Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          uouUKGbUozmFnKgub/+5mqf8ILo68JfceNZ+JRrYL4g=
Subject key identifier:   D6:19:3E:3B:A5:2F:39:77:C4:76:32:C4:AE:05:25:BA:5E:17:7B:6A
Certificate issuer:       /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial:       2A428CFC75A082A123925ADB767E9E7A2BF2E997
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 03:17:59 +0000
ROA not before:           Sun 03 May 2026 03:12:59 +0000
ROA not after:            Sun 02 May 2027 03:17:59 +0000
asID:                     63497
IP address blocks:        103.134.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
                          rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:42:8c:fc:75:a0:82:a1:23:92:5a:db:76:7e:9e:7a:2b:f2:e9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
        Validity
            Not Before: May  3 03:12:59 2026 GMT
            Not After : May  2 03:17:59 2027 GMT
        Subject: CN=D6193E3BA52F3977C47632C4AE0525BA5E177B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:40:f3:93:69:69:12:23:33:4f:83:40:b9:dc:
                    4d:d0:4a:3f:9f:91:60:b4:2d:55:0e:8f:40:41:08:
                    78:f8:ba:7a:0b:1c:ed:f0:4f:74:fa:6c:60:7e:d5:
                    6d:ad:9b:99:64:22:a7:7a:39:0a:57:e5:db:9f:7a:
                    19:13:fa:e8:24:24:10:2b:b1:ad:34:8d:7b:14:bb:
                    2d:18:bc:32:60:1f:a9:70:d1:76:ca:cb:5f:7c:28:
                    7b:a5:cf:09:9f:b9:01:fb:8b:c5:49:13:52:b6:e2:
                    1e:4b:1a:f4:36:10:e7:c4:37:f5:46:55:4a:0d:1c:
                    cc:f0:62:da:e2:c9:34:0a:61:0e:ee:fa:26:9d:f6:
                    1d:e0:81:27:ee:1d:04:ef:1e:78:6c:05:88:da:99:
                    39:16:ff:12:fd:18:14:57:db:4d:40:31:c4:21:b5:
                    57:a3:1e:b6:ca:ba:b6:d9:da:2b:48:90:70:53:41:
                    8c:be:cc:47:96:b0:8c:75:83:c3:cd:d6:b1:93:0c:
                    65:36:c1:c3:62:1d:ed:18:c5:84:18:27:9e:3b:27:
                    2d:96:86:c0:b7:7f:fc:eb:a2:c0:8f:d3:76:2f:27:
                    1b:c1:d6:7e:29:c2:24:1d:77:c5:bf:1d:36:d6:98:
                    77:e3:19:ee:a9:37:b9:3e:ba:fb:9b:bd:2d:e7:a9:
                    11:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:3E:3B:A5:2F:39:77:C4:76:32:C4:AE:05:25:BA:5E:17:7B:6A
            X509v3 Authority Key Identifier:
                keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130362e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:55:1d:53:75:3a:d8:05:8a:c5:7d:eb:98:71:e1:53:9c:bc:
         a3:8b:45:65:fb:57:87:47:1c:a2:94:30:ee:d5:81:17:80:22:
         c0:6e:2b:cb:11:46:08:27:a9:b9:c1:da:93:e5:54:96:29:90:
         9d:b6:e6:80:2f:74:8c:85:09:b0:6f:32:30:87:2d:20:51:09:
         db:39:5b:e6:1c:76:42:fc:c6:2a:c9:90:f9:75:96:5b:16:1f:
         25:00:1d:b0:20:7f:4c:47:72:21:f9:f7:0e:51:bd:9c:20:ec:
         86:42:23:8b:50:3b:36:e1:c0:f4:2b:38:99:cb:c1:63:58:d4:
         3a:75:3f:95:22:a3:7e:62:cc:c9:d8:0a:98:77:7c:0b:f5:20:
         0e:d6:38:db:17:19:85:03:c9:36:a6:ba:db:85:52:bc:c5:a5:
         89:e0:b7:e8:ca:76:5c:22:7f:21:69:85:c7:ff:6e:14:65:37:
         02:40:d7:cd:eb:2d:1c:5d:5c:6d:84:b5:0e:ab:68:b3:d9:41:
         46:e3:f5:29:29:d1:b1:9c:28:ea:cf:a8:18:8a:e0:07:08:ad:
         b8:8b:c8:14:1f:58:a1:85:f0:fe:98:42:36:bb:5d:bb:fc:16:
         21:e1:10:7c:c0:7a:60:24:b4:f6:59:58:13:e0:07:55:51:ca:
         d3:54:da:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:33:57 2026 by rpki-client