Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          OOoHvJFdkLhmptHnukqX1ww9TIfJj00AYl9UOR0Cn10=
Subject key identifier:   90:18:49:2E:CB:EF:63:46:CE:7C:3C:FE:17:93:01:24:2D:5F:07:97
Certificate issuer:       /CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
Certificate serial:       722BB6765377BD4748045204A4B938D5C5806463
Authority key identifier: AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa
Signing time:             Sun 03 May 2026 03:10:08 +0000
ROA not before:           Sun 03 May 2026 03:05:08 +0000
ROA not after:            Sun 02 May 2027 03:10:08 +0000
asID:                     38496
IP address blocks:        103.90.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl
                          rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2b:b6:76:53:77:bd:47:48:04:52:04:a4:b9:38:d5:c5:80:64:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E
        Validity
            Not Before: May  3 03:05:08 2026 GMT
            Not After : May  2 03:10:08 2027 GMT
        Subject: CN=9018492ECBEF6346CE7C3CFE179301242D5F0797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:5b:b5:67:5a:3b:70:8d:66:b9:50:a8:f2:
                    42:de:15:f8:5b:43:fd:77:0c:a8:8c:a2:aa:4e:80:
                    01:7f:7f:17:18:c0:f2:2c:c7:4c:1f:51:b8:39:9b:
                    db:ea:e7:2f:8e:75:66:9e:e6:f3:36:72:83:85:ce:
                    93:ce:79:a8:ef:3b:14:f0:62:79:14:7a:66:93:21:
                    d6:cc:a4:be:5a:9e:0f:53:fa:f7:ee:3c:fe:94:4b:
                    a1:42:ef:02:10:01:b8:3b:8f:42:ec:9d:48:c2:5d:
                    59:5b:25:c7:f2:67:a1:b0:3d:ab:d7:d2:6c:63:4e:
                    b5:67:0b:4d:35:81:bf:cc:b0:ea:59:09:a6:de:0e:
                    43:f7:09:82:68:4d:17:7c:de:81:da:63:eb:c9:14:
                    14:2e:98:46:40:a7:97:b1:89:7f:9b:1d:88:61:40:
                    0e:2b:51:50:f0:24:0a:dd:66:fe:e0:dd:52:0d:6c:
                    9d:01:46:cc:e3:66:3a:c5:74:7b:94:12:0a:5d:d4:
                    f8:17:19:0d:cf:87:32:e2:2d:62:a8:b0:ed:59:2d:
                    75:1e:eb:3e:b8:77:b9:96:ae:59:99:5b:cd:1a:f9:
                    74:9a:e2:c3:c0:da:2f:62:c3:e7:37:2b:2c:0e:e7:
                    96:bc:a0:6e:7b:fb:1e:2d:dd:93:e9:bd:e1:cb:d1:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:49:2E:CB:EF:63:46:CE:7C:3C:FE:17:93:01:24:2D:5F:07:97
            X509v3 Authority Key Identifier:
                keyid:AD:FA:BE:38:0A:65:09:F0:AE:19:F5:F9:ED:87:C1:F0:A0:A5:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/ADFABE380A6509F0AE19F5F9ED87C1F0A0A56C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:8e:b8:66:7a:44:3b:23:4c:a0:32:2d:82:b0:e5:80:4e:c5:
         0e:da:51:6f:7f:01:0a:e0:3b:00:20:0c:d3:10:bc:67:fe:b8:
         4d:a3:16:8c:e3:2e:e3:65:b0:bb:e7:2d:bb:4c:56:f4:43:f2:
         a1:99:85:88:96:6c:51:e2:66:35:55:32:be:43:73:54:ab:47:
         85:ae:2e:95:10:63:10:97:30:70:48:57:61:2d:5a:95:6c:25:
         fc:be:f9:19:a3:99:7f:b6:b1:45:ef:34:38:86:b4:05:e0:56:
         99:e4:7c:b0:79:ab:80:ac:5b:8a:ac:09:ed:b9:3a:d0:18:c2:
         90:b6:09:3a:38:47:90:91:77:74:cf:f1:d9:2e:df:70:d3:35:
         fa:44:f8:05:da:05:85:0a:f7:8d:4a:a0:c3:08:db:83:78:72:
         57:75:95:31:19:c4:53:dd:ba:16:08:43:76:c3:ce:e3:a1:54:
         88:52:d9:95:df:c5:63:54:5d:b9:c0:85:ab:ca:d0:ad:c5:73:
         aa:cb:4b:1d:7f:6a:b5:2a:84:b5:cd:47:58:f1:a0:b6:a0:6f:
         95:ea:c8:50:68:88:bd:52:27:21:69:ae:78:03:d8:b2:36:94:
         ff:3b:0b:78:0c:c4:e7:c1:a0:65:c7:3a:5a:6e:24:13:1e:ab:
         d7:b8:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:28 2026 by rpki-client