Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
File:                     3130332e39302e36362e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          mWR29teFlpS2QFv6Te8ENnUPdsf5nVL4GnQAxRUQqGI=
Subject key identifier:   CB:3E:B9:FF:3C:E9:AB:01:59:84:34:B1:8B:D7:89:57:73:F4:79:F8
Certificate issuer:       /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
Certificate serial:       2F24CE759DE1D1B6290D1501709965061B75FFC2
Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa
Signing time:             Sun 03 May 2026 03:06:39 +0000
ROA not before:           Sun 03 May 2026 03:01:39 +0000
ROA not after:            Sun 02 May 2027 03:06:39 +0000
asID:                     150265
IP address blocks:        103.90.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl
                          rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:24:ce:75:9d:e1:d1:b6:29:0d:15:01:70:99:65:06:1b:75:ff:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
        Validity
            Not Before: May  3 03:01:39 2026 GMT
            Not After : May  2 03:06:39 2027 GMT
        Subject: CN=CB3EB9FF3CE9AB01598434B18BD7895773F479F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:56:02:1c:6c:ca:2c:17:d4:f3:a7:0c:85:
                    5a:0d:58:38:0b:c2:6f:99:f6:1d:ea:4f:a2:04:39:
                    b8:d9:d0:bd:21:37:d3:85:38:e3:0c:d4:8f:ec:8d:
                    e6:7a:f1:78:bc:a3:e1:f7:77:f3:20:4c:3d:65:fb:
                    60:8c:d5:9d:c5:c3:2f:91:15:a4:7f:fb:18:39:d3:
                    7e:f2:7d:90:13:23:72:08:33:b4:4e:de:fa:94:9a:
                    4a:bc:85:63:98:0e:c2:a6:f6:5d:99:a4:ba:6e:35:
                    26:cd:1f:ec:16:23:ea:df:b4:6e:54:83:3d:9a:f3:
                    bb:75:fb:05:88:9d:77:15:64:a8:fc:5e:5f:2b:9a:
                    6a:82:2f:ca:dc:82:ed:9b:11:89:87:8e:2a:8c:69:
                    8d:ce:f8:e5:6b:0d:34:7a:5d:fd:c3:b0:f3:fe:c7:
                    b5:6e:f1:90:36:9f:1b:ca:94:9a:f3:47:06:32:32:
                    81:e2:10:46:54:f1:34:d7:a3:7e:e6:58:91:c2:6c:
                    35:f0:db:31:22:8e:02:b8:b8:75:eb:bf:3b:f2:ae:
                    da:31:a8:c3:2e:3c:26:d8:29:96:02:13:71:c7:fa:
                    40:d5:77:e6:cf:aa:6a:72:64:f9:28:da:58:e2:4e:
                    88:55:cb:6b:a3:bf:a6:98:16:f2:6e:42:71:8e:ae:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3E:B9:FF:3C:E9:AB:01:59:84:34:B1:8B:D7:89:57:73:F4:79:F8
            X509v3 Authority Key Identifier:
                keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36362e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:c7:fa:eb:b9:f0:d0:b0:22:c4:c2:7a:b2:c5:55:43:69:
         32:69:b7:7e:90:ed:75:86:6c:73:95:2c:83:10:6a:b3:6d:23:
         1e:22:68:1c:b0:88:8a:68:1c:90:5c:4b:fd:3f:dd:ac:79:96:
         53:66:79:6c:1c:68:09:a8:de:fd:14:28:05:d2:e9:07:67:51:
         33:52:86:4a:b9:e6:c8:d4:b6:f8:31:62:4f:ff:0d:89:63:a3:
         60:7d:5d:7b:66:bf:67:2e:9e:09:8a:b4:04:73:2d:f2:c3:a7:
         de:1d:f7:5a:71:1b:25:a9:1a:65:88:7f:34:52:6d:e6:cd:99:
         e3:ab:5c:ca:27:f4:16:1c:8e:27:e0:e1:fb:c3:b1:47:4f:f8:
         b8:1e:35:d3:71:5c:f4:8c:03:14:7d:0e:56:80:cc:6b:16:9a:
         84:6c:9c:27:db:bb:44:59:75:20:b8:4b:92:00:82:a1:0b:e2:
         05:29:15:01:da:7f:3b:15:3d:5a:88:81:75:de:c8:fb:c6:62:
         0c:d3:b1:89:d8:a9:20:3c:e2:13:b3:2b:f2:f1:80:a2:36:92:
         26:93:1a:4d:44:1e:a1:6f:8f:79:15:51:8a:ab:e5:2f:4d:ed:
         21:db:23:41:a3:ec:05:d0:f3:5e:0d:ca:95:38:d5:f9:79:40:
         8d:70:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:37 2026 by rpki-client