Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235322e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          OVNMe4OE8mfb+ubuXXAIKWm5rCKg5fDWbzjdPw4VCv4=
Subject key identifier:   B8:A6:05:59:63:F6:81:2A:8E:1A:B9:58:A6:81:01:4C:1C:97:FF:2F
Certificate issuer:       /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Certificate serial:       411EA662BD86B95F38386F29EF18A774033112F9
Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa
Signing time:             Sun 03 May 2026 03:10:08 +0000
ROA not before:           Sun 03 May 2026 03:05:08 +0000
ROA not after:            Sun 02 May 2027 03:10:08 +0000
asID:                     38496
IP address blocks:        103.90.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
                          rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:a6:62:bd:86:b9:5f:38:38:6f:29:ef:18:a7:74:03:31:12:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
        Validity
            Not Before: May  3 03:05:08 2026 GMT
            Not After : May  2 03:10:08 2027 GMT
        Subject: CN=B8A6055963F6812A8E1AB958A681014C1C97FF2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:49:76:28:3f:a9:d2:fb:1f:0a:f7:f8:e2:
                    6e:c1:68:a9:8d:e3:78:f2:ad:02:88:22:da:44:89:
                    ee:66:bc:73:c2:bd:00:c5:8b:45:1c:ae:8b:7c:52:
                    1a:0b:6b:db:60:75:31:48:01:1d:6f:c8:b9:91:62:
                    56:56:ec:8f:29:66:a6:39:14:d4:d4:01:07:00:e4:
                    51:65:c1:dc:e6:53:ac:d6:9f:e4:24:57:cc:f8:56:
                    67:55:66:03:c1:15:1c:b8:49:4f:8d:52:3d:fc:70:
                    7f:31:0c:a0:56:28:0c:e6:13:ed:a5:49:34:ab:ec:
                    d1:36:88:6e:ab:09:f2:5e:cd:93:f3:68:48:03:12:
                    42:c9:e1:e5:47:d2:fe:f4:f5:b3:b6:d1:c0:e6:1f:
                    c8:50:35:ce:2d:46:1e:68:8b:fa:9f:52:08:95:eb:
                    99:c8:5a:cf:be:86:47:86:e4:8e:98:c1:e8:05:90:
                    9b:fa:e6:01:49:9f:38:e4:4c:4b:cf:32:19:36:7a:
                    29:de:dd:88:df:a5:ea:7b:a6:ce:07:3b:50:2c:68:
                    10:17:87:82:a1:d1:d8:a6:56:c5:f2:e0:dd:90:77:
                    f0:05:ae:48:19:60:f5:59:e1:c1:ce:84:42:8b:00:
                    5a:83:ce:b0:37:40:05:f6:4d:20:f3:66:49:31:9d:
                    52:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A6:05:59:63:F6:81:2A:8E:1A:B9:58:A6:81:01:4C:1C:97:FF:2F
            X509v3 Authority Key Identifier:
                keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235322e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f6:55:41:d3:70:a5:a1:30:d7:d2:01:02:0b:ab:1b:dc:40:
         a2:8e:f2:ba:2c:66:0f:5c:bb:0b:51:13:d3:74:59:ad:9f:d6:
         8a:4c:4d:89:70:f7:62:bb:53:7f:0c:a9:ea:3c:61:d2:13:96:
         2a:39:16:af:89:08:c3:9a:7e:de:cf:dd:7e:30:61:1b:e3:cb:
         b1:be:93:fb:44:91:dd:14:86:96:67:e5:ae:c0:3c:65:9e:57:
         a8:2d:93:19:04:0b:eb:d8:e9:42:e0:51:af:53:5b:d0:f2:48:
         86:3b:ce:4c:90:63:c2:e6:f6:a5:3e:c9:99:59:df:a8:bc:84:
         cc:a9:5c:b8:87:64:12:0e:52:af:8a:c9:1d:7c:e4:bb:39:37:
         2b:b2:34:8b:9e:c9:d0:73:7f:25:40:3e:e8:4d:54:14:dc:d2:
         83:10:ac:66:b0:a7:84:7b:32:7e:05:b9:e1:58:1e:5a:e9:8d:
         20:4b:ac:8a:b3:2a:33:ae:ff:92:0c:33:69:f0:be:88:df:c0:
         26:51:7b:bb:b8:75:b7:a8:66:03:b1:5d:eb:35:c3:62:78:23:
         90:b0:a5:51:f6:c3:78:45:97:97:76:1e:32:4a:bd:f9:aa:24:
         5d:17:ad:aa:59:b7:06:c4:53:03:96:a7:c4:77:34:77:b3:a0:
         7b:39:f9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:14:54 2026 by rpki-client