Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
File:                     3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa (raw, json)
Hash identifier:          rsnCPB3QRC6w7SHXc/ksq7KWQJN7ofMR6yx6Vy6G5SM=
Subject key identifier:   AF:09:25:94:AA:81:10:D3:9F:FA:7D:61:4D:0E:EC:83:17:D7:EA:C8
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       03F7F0A0FB34B818615A65A1F70676D0F2F0E082
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:27 +0000
ROA not before:           Sun 03 May 2026 02:10:27 +0000
ROA not after:            Sun 02 May 2027 02:15:27 +0000
asID:                     58369
IP address blocks:        116.197.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f7:f0:a0:fb:34:b8:18:61:5a:65:a1:f7:06:76:d0:f2:f0:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:27 2026 GMT
            Not After : May  2 02:15:27 2027 GMT
        Subject: CN=AF092594AA8110D39FFA7D614D0EEC8317D7EAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:38:a5:fa:21:8e:8a:c6:0b:17:43:5c:ec:
                    b1:c7:09:dd:82:01:ae:0c:fc:a6:2e:63:b7:71:28:
                    67:2c:f9:4c:96:fe:8a:53:af:ce:5a:6b:94:f5:f9:
                    e9:f2:37:9e:e0:71:82:59:66:dd:e7:11:c7:58:7f:
                    f3:d0:ec:3d:52:68:c4:6c:d0:57:38:87:52:84:9d:
                    c8:c3:46:64:f1:b6:b3:8f:f4:a7:74:71:2c:17:f1:
                    8f:45:79:f0:37:30:61:b7:8a:77:2e:92:ed:db:f7:
                    1b:46:6c:fe:b4:56:84:49:fb:0d:32:92:9b:0e:de:
                    82:52:12:72:e1:6c:e5:18:e4:7d:24:30:b2:81:5b:
                    70:45:47:84:a5:19:e6:5a:50:06:8a:ab:a4:bb:62:
                    7a:0d:99:ec:56:f3:b8:dc:70:72:f3:08:5f:8e:da:
                    0c:5b:27:10:27:52:2e:6d:9d:e6:97:2e:a3:17:c1:
                    7f:fc:7d:48:d0:34:98:06:e7:d0:2a:45:55:53:01:
                    e3:42:7e:79:8d:4b:d8:d5:21:a9:df:2b:b9:ba:dc:
                    a6:95:29:13:3d:1a:f7:3d:12:55:12:72:31:66:d9:
                    ec:0f:57:91:96:8f:4b:c5:ec:5d:d9:4b:16:46:26:
                    c0:3f:6e:3d:68:9a:3d:96:75:62:08:98:b5:63:c2:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:09:25:94:AA:81:10:D3:9F:FA:7D:61:4D:0E:EC:83:17:D7:EA:C8
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3132382e302f32312d3231203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:9d:cb:b8:07:f4:b3:3b:a9:c1:69:ee:c2:fc:07:bd:6c:0d:
         33:a3:9f:36:33:bf:15:5a:64:05:e2:04:be:70:44:ff:d7:ff:
         4e:3e:56:67:66:ab:a3:00:6b:ee:d6:6d:d7:5a:cb:aa:48:10:
         00:e3:e9:ac:d2:03:98:56:1d:42:71:ea:c4:a9:2d:0c:e2:b4:
         29:4e:de:90:8c:c5:dc:1d:72:76:d2:c8:d7:01:e2:41:c9:f7:
         57:a9:74:a3:69:53:4f:2e:b7:f4:a4:3b:09:3d:6d:d6:f2:13:
         34:7a:4c:8a:46:14:8e:12:aa:ac:84:26:b5:0d:90:88:dd:39:
         24:4a:9c:f8:8a:05:29:86:80:c9:44:f7:14:68:ce:82:75:45:
         4a:fe:5b:7e:ea:eb:88:eb:c4:63:b9:74:db:93:06:6b:d6:88:
         83:21:2e:0c:29:e9:20:b3:9f:d7:d5:42:16:3a:4a:1a:a5:62:
         c6:f9:94:0f:7e:de:c5:5d:de:06:70:c2:23:e6:6e:13:c3:14:
         b3:28:07:8a:e0:7d:ce:72:59:2d:70:3b:44:14:99:4f:8c:42:
         95:db:a7:b1:5a:9c:f9:e1:73:f8:08:70:84:ad:cf:3a:fa:6b:
         54:02:3a:56:9e:ee:24:c7:fb:b3:48:df:26:67:40:9e:e7:ee:
         c7:53:c5:27
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUA/fwoPs0uBhhWmWh9wZ20PLw4IIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM1RDUyMzA5NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0
MkY5RDUzNzAeFw0yNjA1MDMwMjEwMjdaFw0yNzA1MDIwMjE1MjdaMDMxMTAvBgNV
BAMTKEFGMDkyNTk0QUE4MTEwRDM5RkZBN0Q2MTREMEVFQzgzMTdEN0VBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMQDil+iGOisYLF0Nc7LHHCd2C
Aa4M/KYuY7dxKGcs+UyW/opTr85aa5T1+enyN57gcYJZZt3nEcdYf/PQ7D1SaMRs
0Fc4h1KEncjDRmTxtrOP9Kd0cSwX8Y9FefA3MGG3incuku3b9xtGbP60VoRJ+w0y
kpsO3oJSEnLhbOUY5H0kMLKBW3BFR4SlGeZaUAaKq6S7YnoNmexW87jccHLzCF+O
2gxbJxAnUi5tneaXLqMXwX/8fUjQNJgG59AqRVVTAeNCfnmNS9jVIanfK7m63KaV
KRM9Gvc9ElUScjFm2ewPV5GWj0vF7F3ZSxZGJsA/bj1omj2WdWIImLVjwvKVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUrwkllKqBENOf+n1hTQ7sgxfX6sgwHwYDVR0j
BBgwFoAUTF1SMJcGH9Qg74mHLvVdfUL51TcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MTZhODExODItN2NlYi00NjVjLWE1YjUtYTE0ZWM3MzliZjk5LzAvNEM1RDUyMzA5
NzA2MUZENDIwRUY4OTg3MkVGNTVEN0Q0MkY5RDUzNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80QzVENTIzMDk3MDYxRkQ0MjBFRjg5ODcyRUY1NUQ3RDQyRjlE
NTM3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzEzNjJlMzEzOTM3MmUzMTMyMzgyZTMwMmYz
MjMxMmQzMjMxMjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDdMWAMA0GCSqG
SIb3DQEBCwUAA4IBAQDXncu4B/SzO6nBae7C/Ae9bA0zo582M78VWmQF4gS+cET/
1/9OPlZnZqujAGvu1m3XWsuqSBAA4+ms0gOYVh1CcerEqS0M4rQpTt6QjMXcHXJ2
0sjXAeJByfdXqXSjaVNPLrf0pDsJPW3W8hM0ekyKRhSOEqqshCa1DZCI3TkkSpz4
igUphoDJRPcUaM6CdUVK/lt+6uuI68RjuXTbkwZr1oiDIS4MKekgs5/X1UIWOkoa
pWLG+ZQPft7FXd4GcMIj5m4TwxSzKAeK4H3OclktcDtEFJlPjEKV26exWpz54XP4
CHCErc86+mtUAjpWnu4kx/uzSN8mZ0Ce5+7HU8Un
-----END CERTIFICATE-----
Generated at Wed May 13 08:24:13 2026 by rpki-client