Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
File:                     3130332e39302e36322e302f32342d3234203d3e203633353038.roa (raw, json)
Hash identifier:          Jj55Qdcw1HHwbpz0sfyPn4cWawaNftCV5QpF5pCd8+8=
Subject key identifier:   B5:0B:55:91:7C:F0:0B:5F:A2:F6:DB:22:05:EA:5B:5E:DE:F1:55:5B
Certificate issuer:       /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
Certificate serial:       35B3AF8952E9A82B74B6EA73D6CD7989C7A56B3F
Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa
Signing time:             Tue 10 Feb 2026 02:00:00 +0000
ROA not before:           Tue 10 Feb 2026 01:55:00 +0000
ROA not after:            Tue 09 Feb 2027 02:00:00 +0000
asID:                     63508
IP address blocks:        103.90.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl
                          rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 03:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b3:af:89:52:e9:a8:2b:74:b6:ea:73:d6:cd:79:89:c7:a5:6b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09
        Validity
            Not Before: Feb 10 01:55:00 2026 GMT
            Not After : Feb  9 02:00:00 2027 GMT
        Subject: CN=B50B55917CF00B5FA2F6DB2205EA5B5EDEF1555B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b6:23:1d:97:6f:37:e0:e0:7a:d8:32:60:09:
                    65:23:c3:7e:5b:e3:13:76:48:29:d7:2f:35:da:e0:
                    a8:c4:4d:36:a6:77:16:2c:1f:d8:ba:3a:cc:1c:8d:
                    6b:d9:7e:e0:39:37:4d:f4:51:9c:08:24:c6:73:4b:
                    a7:d9:31:c2:ed:8e:87:91:3d:54:9f:69:d3:83:5c:
                    3a:da:85:bf:19:53:fe:31:52:0a:0d:b0:18:f7:04:
                    1e:c2:84:d0:fb:6b:2d:b4:e9:bb:8f:e2:d4:09:b9:
                    d6:c1:22:11:d0:9f:cf:db:42:8c:11:51:41:0d:37:
                    1b:e0:3a:b5:51:6f:46:67:6b:0c:44:90:2c:6e:f0:
                    3e:40:c8:32:73:12:e3:ce:ed:7d:a8:3a:ed:b8:bf:
                    49:76:7f:5e:c5:84:24:28:26:4a:66:d4:ce:47:32:
                    95:69:37:a3:b2:32:7c:a7:9f:9b:1f:a0:c3:bf:a9:
                    2a:ae:25:a9:df:8e:ac:c7:20:c7:a5:44:f4:d9:04:
                    d9:1b:23:39:da:78:16:e0:06:7d:07:8f:81:4c:fd:
                    6b:e6:21:d2:34:63:42:6b:50:5c:d0:00:86:c4:f4:
                    15:5c:1e:71:02:30:d4:8f:a1:b1:ac:2c:94:b5:8e:
                    87:2c:db:7e:a4:a5:77:40:dd:51:9c:ae:5d:8b:9c:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:55:91:7C:F0:0B:5F:A2:F6:DB:22:05:EA:5B:5E:DE:F1:55:5B
            X509v3 Authority Key Identifier:
                keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/3130332e39302e36322e302f32342d3234203d3e203633353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:2e:f6:bd:b7:cf:d6:a5:33:5c:79:d2:49:4d:4b:f5:21:05:
         c9:bf:9c:34:d8:56:fc:ec:c6:f6:2f:c1:73:4b:22:0f:e9:bf:
         95:cb:91:ed:b3:e3:e3:0b:5e:cf:45:b1:06:03:b0:7c:23:5b:
         b1:ae:c3:42:e0:d4:09:0b:85:6e:1a:24:9e:e4:12:f0:c3:32:
         c2:59:9d:d5:67:94:99:14:ef:c3:64:4b:2e:14:ba:0d:4f:bf:
         f1:d3:12:0e:f5:0b:d5:78:48:37:bd:3f:1c:c4:ab:c5:18:a3:
         0c:ac:f0:1e:a9:25:9f:89:6a:fc:5f:70:b1:f9:81:a9:57:c2:
         34:04:76:47:a0:e6:27:f1:81:42:e1:a7:67:92:a8:d8:bd:1c:
         4f:41:32:5c:a9:7a:d5:8f:22:04:fd:a3:98:49:2a:ac:bb:83:
         68:56:9a:75:18:10:3b:3c:d6:cc:77:dc:2f:b9:dd:23:d9:92:
         12:69:6a:22:ed:71:81:8d:ea:4b:72:80:e5:4c:30:30:6f:52:
         83:6d:8f:7c:87:7d:a6:65:f7:83:bd:6f:09:07:ba:5a:d2:38:
         4b:3b:1b:d3:86:1e:9a:11:25:2e:37:cb:db:07:8c:55:a8:13:
         b9:3c:41:d8:f9:b6:4a:20:b6:67:44:47:49:cc:8e:a7:cd:2a:
         5f:48:6f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:44 2026 by rpki-client