Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32342d3234203d3e203538333639.roa
File:                     3131362e3139372e3133342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          AoKLR/Bg8ydODMtSdAt51ZJoY4qDm7fZImcSiS8owuQ=
Subject key identifier:   8A:13:4C:F1:B4:55:31:27:A9:0E:6D:D1:14:C3:61:21:0F:C2:82:67
Certificate issuer:       /CN=4C5D523097061FD420EF89872EF55D7D42F9D537
Certificate serial:       0705A0BAE45D6EEB7A31023774379BFA32408CC2
Authority key identifier: 4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32342d3234203d3e203538333639.roa
Signing time:             Sun 03 May 2026 02:15:17 +0000
ROA not before:           Sun 03 May 2026 02:10:17 +0000
ROA not after:            Sun 02 May 2027 02:15:17 +0000
asID:                     58369
IP address blocks:        116.197.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl
                          rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:05:a0:ba:e4:5d:6e:eb:7a:31:02:37:74:37:9b:fa:32:40:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5D523097061FD420EF89872EF55D7D42F9D537
        Validity
            Not Before: May  3 02:10:17 2026 GMT
            Not After : May  2 02:15:17 2027 GMT
        Subject: CN=8A134CF1B4553127A90E6DD114C361210FC28267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:af:38:32:28:a3:b8:cd:4c:2a:bd:1e:26:
                    21:90:5e:94:cd:ce:89:3d:99:96:57:39:21:a9:87:
                    9c:0b:1f:ed:c6:2b:a2:ad:40:b9:14:a2:4f:bb:cf:
                    19:bf:68:51:97:cf:f2:a4:53:f2:8b:63:7b:6e:f7:
                    b3:c8:04:cd:60:1b:86:e4:5f:ac:c6:c1:e9:4c:74:
                    0e:44:51:ce:5f:99:df:3e:8e:a7:4d:97:bb:29:96:
                    09:b2:f3:c1:f4:81:05:81:08:2e:42:0d:98:d6:78:
                    21:ba:60:a3:0b:3a:d9:b0:3e:2a:a7:d3:5e:c0:7c:
                    47:4d:f9:ee:90:a2:81:6e:6d:14:3c:20:a5:b5:9d:
                    c7:b2:8e:da:b1:96:09:66:cd:5c:7b:47:f6:52:cb:
                    33:ab:bc:73:c9:ed:cf:79:1e:e8:38:64:69:fc:d6:
                    6e:cf:4d:f1:de:c2:83:e2:ee:43:50:8e:29:71:38:
                    a8:86:45:4e:65:61:20:1f:79:85:5a:eb:a5:9a:cc:
                    04:c9:cc:f7:d4:bf:f5:46:d8:62:29:5c:ac:d2:b1:
                    8d:7b:43:d2:39:d8:91:3a:c7:8f:8d:27:53:99:87:
                    9d:77:07:4b:88:6a:2e:3f:ac:2a:e6:f0:d4:e8:57:
                    7f:ea:6d:f0:aa:76:34:ec:24:30:1d:62:18:10:96:
                    eb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:13:4C:F1:B4:55:31:27:A9:0E:6D:D1:14:C3:61:21:0F:C2:82:67
            X509v3 Authority Key Identifier:
                keyid:4C:5D:52:30:97:06:1F:D4:20:EF:89:87:2E:F5:5D:7D:42:F9:D5:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/4C5D523097061FD420EF89872EF55D7D42F9D537.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4C5D523097061FD420EF89872EF55D7D42F9D537.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3131362e3139372e3133342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.197.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:71:83:a1:bc:c6:2f:54:6c:1b:99:52:5a:fd:81:c0:2e:71:
         58:01:3f:7e:8c:f3:4c:d8:91:c9:e0:e1:f3:20:0e:1c:33:4a:
         c0:6b:ba:16:af:ca:85:f6:8c:0c:9e:91:b7:8a:37:de:f2:11:
         08:54:f4:da:3e:e2:0b:1b:60:a3:c7:c3:44:52:61:36:54:43:
         c7:34:8a:39:36:3e:4a:56:a7:87:04:74:4d:78:e2:1b:5b:e6:
         61:91:b8:09:53:33:98:24:27:45:8d:52:5d:50:d5:d9:6a:ba:
         d4:e3:a1:bc:86:1b:cb:57:e2:c2:74:bf:b3:de:1e:5e:b3:16:
         c4:8e:76:fb:19:82:54:1f:10:de:89:fe:84:c4:1a:79:41:1b:
         f6:e0:28:f4:a8:30:99:54:63:88:74:b5:7a:69:05:20:cf:d0:
         dd:d7:1e:8f:27:44:76:0a:5d:d7:d3:df:63:56:1f:42:5f:0c:
         66:54:9a:2e:c8:13:11:c0:d8:c5:73:20:06:80:c0:b1:c2:be:
         d8:6c:41:54:da:fa:07:a6:11:8c:7a:d5:e5:00:cc:f1:98:3a:
         60:0f:6b:41:85:82:1f:c1:f6:73:a8:5a:d8:1b:7b:37:0a:e9:
         fe:85:fd:1b:2f:df:d0:de:27:a8:e6:2d:c0:0f:88:2a:22:bc:
         b2:17:22:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:12 2026 by rpki-client