Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          M3d8BoiT8zqwOUkhjRteWjrKsEAsuRH/B3RTFDUpmj0=
Subject key identifier:   0C:B2:82:55:93:AE:BA:61:92:34:48:95:0B:DF:22:91:6D:31:2D:68
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       0E8F84087C557C10DF2CF967F002246122EE797A
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:25 +0000
ROA not before:           Sun 03 May 2026 02:10:25 +0000
ROA not after:            Sun 02 May 2027 02:15:25 +0000
asID:                     58369
IP address blocks:        116.197.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8f:84:08:7c:55:7c:10:df:2c:f9:67:f0:02:24:61:22:ee:79:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:25 2026 GMT
            Not After : May  2 02:15:25 2027 GMT
        Subject: CN=0CB2825593AEBA61923448950BDF22916D312D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:df:38:55:f1:b8:34:a4:64:7b:e2:bf:53:b0:
                    01:80:98:f5:8e:a7:28:df:c6:0b:8c:cd:7a:e2:6d:
                    e4:cd:38:27:c4:f7:d8:6d:ee:4e:c0:fe:20:df:cc:
                    ea:cb:c5:72:22:8c:a3:85:74:c9:a8:58:6b:0e:b8:
                    7c:bf:6c:49:ff:ab:49:a8:db:fe:b7:fd:d1:94:49:
                    15:84:18:41:c0:6f:be:12:53:30:56:d0:51:f9:2a:
                    40:d6:7d:b2:29:e8:25:c0:ed:4f:03:17:73:fa:73:
                    bf:11:43:07:47:e5:f1:97:e8:bc:79:31:ba:59:4f:
                    3d:2c:4b:86:32:df:19:4f:d1:de:af:cd:06:ce:f9:
                    00:83:ed:1a:42:3e:aa:fa:ac:ff:64:ff:36:48:17:
                    ad:7c:e6:e1:b6:d8:14:5e:32:ec:43:5e:3f:d5:90:
                    1d:85:45:7d:c7:22:a1:03:77:7b:27:fb:e5:17:27:
                    98:a5:1a:ca:c7:60:5a:cb:51:5b:7f:02:a5:80:b3:
                    d5:a7:df:c8:42:cf:a1:5c:d6:08:8d:2e:1f:ae:51:
                    88:67:8e:86:80:6c:a6:fd:5b:a6:eb:13:e9:70:69:
                    88:cb:95:32:e3:29:15:28:59:2c:a0:07:07:65:17:
                    eb:f5:8f:89:82:cc:da:a4:87:99:8f:ef:12:33:c8:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:82:55:93:AE:BA:61:92:34:48:95:0B:DF:22:91:6D:31:2D:68
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133302e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:4a:82:65:2f:a3:47:cb:eb:53:15:01:0e:3d:ba:ec:a6:
         61:c7:6a:28:5d:6d:57:fc:28:20:11:59:39:21:43:a5:4e:91:
         4c:ce:8b:56:f2:44:4c:1c:13:3b:15:3c:77:59:dc:c0:31:c3:
         76:18:d9:89:cb:6f:56:bb:68:29:fa:c5:bc:61:09:c1:f9:cc:
         5b:f4:43:56:6a:59:4b:0e:83:69:e0:c0:b5:2d:ca:bc:41:b5:
         1a:dc:af:b0:53:ae:cb:38:78:f6:b0:46:9a:1d:27:6c:32:a9:
         9c:24:ac:c0:c3:f6:40:fa:7d:69:32:dc:6a:8d:14:22:98:50:
         2e:ad:21:81:4b:2d:70:3b:e7:b9:43:14:08:4f:e8:83:f5:00:
         64:1a:31:91:8f:c6:f3:dc:18:67:c8:40:42:d3:5a:e0:41:b8:
         27:4a:c7:5a:aa:29:fc:eb:ba:b2:e2:0b:a4:e5:01:b3:79:70:
         ba:b6:e3:3b:0e:ed:91:b7:a2:95:a4:9d:a9:95:e2:f1:d6:11:
         3c:b5:e8:97:54:ad:a6:d3:72:d9:54:25:58:ea:3d:b9:a1:80:
         fa:7a:33:66:39:1d:f6:cf:56:4a:3a:00:fd:fb:60:7e:88:c2:
         f3:99:e9:26:fd:47:e0:0b:4f:31:5c:c7:b4:2a:6d:8a:76:96:
         51:3c:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:39:58 2026 by rpki-client