9qyWxBzUxpDV9FApgTVf/JF
g1RL5LLIidl5Az+yGZMaZaiKkeLCTJ8Q27SHyedH/S95ul10eTO+U4o6H1WPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcbMOLCwmMc0wDXmYmxJONxr2OHUwHwYDVR0j
BBgwFoAUl5aTTOmD4y/hasjsCWj7b/AzlxIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTE2MzNiOGUtMGRmOS00NGFjLTljYWUtZDZmNjc2NWE1MmM5LzAvOTc5NjkzNENF
OTgzRTMyRkUxNkFDOEVDMDk2OEZCNkZGMDMzOTcxMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85Nzk2OTM0Q0U5ODNFMzJGRTE2QUM4RUMwOTY4RkI2RkYwMzM5
NzEyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05
Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzkzMDJlMzIzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzMjM2MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdaGzANBgkqhkiG
9w0BAQsFAAOCAQEAX+qFQRRcuB+NK+utumr0wbyPAxiRQmA9IApdvFDStFnARf/n
yGlJArgwl/1w3ukHtRmCPH1aCXt/yJ0RIHtWZwNdSO2MS79rpM46L4XHXkjNrIZC
4lcZZIQjkPEUI7s1xUzbople0xDzhvJwYDElIN8/nfcBlqyhouizEbTKGGz7rBOL
OPIkhn5uf6kdCHNEms9Blcn8IssL9pZ5mOKYI7xZd6rbE0yy4Vh231z2CgSR9Xb5
qxxIINsgMzyFJTrhlKuORLxH/z1m02BUz6CE5drOmG+GJCJ2gz4Ol6Es0/6OFyoT
KHqflM5OmubisQYSGkQd/W7VHZWIE0Pmu7nIwQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:09 2026 by rpki-client