Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          KvOleZIfcn6EoZkKf6ZdFcLhmThnSWrW2/dXX/n7URA=
Subject key identifier:   CA:36:35:ED:7A:70:7D:D7:45:6E:7C:CD:01:11:65:44:34:DA:89:89
Certificate issuer:       /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial:       54F95AC910ACB57839253BEC69681970C6B49762
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 03:18:00 +0000
ROA not before:           Sun 03 May 2026 03:13:00 +0000
ROA not after:            Sun 02 May 2027 03:18:00 +0000
asID:                     63497
IP address blocks:        103.134.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
                          rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f9:5a:c9:10:ac:b5:78:39:25:3b:ec:69:68:19:70:c6:b4:97:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
        Validity
            Not Before: May  3 03:13:00 2026 GMT
            Not After : May  2 03:18:00 2027 GMT
        Subject: CN=CA3635ED7A707DD7456E7CCD0111654434DA8989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:10:62:35:a2:2f:f1:d0:fc:f2:29:ba:9d:
                    04:b6:00:63:7c:1c:d6:bc:ad:87:7b:d2:04:bb:71:
                    ff:c5:8c:39:34:2c:c2:53:7a:95:17:b9:8f:04:34:
                    33:88:7c:60:70:18:a9:fb:ff:4c:62:25:b7:ba:eb:
                    25:c9:c0:99:7d:f4:3c:e2:dd:2d:b2:8d:af:c8:ac:
                    7d:81:d2:22:03:c3:c8:79:85:b5:ab:f2:73:5c:40:
                    79:88:6a:ba:08:d7:61:1f:2a:53:85:7c:e2:99:bc:
                    73:0b:c7:23:45:39:7d:05:cd:9f:5a:7b:ae:6f:51:
                    8d:7b:46:12:4e:4d:c4:03:7e:05:ab:c9:ec:d6:1c:
                    b2:63:3b:8a:a3:fa:4e:30:66:dd:9a:bf:f6:25:e3:
                    e1:7f:a8:b3:d5:cf:1f:db:8a:0a:78:0c:16:b0:ea:
                    c2:a7:8c:47:17:69:f1:70:e8:32:34:a2:62:d7:a9:
                    9b:73:cf:e7:45:e8:b6:04:bd:85:a4:02:39:31:44:
                    17:43:71:0f:23:47:63:1f:45:cd:b0:4e:e4:fe:2e:
                    d5:3e:a0:0a:19:ad:13:62:23:e3:fe:45:22:1e:e0:
                    87:36:30:00:55:05:97:b5:fb:c1:d7:89:00:38:aa:
                    6b:cd:eb:6f:9c:23:e3:ae:99:03:22:98:79:8f:19:
                    b5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:36:35:ED:7A:70:7D:D7:45:6E:7C:CD:01:11:65:44:34:DA:89:89
            X509v3 Authority Key Identifier:
                keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130342e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:ae:47:2c:4a:b8:3d:63:d3:8e:38:0b:d4:c8:eb:49:e3:
         1e:14:b4:87:fa:a7:07:20:75:f0:d3:6b:54:dc:f2:51:4a:24:
         6b:04:94:e3:18:be:7a:4e:d9:82:cf:19:7b:11:df:14:46:b7:
         ef:fa:f2:12:4d:67:2e:d8:76:16:c8:fa:c9:fe:c2:a1:23:41:
         0c:e0:0d:2b:20:d4:30:ea:2b:38:cc:c4:a1:d1:d7:8f:f8:d9:
         d2:46:c3:23:91:dd:7c:91:65:07:52:e3:28:0c:7d:d3:c9:09:
         d6:a9:fc:7e:fc:dc:7e:9c:3d:26:c4:8a:2a:00:e5:0f:e7:4a:
         4f:6b:c4:f6:2b:fa:0d:81:fd:31:e5:95:29:c6:73:6e:ad:8d:
         1b:40:54:51:ee:c2:37:7c:0c:69:6a:8c:99:76:b4:97:61:12:
         3c:46:84:f4:16:9a:30:4a:fe:e7:94:cf:6e:5f:c0:e4:d9:c9:
         40:47:9a:38:9d:2d:f9:18:ee:78:2e:ff:97:c8:8f:84:67:70:
         2e:fb:a3:34:d6:a2:0c:dc:2f:6d:a0:06:2a:1f:c4:70:36:c9:
         92:6e:4e:1e:ff:ba:b6:e3:dd:90:f3:0e:4f:07:5e:ae:50:d8:
         1a:17:53:63:05:40:25:1b:ae:b7:e4:fe:bf:b7:aa:43:17:1f:
         91:49:9e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:01 2026 by rpki-client