Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa
File:                     3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          k5tpWx2NqoJhL6Gv4Q6AOH3uxzUVB7/CghrllRzLLUQ=
Subject key identifier:   55:17:50:B7:61:9A:D9:1D:57:01:A1:B2:EA:11:21:26:A1:58:78:96
Certificate issuer:       /CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
Certificate serial:       08BC941BA9E7D0C506EFE4DF23476CB8CB628B77
Authority key identifier: 90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa
Signing time:             Sun 03 May 2026 03:18:00 +0000
ROA not before:           Sun 03 May 2026 03:13:00 +0000
ROA not after:            Sun 02 May 2027 03:18:00 +0000
asID:                     63497
IP address blocks:        103.134.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl
                          rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:bc:94:1b:a9:e7:d0:c5:06:ef:e4:df:23:47:6c:b8:cb:62:8b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D
        Validity
            Not Before: May  3 03:13:00 2026 GMT
            Not After : May  2 03:18:00 2027 GMT
        Subject: CN=551750B7619AD91D5701A1B2EA112126A1587896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:c0:59:26:07:e5:ae:f8:35:51:ff:2d:5c:
                    ae:5c:4e:90:91:a5:61:8b:c8:b6:d4:c2:65:5e:aa:
                    7b:a9:5e:4e:0f:6f:d6:c2:cb:b9:32:ef:8e:5e:38:
                    cd:6a:5e:c0:c2:36:dd:6c:80:7a:d0:88:b7:f1:dd:
                    60:47:4e:56:14:1e:31:3f:ab:82:2e:f7:15:f7:6d:
                    ef:b0:88:8a:3d:1d:13:05:89:bf:3a:58:31:92:de:
                    53:f7:78:01:b3:34:32:05:79:28:90:7c:cc:11:74:
                    37:72:48:eb:67:d7:53:05:be:d5:6c:47:90:22:6c:
                    70:ef:c3:3f:bc:44:2d:46:f4:37:4d:d8:ab:85:0e:
                    41:29:9f:60:f9:fd:41:f3:cc:8e:39:a4:e6:7f:eb:
                    63:08:62:2f:21:2c:76:53:f8:2d:97:8a:97:23:a7:
                    d5:de:c0:26:29:09:a1:e1:70:11:5c:01:d0:4e:38:
                    00:d6:62:13:27:fb:a6:85:a2:8a:92:eb:3b:40:c5:
                    dc:8e:76:e8:9b:28:9d:e3:6f:11:b9:97:79:aa:5c:
                    7d:cc:9e:7d:5d:0f:f6:85:02:1b:d9:77:a7:38:28:
                    b4:2b:12:9a:96:b7:ac:f4:84:a0:69:f6:2a:b0:f6:
                    79:ee:60:4c:4f:d5:73:4a:89:f7:0d:68:40:54:da:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:17:50:B7:61:9A:D9:1D:57:01:A1:B2:EA:11:21:26:A1:58:78:96
            X509v3 Authority Key Identifier:
                keyid:90:C3:BC:66:AA:74:5C:9E:A8:DA:9D:81:5A:D7:BF:4B:F2:DE:5E:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90C3BC66AA745C9EA8DA9D815AD7BF4BF2DE5E5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f6b5ae1e-be66-4a30-a948-7d478c22ea2b/0/3130332e3133342e3130372e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:f7:7c:56:31:b0:1d:65:a7:e3:14:5c:a1:21:07:f1:db:
         fe:5e:b5:e5:24:3d:56:6e:41:b0:af:9d:06:2a:15:57:c1:65:
         b0:57:bf:f8:85:19:4c:62:3e:be:a4:9a:6a:ba:d8:40:2d:83:
         14:b6:6d:57:41:26:58:d3:5a:46:24:f2:1a:b8:34:e7:39:5a:
         39:47:b0:c6:84:0c:d7:43:42:af:9d:e8:ac:ac:0a:35:cf:88:
         d8:1f:4f:14:31:1c:9d:1c:ac:6f:12:fb:76:90:71:31:cc:d9:
         b0:2b:c2:03:93:ec:e3:1f:aa:0a:e4:36:eb:ec:49:08:ee:c3:
         11:c7:da:69:8b:2d:ec:b4:fb:51:af:c3:ff:ec:e4:62:c7:fa:
         d0:f1:cb:aa:23:ba:bf:66:ff:c2:69:8e:23:a8:0e:97:16:17:
         1a:44:45:a7:03:25:b2:ab:67:45:1c:48:e5:56:b5:4c:a9:ab:
         32:00:7a:e3:78:f3:1a:4f:7a:72:88:f6:44:37:a2:e4:0b:5e:
         1c:7b:ad:27:3a:4d:4e:da:56:5a:89:ed:52:61:2b:c4:71:24:
         4e:02:60:66:eb:64:ef:1b:17:e9:81:41:e8:73:d5:3a:a3:60:
         37:e6:d5:df:fa:de:c1:9c:ba:36:12:bb:95:ea:f6:60:6f:18:
         4e:f9:bc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:04 2026 by rpki-client