Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa
File:                     3130332e39302e36332e302f32342d3234203d3e203633353038.roa (raw, json)
Hash identifier:          1X91pKyabNo0X6kIX61xx6GkFtEHh7C2Pc++/TjZ3oA=
Subject key identifier:   35:4B:CD:29:BD:E0:92:E1:5A:58:C3:E5:D8:8B:89:47:9B:68:1D:95
Certificate issuer:       /CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
Certificate serial:       43C1F998A01BCD80631E7F7B0543E27116F8608A
Authority key identifier: 44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa
Signing time:             Sun 03 May 2026 03:19:19 +0000
ROA not before:           Sun 03 May 2026 03:14:19 +0000
ROA not after:            Sun 02 May 2027 03:19:19 +0000
asID:                     63508
IP address blocks:        103.90.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl
                          rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:f9:98:a0:1b:cd:80:63:1e:7f:7b:05:43:e2:71:16:f8:60:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04
        Validity
            Not Before: May  3 03:14:19 2026 GMT
            Not After : May  2 03:19:19 2027 GMT
        Subject: CN=354BCD29BDE092E15A58C3E5D88B89479B681D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:6b:9b:37:1e:cd:41:48:78:fd:ed:e7:e4:
                    a3:ac:31:d0:00:e8:c3:7e:ce:f4:d8:77:78:61:63:
                    d3:1b:7d:e1:39:e3:09:15:6c:47:44:5e:b1:9d:d7:
                    03:9a:f7:7e:e9:56:bf:bf:a7:16:5e:db:99:42:5f:
                    a6:42:10:78:2c:88:3a:ec:4e:24:1a:9f:b9:4e:56:
                    25:43:34:42:78:93:f8:42:e6:f7:5d:3f:ef:09:a9:
                    01:83:31:6a:14:2c:ba:04:59:3b:e9:22:af:4f:85:
                    58:95:74:08:b5:4c:2c:2b:db:cb:7a:43:47:77:57:
                    f0:4d:8b:34:f7:69:e2:c7:5c:93:11:f5:e1:60:33:
                    a3:8c:86:ab:ff:e7:3e:d4:3b:3d:c1:d6:c2:75:42:
                    32:31:57:d0:28:7a:c4:d4:9a:b0:ec:8b:2a:cf:e8:
                    d7:9d:00:42:07:78:74:c0:61:58:09:13:96:53:7b:
                    be:c0:10:0c:c9:7a:87:0c:e7:e6:d9:d6:5f:17:e7:
                    e8:3b:4f:64:b1:15:51:cd:3b:25:6f:bc:d4:09:fa:
                    49:27:72:07:4b:dc:0d:c4:57:e9:ec:0c:c6:ae:a4:
                    62:31:53:5f:59:34:a2:8e:80:f4:52:42:97:a3:ef:
                    bb:f9:b3:7e:d6:50:04:ad:18:46:d7:e9:77:72:73:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4B:CD:29:BD:E0:92:E1:5A:58:C3:E5:D8:8B:89:47:9B:68:1D:95
            X509v3 Authority Key Identifier:
                keyid:44:22:B4:2B:1C:CA:5B:61:18:2A:D4:1D:35:B4:F2:AA:D9:EA:BE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4422B42B1CCA5B61182AD41D35B4F2AAD9EABE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36332e302f32342d3234203d3e203633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:37:62:cb:72:20:22:55:9e:33:4b:aa:95:62:30:e5:1e:58:
         48:77:e7:83:ac:23:e7:21:a4:e9:82:0f:29:ce:ed:52:ce:e7:
         d0:28:df:3c:69:35:6e:67:3c:a2:ef:4b:5a:0d:24:18:94:d7:
         54:49:41:fa:58:bd:a2:c6:23:20:40:8c:9b:b4:8f:74:89:39:
         11:65:74:f7:a8:1f:52:9f:c3:d2:d5:2a:75:60:9b:55:23:3e:
         1a:e9:d5:52:ad:11:af:26:11:48:4c:a5:7b:d2:8e:91:ab:4e:
         28:bb:91:16:c7:8e:04:05:6b:c0:46:a1:3c:9a:f4:8f:4d:c6:
         62:d3:b8:d1:68:2a:15:ff:91:8b:c5:b7:2a:36:ff:67:69:5c:
         4f:36:f9:5e:b4:9d:32:aa:00:76:8a:c1:dd:61:ae:c3:0a:be:
         61:33:24:a0:c5:fe:e7:4e:1f:01:12:1d:fb:2d:bc:39:22:3e:
         1c:a5:03:6a:9b:9b:49:d5:5d:01:71:b5:ed:22:b8:2f:e9:47:
         24:c4:e8:9a:d4:51:bc:f6:5d:b2:ee:b3:96:54:af:57:a7:67:
         07:1b:c2:d1:df:d4:4b:59:0e:d0:21:c8:54:44:b1:ec:32:39:
         1e:3c:3d:e2:18:52:8f:6c:5f:ee:02:18:c7:a3:cb:06:43:5d:
         d3:4f:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:51 2026 by rpki-client