Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235332e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          uu/0xcXb1PYlNEUXcZ5naLQoAfY3PIEB9peDrBii6OE=
Subject key identifier:   6A:B6:C9:98:24:21:9D:2F:F6:88:DA:C7:29:9D:CD:37:83:B4:0A:D1
Certificate issuer:       /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Certificate serial:       7CEF59B48167BD832418162AAE04C4B9487B39D4
Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa
Signing time:             Sun 03 May 2026 03:10:08 +0000
ROA not before:           Sun 03 May 2026 03:05:08 +0000
ROA not after:            Sun 02 May 2027 03:10:08 +0000
asID:                     38496
IP address blocks:        103.90.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
                          rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:ef:59:b4:81:67:bd:83:24:18:16:2a:ae:04:c4:b9:48:7b:39:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
        Validity
            Not Before: May  3 03:05:08 2026 GMT
            Not After : May  2 03:10:08 2027 GMT
        Subject: CN=6AB6C99824219D2FF688DAC7299DCD3783B40AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:31:89:f2:2c:c4:51:bd:6d:90:9d:ba:a1:
                    36:66:3a:cc:c3:97:f4:46:e0:8f:b6:be:8b:fc:f5:
                    ea:43:6f:da:2b:a6:9f:97:f9:d3:a7:bc:e0:ca:9e:
                    63:3e:dc:7f:aa:67:fd:19:df:97:fa:5e:0d:e8:ea:
                    25:8a:2d:e6:b1:45:e2:70:ca:66:62:04:ba:3c:68:
                    67:da:2f:ff:50:10:88:51:87:56:e6:6c:5d:66:ce:
                    d3:74:dc:76:f0:1e:6c:32:b8:5a:47:0e:4e:fb:0f:
                    af:26:92:ba:3b:e2:f5:73:98:b5:8b:00:cf:98:8c:
                    c1:54:0d:f6:a1:6d:53:cb:e3:fe:f5:b2:8b:db:7b:
                    39:53:14:bf:f2:ca:82:e6:97:75:3c:05:dd:8e:d4:
                    b8:76:42:87:c3:ce:be:96:e0:c0:56:ff:fb:a1:ea:
                    f3:63:fa:45:01:71:42:ad:ae:a8:73:3f:73:50:7c:
                    b0:c8:a5:ec:4e:3d:69:55:58:c6:14:c9:22:41:c9:
                    cc:9f:0c:65:bb:55:11:21:0c:e1:80:04:e6:fb:11:
                    1c:d1:54:e5:24:3d:a6:3f:9d:0a:28:d9:8e:01:ff:
                    25:f1:e8:0e:ee:5a:52:e2:e0:f4:16:56:c0:e6:c8:
                    4d:7f:6d:cd:03:10:5b:ed:7f:12:86:a3:b4:97:d4:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:C9:98:24:21:9D:2F:F6:88:DA:C7:29:9D:CD:37:83:B4:0A:D1
            X509v3 Authority Key Identifier:
                keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235332e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:f9:65:d4:2b:a1:db:61:1d:07:1e:db:d5:b4:5d:56:34:51:
         ec:81:7d:30:1d:b6:c7:6c:a4:d0:64:12:db:4f:a8:9d:1e:43:
         de:ff:52:fe:2a:d4:38:38:1f:73:f4:15:e5:3a:76:f0:a3:e3:
         d3:1b:0f:a9:a8:0e:06:c3:06:9c:1d:6a:fe:7b:7d:2f:78:6e:
         f3:b5:08:20:0d:8e:ad:4b:38:08:65:49:51:5a:8a:0a:3b:45:
         aa:7f:79:c2:93:68:64:fa:9b:ed:c5:8a:97:70:3b:5b:e9:98:
         63:ee:77:a3:c8:86:03:12:56:4f:c5:7d:50:ea:80:5e:b1:d9:
         4f:dc:25:62:1b:91:98:54:d8:1d:27:d2:2e:25:1a:37:fe:4a:
         4b:56:0c:7b:fe:cc:c6:5f:16:56:7d:b8:37:61:d1:b8:17:78:
         11:65:6c:ba:30:e7:23:37:e4:88:10:47:10:07:8a:3f:3f:22:
         0f:7f:aa:30:25:75:38:d0:5f:28:13:71:fd:93:39:af:be:b8:
         93:8f:34:34:18:e6:d3:c3:cc:8a:c3:46:70:d6:c4:aa:43:de:
         e5:7a:23:02:32:13:89:d6:50:4c:e4:fe:79:52:fd:de:56:50:
         9b:a1:bb:76:e8:a4:55:e7:1d:a3:45:12:0c:b4:ce:f7:91:2c:
         5e:13:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:28:43 2026 by rpki-client