Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
File:                     3130332e39302e36322e302f32342d3234203d3e203633353038.roa (raw, json)
Hash identifier:          Uy+ajDGX9/cC+n7NYziQ7Kjk71Ct0cfoPErhDEsQa8k=
Subject key identifier:   B6:3A:31:C0:A3:5D:34:25:03:C2:75:53:11:71:04:CD:DA:FB:CB:E5
Certificate issuer:       /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
Certificate serial:       3EA2CA100E524562BA193B66EE4EF3A0A528982F
Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
Signing time:             Sun 03 May 2026 03:19:19 +0000
ROA not before:           Sun 03 May 2026 03:14:19 +0000
ROA not after:            Sun 02 May 2027 03:19:19 +0000
asID:                     63508
IP address blocks:        103.90.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl
                          rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:ca:10:0e:52:45:62:ba:19:3b:66:ee:4e:f3:a0:a5:28:98:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
        Validity
            Not Before: May  3 03:14:19 2026 GMT
            Not After : May  2 03:19:19 2027 GMT
        Subject: CN=B63A31C0A35D342503C27553117104CDDAFBCBE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:1a:54:ef:ea:5c:35:4f:7f:c6:aa:57:f1:
                    9f:cb:5e:40:30:de:30:bc:1a:dd:ca:81:9e:94:c0:
                    d1:28:b9:3f:12:07:48:4e:96:38:e5:91:e1:63:26:
                    bd:da:a4:36:ed:47:7a:46:25:68:c0:30:64:73:12:
                    0b:54:f3:0b:40:02:aa:f8:d0:c5:6a:b7:9d:e7:fb:
                    fc:04:41:9e:a3:83:60:c9:a1:ad:ae:2f:43:b9:50:
                    ca:c8:87:5d:fc:33:39:66:bc:e9:a1:ec:29:3e:49:
                    72:17:bb:45:16:63:e1:59:ae:6a:c1:b0:67:ad:fa:
                    bc:18:93:6b:f6:2f:0a:36:ca:b9:0d:84:5a:8b:29:
                    c9:d3:cf:d6:4d:9d:fb:f1:95:27:18:7d:d1:47:ba:
                    34:dc:88:d3:5f:81:17:f6:93:5b:25:29:51:a8:e7:
                    e1:03:fb:e5:99:62:a1:2f:ab:21:f9:94:44:a0:ac:
                    83:6c:22:19:f1:66:44:6e:14:77:c5:d9:c6:62:64:
                    11:37:a6:23:89:f7:f6:61:a5:72:2f:49:34:e9:8d:
                    ff:86:77:05:b3:9b:ec:b3:84:b4:b6:0c:aa:1a:70:
                    95:6a:a0:75:59:cc:58:14:b5:3e:e9:ef:25:bd:40:
                    6a:10:c2:ff:46:84:31:e9:7f:98:e9:aa:f7:40:32:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:31:C0:A3:5D:34:25:03:C2:75:53:11:71:04:CD:DA:FB:CB:E5
            X509v3 Authority Key Identifier:
                keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:ef:7f:cf:ed:e2:3e:22:27:7c:55:f8:20:b4:a1:6f:2c:e1:
         44:de:36:48:11:90:18:76:41:6b:b6:c8:20:2c:e5:42:80:8c:
         0f:da:4a:8b:70:6d:86:dc:8b:cd:0e:1e:17:28:de:ff:bb:0f:
         27:e4:2e:98:91:e9:79:cf:bd:d7:92:86:2b:51:e4:db:bd:de:
         04:a6:bf:0e:61:d9:59:7c:76:7e:87:56:b7:ec:cf:74:4c:fe:
         93:17:7d:6e:7f:6f:74:b0:9d:e2:b6:9d:db:0b:72:26:27:c6:
         9e:66:a6:48:59:b8:d4:6e:5e:7e:9a:0a:b5:ce:f2:43:68:9f:
         97:07:f0:2d:36:eb:95:be:50:2b:66:01:03:cf:97:e6:ba:c0:
         a3:fe:2c:7c:f1:b8:03:ed:1f:12:3d:8f:6a:a2:02:dd:2a:07:
         38:51:46:81:f5:75:87:f3:84:59:91:43:df:64:10:6f:93:09:
         57:6b:d6:89:6c:95:2e:7b:f9:c1:72:96:6f:54:96:60:82:52:
         e6:e5:d0:9c:cd:9a:69:97:4c:f1:5b:21:7a:fa:25:5a:0e:9b:
         97:5e:20:0b:d6:de:31:36:07:58:77:77:88:09:a2:48:8a:2e:
         06:06:4a:19:89:d5:f4:ed:1c:91:d4:29:17:01:36:c4:5c:ab:
         37:77:dc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:31 2026 by rpki-client