Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
File:                     3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          slNa8rmWwtZH7sdaTd8AvBbSHb5ZVXsKXT8fGwOavUo=
Subject key identifier:   DA:64:23:77:8C:7F:F3:31:23:AF:8E:26:84:DF:A4:81:B0:C8:E0:A5
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       3DF22982B28DE67084EBB6440CD1E8B7AC0A54F6
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:31 +0000
ROA not before:           Sun 03 May 2026 02:10:31 +0000
ROA not after:            Sun 02 May 2027 02:15:31 +0000
asID:                     58369
IP address blocks:        116.197.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f2:29:82:b2:8d:e6:70:84:eb:b6:44:0c:d1:e8:b7:ac:0a:54:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:31 2026 GMT
            Not After : May  2 02:15:31 2027 GMT
        Subject: CN=DA6423778C7FF33123AF8E2684DFA481B0C8E0A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:cf:b0:1b:ac:91:c0:3e:cf:e0:1b:f3:42:
                    11:d4:f5:86:3f:1c:ca:c1:bb:b8:6c:e2:6e:43:d0:
                    77:12:7f:27:49:36:73:0c:70:76:ea:6f:e9:f0:9a:
                    d3:0a:d8:51:68:ae:8a:ac:e9:0e:95:c7:1b:22:f2:
                    7e:49:f1:3d:2d:2c:e0:d5:1e:5b:1a:80:9e:1f:65:
                    92:3c:8e:43:c1:5d:18:92:78:f1:9c:39:2a:ef:df:
                    46:4d:64:a5:fd:10:39:bf:10:31:33:f2:66:b1:06:
                    f9:01:28:47:55:9a:b6:e8:47:2a:56:28:32:5a:d5:
                    a3:ca:ce:8e:bb:47:6f:06:49:c4:f5:48:a3:2b:2c:
                    95:28:7a:e0:00:61:bb:59:7a:74:08:95:0f:5e:e2:
                    7f:e1:c8:66:0e:a7:0d:ad:38:e5:f8:cf:6d:af:a0:
                    fd:c9:d0:88:e4:e1:28:22:58:6b:61:2e:38:23:62:
                    a1:21:85:b3:2b:5d:f3:9f:b7:c8:f8:17:b3:da:ef:
                    92:84:30:59:a7:b7:35:4a:ae:fa:a4:b5:0c:8b:12:
                    63:29:36:87:4a:35:d4:df:1a:0a:08:5f:6e:a0:ba:
                    e0:63:09:98:48:cb:d3:a6:66:55:7b:4c:9b:37:29:
                    1e:c8:0a:6b:67:89:da:2e:06:2b:b5:cf:e8:04:cb:
                    a1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:23:77:8C:7F:F3:31:23:AF:8E:26:84:DF:A4:81:B0:C8:E0:A5
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:19:38:0d:06:97:c0:93:5a:da:9a:13:ff:f8:c3:a4:f7:61:
         de:7e:a1:3b:a1:d4:fc:77:be:57:c9:f0:3f:40:f6:88:6f:31:
         fb:a7:e3:e3:f0:9a:3a:a7:ad:2b:7f:b3:fa:7e:b4:ed:12:b1:
         15:45:57:a7:c9:31:d3:ce:93:80:58:ca:f6:ea:78:9b:dd:ac:
         08:cb:3f:a1:c1:a4:c3:69:32:4c:2f:08:67:6c:58:d1:06:c4:
         ab:08:77:4b:55:05:5f:0e:c5:01:dc:47:c5:80:e2:47:d1:0a:
         a8:fe:99:9e:82:b5:e5:7a:ea:c6:10:79:9b:d2:51:b9:88:62:
         eb:c7:92:70:09:9e:c5:70:28:24:35:03:c7:20:19:34:d2:55:
         86:a5:20:59:ec:8c:29:67:b9:ce:46:da:2b:bc:78:3f:13:64:
         d9:41:1e:13:72:bc:2a:27:8f:5e:70:5a:69:62:21:5b:d9:6e:
         b2:45:e0:ad:95:31:c3:ed:fc:6f:81:2d:df:1d:16:22:e2:3b:
         6b:1e:a6:6d:64:68:d4:d5:be:28:75:54:e0:75:7d:33:36:ce:
         50:2a:82:8e:b6:8d:51:28:f4:6c:cf:6c:c8:15:ec:16:b3:2b:
         a4:9b:27:dc:6d:2f:2c:8d:ee:3f:c4:8d:98:f9:da:85:11:35:
         66:ce:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:11 2026 by rpki-client