Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa
File:                     3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa (raw, json)
Hash identifier:          FSyjqZtd8XDVrxqAKcbaFrMIwjpkZU6OHpA9ABCfhcY=
Subject key identifier:   3B:96:31:44:B1:48:12:DF:FC:C2:21:5D:6F:8E:4C:D6:F7:73:1C:9C
Certificate issuer:       /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial:       35A2017B11A91A078E7059ABEB296FA02BBA628B
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa
Signing time:             Sun 03 May 2026 03:17:59 +0000
ROA not before:           Sun 03 May 2026 03:12:59 +0000
ROA not after:            Sun 02 May 2027 03:17:59 +0000
asID:                     63497
IP address blocks:        103.134.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
                          rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a2:01:7b:11:a9:1a:07:8e:70:59:ab:eb:29:6f:a0:2b:ba:62:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
        Validity
            Not Before: May  3 03:12:59 2026 GMT
            Not After : May  2 03:17:59 2027 GMT
        Subject: CN=3B963144B14812DFFCC2215D6F8E4CD6F7731C9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4d:58:27:c8:b8:f7:6b:05:ad:68:a7:b5:6b:
                    77:d8:e5:b1:4a:a4:d9:0c:d9:c7:a1:c6:d9:da:2e:
                    c1:d7:87:bb:c2:63:09:98:b5:bd:ec:e3:91:db:b7:
                    5e:ee:44:36:72:ac:d7:70:d0:b6:36:22:5a:32:27:
                    5d:eb:f4:fa:97:ca:45:00:6c:94:1f:9e:ed:97:68:
                    93:d4:81:ce:be:86:5e:f2:92:7e:f8:ec:9e:15:3f:
                    bb:6b:80:55:bd:8b:ed:c2:fc:85:6e:4d:10:da:73:
                    e6:21:4b:93:fc:3e:ba:b7:ba:94:1f:4d:45:94:12:
                    ee:3f:27:46:14:76:f0:40:3c:16:55:98:bc:a5:b8:
                    2d:ad:4b:26:6b:f1:a6:66:1d:ba:1a:b8:31:e9:7e:
                    0d:f6:f6:7b:f4:5e:0a:e6:f3:7c:b4:7f:bb:8d:ec:
                    8f:7c:6e:93:ae:f6:5d:58:58:21:2f:68:90:89:23:
                    7f:84:77:98:34:b4:64:64:5b:64:26:3f:a7:e6:9e:
                    31:50:fa:e4:66:03:88:94:09:f2:5e:a8:5f:af:18:
                    57:63:4a:7e:dd:ea:52:a9:52:87:5f:1c:98:6f:2a:
                    79:f3:5e:4b:0d:12:8f:76:29:6c:4a:66:05:02:0f:
                    39:06:16:68:3b:73:16:d6:6d:b8:fc:6e:d4:05:84:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:31:44:B1:48:12:DF:FC:C2:21:5D:6F:8E:4C:D6:F7:73:1C:9C
            X509v3 Authority Key Identifier:
                keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32332d3233203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:d7:ce:e2:a6:7b:47:b6:6d:e0:f0:53:d1:c9:fb:fa:e7:
         69:40:3f:e0:be:25:ce:5e:34:95:7e:2e:0e:91:b1:2e:14:16:
         cd:e9:35:2e:ab:84:ee:a4:40:02:df:41:18:84:26:7e:7a:89:
         73:f1:eb:59:c6:b2:5a:fb:b0:7a:58:22:5e:a2:b7:e0:ff:d4:
         19:eb:c9:56:b0:64:07:e4:b7:4c:a2:55:42:75:f3:e9:b8:97:
         24:2e:e3:98:ed:67:bd:ad:88:c4:2a:7a:f1:0a:c5:cf:89:49:
         e8:11:89:7a:7b:f8:c7:c0:f0:96:b0:13:69:0c:48:7a:bf:9f:
         c1:a8:51:8f:d8:bc:10:69:f5:aa:34:45:16:3e:47:54:ee:e4:
         21:41:4d:15:fb:96:06:15:fd:4b:79:fb:89:3d:9b:51:ca:40:
         f6:4f:89:6a:66:33:18:e9:79:bc:a9:90:08:d4:ba:26:d0:5a:
         58:c3:15:74:95:d0:81:57:59:9d:db:7f:64:6d:04:1b:25:d5:
         04:46:e6:67:49:d3:bc:06:51:fc:d1:92:d3:b1:c4:b5:69:2c:
         68:33:78:a5:3e:d7:99:5f:7f:c1:54:c6:76:64:fc:60:92:24:
         3e:05:3b:17:cd:13:55:bc:f0:26:6b:3f:26:fc:d5:61:00:17:
         d8:51:3e:f4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNaIBexGpGgeOcFmr6ylvoCu6YoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDM0JDNjZBQTc0NUM5RUE4REE5RDgxNUFEN0JGNEJG
MkRFNUU1RDAeFw0yNjA1MDMwMzEyNTlaFw0yNzA1MDIwMzE3NTlaMDMxMTAvBgNV
BAMTKDNCOTYzMTQ0QjE0ODEyREZGQ0MyMjE1RDZGOEU0Q0Q2Rjc3MzFDOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwTVgnyLj3awWtaKe1a3fY5bFK
pNkM2cehxtnaLsHXh7vCYwmYtb3s45Hbt17uRDZyrNdw0LY2IloyJ13r9PqXykUA
bJQfnu2XaJPUgc6+hl7ykn747J4VP7trgFW9i+3C/IVuTRDac+YhS5P8Prq3upQf
TUWUEu4/J0YUdvBAPBZVmLyluC2tSyZr8aZmHboauDHpfg329nv0Xgrm83y0f7uN
7I98bpOu9l1YWCEvaJCJI3+Ed5g0tGRkW2QmP6fmnjFQ+uRmA4iUCfJeqF+vGFdj
Sn7d6lKpUodfHJhvKnnzXksNEo92KWxKZgUCDzkGFmg7cxbWbbj8btQFhLKjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUO5YxRLFIEt/8wiFdb45M1vdzHJwwHwYDVR0j
BBgwFoAUkMO8Zqp0XJ6o2p2BWte/S/LeXl0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZjZiNWFlMWUtYmU2Ni00YTMwLWE5NDgtN2Q0NzhjMjJlYTJiLzAvOTBDM0JDNjZB
QTc0NUM5RUE4REE5RDgxNUFEN0JGNEJGMkRFNUU1RC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MEMzQkM2NkFBNzQ1QzlFQThEQTlEODE1QUQ3QkY0QkYyREU1
RTVELmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y2YjVhZTFlLWJlNjYtNGEzMC1h
OTQ4LTdkNDc4YzIyZWEyYi8wLzMxMzAzMzJlMzEzMzM0MmUzMTMwMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4ZoMA0GCSqG
SIb3DQEBCwUAA4IBAQAbFNfO4qZ7R7Zt4PBT0cn7+udpQD/gviXOXjSVfi4OkbEu
FBbN6TUuq4TupEAC30EYhCZ+eolz8etZxrJa+7B6WCJeorfg/9QZ68lWsGQH5LdM
olVCdfPpuJckLuOY7We9rYjEKnrxCsXPiUnoEYl6e/jHwPCWsBNpDEh6v5/BqFGP
2LwQafWqNEUWPkdU7uQhQU0V+5YGFf1LefuJPZtRykD2T4lqZjMY6Xm8qZAI1Lom
0FpYwxV0ldCBV1md239kbQQbJdUERuZnSdO8BlH80ZLTscS1aSxoM3ilPteZX3/B
VMZ2ZPxgkiQ+BTsXzRNVvPAmaz8m/NVhABfYUT70
-----END CERTIFICATE-----
Generated at Wed May 13 02:34:28 2026 by rpki-client