Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          pwLVM0y+M/fd8DSxptePRkI/moZGK8h2eBVfeu/mNfQ=
Subject key identifier:   DA:78:F7:89:BF:07:59:65:74:9F:75:C4:41:56:D3:E0:0D:E9:9E:E6
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       590F7CBF042E652B2B10905B13AB8E0F2D94E3FB
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:31 +0000
ROA not before:           Sun 03 May 2026 02:10:31 +0000
ROA not after:            Sun 02 May 2027 02:15:31 +0000
asID:                     58369
IP address blocks:        116.197.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0f:7c:bf:04:2e:65:2b:2b:10:90:5b:13:ab:8e:0f:2d:94:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:31 2026 GMT
            Not After : May  2 02:15:31 2027 GMT
        Subject: CN=DA78F789BF075965749F75C44156D3E00DE99EE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:8e:d6:f0:50:84:e8:8d:b4:40:60:f1:d6:
                    8f:b9:a2:1a:fa:3c:67:72:d0:cf:06:02:f7:f3:8c:
                    28:8b:37:87:aa:73:27:28:80:0d:52:a3:5d:82:54:
                    e6:ca:3f:7d:ef:4d:95:d9:91:2d:fc:2d:40:07:d8:
                    a3:05:93:21:70:d8:10:0e:6b:18:d4:e0:bc:ae:ad:
                    5d:48:4c:83:42:5b:6c:e9:38:11:51:d0:c1:5a:d9:
                    1b:cc:d5:c7:00:0c:eb:9e:e8:8b:70:a6:52:d8:b8:
                    df:13:b0:57:e2:e1:0c:1a:00:c2:f4:03:0c:49:48:
                    76:53:98:02:a7:82:10:13:7b:2d:81:9c:ee:21:d0:
                    2c:ae:d5:b3:f5:65:92:9e:f8:06:d5:a6:31:70:86:
                    b4:fa:8a:e8:a3:ca:c7:48:5f:e3:68:26:51:42:29:
                    49:a8:20:2e:e2:b6:4f:8b:d2:73:82:17:78:5b:cd:
                    7b:8b:7d:65:71:a1:f1:2a:72:34:19:f4:4d:22:a8:
                    15:ec:28:13:41:7f:85:27:2b:68:72:9c:a6:e7:3a:
                    af:41:78:12:fb:b2:37:1a:4f:6a:e8:c8:a3:eb:b1:
                    fd:e3:fc:f1:02:21:f8:b6:bc:9b:32:af:65:15:90:
                    95:ef:26:e9:89:04:28:57:cf:a0:a3:6a:16:0c:a1:
                    46:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:F7:89:BF:07:59:65:74:9F:75:C4:41:56:D3:E0:0D:E9:9E:E6
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:c3:c5:e1:1b:11:21:a6:22:b6:7c:f2:88:a7:e9:fd:61:
         05:8c:0e:3e:e1:32:4c:b5:b9:a3:44:dc:c2:ac:85:49:62:0a:
         37:9a:93:4e:81:d2:a4:c0:d0:8f:90:8c:0f:97:5d:9a:e4:02:
         fa:da:a4:cb:38:73:23:d7:7a:99:0e:d9:65:db:16:55:8f:98:
         7a:bc:62:29:78:ed:0f:4f:f3:6c:09:60:70:5b:33:32:27:32:
         ca:07:22:29:3a:fa:9a:23:02:19:0b:8a:4f:fc:5d:08:ff:a4:
         e7:43:a6:1a:45:d8:61:37:95:c5:04:bf:3e:85:01:84:c3:fc:
         49:1b:aa:5c:b2:c1:df:f8:bb:cc:24:a2:38:43:32:ba:df:54:
         3e:b1:17:58:8c:c5:17:41:ea:56:bb:c0:a7:f6:25:7f:3f:35:
         34:fc:2f:a8:8e:b7:10:08:f5:40:4b:f7:5c:83:8d:8e:8d:ca:
         b0:3a:a2:a4:c8:69:23:49:1f:5d:80:91:d2:fc:6a:ce:02:86:
         da:5f:fb:09:75:6b:05:3f:0d:10:3e:35:b4:6e:f0:12:7b:20:
         a0:6f:de:27:05:f8:23:7a:4b:b9:8a:05:7f:3c:ad:1e:48:1e:
         ac:ed:3d:ee:7b:d7:bb:2f:2d:0d:26:3b:7e:7e:72:32:8b:fe:
         58:24:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:42 2026 by rpki-client