Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
File:                     3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa (raw, json)
Hash identifier:          s1qi4M5Zcr11XFapME7nZK0zCB85F97yCjqQhk4yjgk=
Subject key identifier:   BB:49:5D:F1:69:18:85:AF:20:78:66:D8:87:29:FD:F8:9B:95:D2:DB
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       73271CE3A041D44F6656217978248356B7DC5629
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:23 +0000
ROA not before:           Sun 03 May 2026 02:10:23 +0000
ROA not after:            Sun 02 May 2027 02:15:23 +0000
asID:                     58369
IP address blocks:        116.197.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:27:1c:e3:a0:41:d4:4f:66:56:21:79:78:24:83:56:b7:dc:56:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:23 2026 GMT
            Not After : May  2 02:15:23 2027 GMT
        Subject: CN=BB495DF1691885AF207866D88729FDF89B95D2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:36:99:71:9f:52:f1:c2:1a:1a:72:49:f1:
                    c6:8b:70:b3:9a:a8:84:18:fc:bd:2a:d4:2c:37:76:
                    49:ce:e7:55:78:b5:7e:a0:e9:04:c8:2b:1e:83:2c:
                    42:3c:6e:bf:8a:d6:b1:ca:8e:66:4d:73:fc:75:e0:
                    b1:66:2f:6b:52:75:ea:c9:ed:f7:43:56:e3:2d:5d:
                    c0:f0:0f:aa:ab:68:95:a7:35:49:ea:32:fe:1e:4a:
                    4b:f7:5b:de:8e:d7:59:6e:73:c2:6b:29:fa:7b:95:
                    df:97:ab:f7:d5:ee:6e:5f:04:59:d2:b3:85:72:1b:
                    82:c3:e1:80:32:c6:14:a3:f0:e7:c6:41:fe:4a:c4:
                    0a:f9:f7:e0:33:e2:2a:cc:9c:20:e1:4e:7a:a5:2c:
                    b2:dd:bc:4f:d4:a1:e2:7f:6f:26:62:03:15:3c:25:
                    94:3d:93:98:b5:c9:59:f2:4c:7f:48:90:e9:ed:49:
                    c3:ac:b7:0e:db:f0:37:6e:f0:19:a2:6d:8c:07:a9:
                    3b:ef:b9:16:1e:7f:f3:cc:08:f4:d4:f3:9d:9f:61:
                    b4:a3:1a:bd:a7:47:09:ca:f7:1d:a3:69:80:c3:96:
                    42:f6:8e:59:02:e4:c3:eb:4d:0c:64:bc:ae:87:4f:
                    b8:2b:55:d7:94:6b:bc:1f:0f:51:9e:d2:f3:b8:be:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:5D:F1:69:18:85:AF:20:78:66:D8:87:29:FD:F8:9B:95:D2:DB
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133322e302f32322d3232203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:2e:b0:7b:af:38:9d:bc:75:0c:8f:29:72:b8:83:26:7c:
         71:cd:00:a8:fa:b1:f7:23:ca:b4:f3:0b:9d:84:b4:4c:50:25:
         73:1e:1c:07:28:bc:8c:f5:a4:6f:ca:6b:e2:21:27:36:ea:f6:
         3e:f1:05:08:ab:29:ae:c9:da:27:53:8a:b9:45:f4:9a:33:9d:
         06:0f:5d:18:0b:ff:bb:25:1e:82:89:c6:de:ee:78:79:66:48:
         bd:75:3d:7a:5c:6e:cd:2b:c4:d3:42:e2:f0:9a:2b:b1:1a:fd:
         aa:7c:db:1c:7b:80:57:b3:20:a2:55:2a:ef:3f:c4:7e:61:89:
         fc:c9:04:a9:ee:da:53:58:a9:d4:6f:71:93:7f:b1:9a:fc:48:
         89:2b:32:01:62:34:23:38:7c:f5:80:65:4b:3d:fa:13:15:2d:
         cd:81:bd:c6:51:b2:51:c8:02:0e:f5:c5:5b:82:e9:1e:ac:2a:
         50:07:ca:01:86:36:0f:05:ef:f5:5f:6d:40:43:05:11:0b:1f:
         56:bb:90:f9:44:4a:fa:3c:e7:75:ab:40:e2:1d:ef:f9:03:01:
         85:24:4d:ac:f0:aa:29:d4:06:ae:56:15:24:fb:da:6e:b2:bd:
         f7:af:81:4b:a8:5f:95:34:b6:c7:43:fe:17:b8:ec:ea:45:cb:
         ce:5a:69:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:24:37 2026 by rpki-client