Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa
File:                     3130332e39302e36372e302f32342d3234203d3e20313530323635.roa (raw, json)
Hash identifier:          CHKJIH+fJABznZsBmBVESLsgPUznf5glQmQTYMsLlJ0=
Subject key identifier:   82:B6:85:8A:E5:E1:6E:E8:18:A3:AF:07:45:81:B8:23:5B:5A:16:1B
Certificate issuer:       /CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
Certificate serial:       573236600041666C03A267CFE4DC214456C57B4D
Authority key identifier: CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa
Signing time:             Sun 03 May 2026 03:06:39 +0000
ROA not before:           Sun 03 May 2026 03:01:39 +0000
ROA not after:            Sun 02 May 2027 03:06:39 +0000
asID:                     150265
IP address blocks:        103.90.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl
                          rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:32:36:60:00:41:66:6c:03:a2:67:cf:e4:dc:21:44:56:c5:7b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE939C5ADA901584E90071FB7E50664FC20EAE0
        Validity
            Not Before: May  3 03:01:39 2026 GMT
            Not After : May  2 03:06:39 2027 GMT
        Subject: CN=82B6858AE5E16EE818A3AF074581B8235B5A161B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:74:73:3f:e6:83:b6:5e:d3:07:a6:19:76:
                    bb:04:21:33:40:4a:88:ff:13:9c:4f:53:86:ed:71:
                    e5:5d:db:27:52:f0:22:24:39:49:41:f1:23:43:80:
                    c0:06:e9:16:76:5a:e9:7b:a0:c6:f2:0f:5c:d5:74:
                    b7:5e:cd:8f:9c:42:16:3a:89:dc:eb:f8:e8:94:fe:
                    79:18:51:5a:bc:27:20:cd:cf:26:62:67:59:43:18:
                    f8:60:6a:bd:2d:22:b8:e0:16:db:99:34:f9:9f:1a:
                    da:90:ac:23:24:02:b5:c3:c6:00:ce:ce:d6:32:b6:
                    46:49:06:4d:1b:1e:4c:d2:95:43:28:0b:bf:0e:0d:
                    d9:13:e1:60:69:e8:cf:0c:24:24:59:ba:9b:37:5b:
                    ac:fd:79:e9:88:00:58:aa:fb:15:af:31:6a:52:c0:
                    82:a7:28:9f:e4:a4:aa:fe:9c:74:dc:d7:15:4b:ab:
                    3f:b4:fa:50:97:16:cb:04:1f:a3:82:5b:6d:94:f3:
                    25:20:b2:bf:78:bd:f5:2a:60:83:8a:4a:c6:8c:a5:
                    d7:40:a4:d5:a5:9b:51:81:d7:fd:f2:e6:e8:6e:34:
                    f0:e8:ec:ff:10:19:ce:60:5e:6a:9a:85:f7:c2:f2:
                    07:ee:0e:f9:81:92:44:5d:6e:5f:5c:74:45:9d:76:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B6:85:8A:E5:E1:6E:E8:18:A3:AF:07:45:81:B8:23:5B:5A:16:1B
            X509v3 Authority Key Identifier:
                keyid:CA:E9:39:C5:AD:A9:01:58:4E:90:07:1F:B7:E5:06:64:FC:20:EA:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/CAE939C5ADA901584E90071FB7E50664FC20EAE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CAE939C5ADA901584E90071FB7E50664FC20EAE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c9f3c769-cfb1-4206-9f54-c0587e63ba5b/0/3130332e39302e36372e302f32342d3234203d3e20313530323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:25:ed:be:91:79:de:18:ce:98:3b:ae:0c:b2:a5:0e:8c:fe:
         6f:04:45:30:92:72:d2:7e:43:4e:e2:5a:c1:7b:55:63:f4:74:
         34:87:89:36:23:ca:06:33:eb:3d:00:57:03:e9:7c:01:39:c1:
         70:47:19:e5:ef:8b:65:aa:6b:cc:0f:bb:16:c6:d8:6e:11:f7:
         43:08:b8:d6:fa:71:f8:3d:ae:72:ca:98:8b:eb:2f:e3:07:4e:
         37:b0:02:08:fd:c7:a6:9b:05:58:5a:2f:aa:b7:84:d5:48:37:
         5b:5a:d8:39:70:20:5a:5a:2d:af:b3:3d:b5:27:55:fb:27:65:
         11:6f:0c:86:db:ce:09:f9:3a:6f:d0:e1:c5:96:ca:21:bd:55:
         f0:05:6c:18:61:ae:d8:d1:93:59:39:71:d9:aa:9a:96:e3:e1:
         02:da:ee:bd:f8:32:db:5e:df:aa:d3:f5:cd:20:b9:35:63:a8:
         f9:07:9c:76:d8:1b:80:47:73:f4:30:2b:56:5c:2f:ee:a2:06:
         bd:e1:56:ea:a0:bc:b5:32:1f:22:be:ce:e1:4c:fa:f3:b9:ef:
         63:75:3c:e7:c0:df:65:b5:97:50:91:46:09:25:8e:97:08:cd:
         8e:ae:8d:ab:95:69:a3:cf:2b:10:08:c4:be:96:b0:5b:93:f2:
         99:75:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:22 2026 by rpki-client