Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa
File:                     3131362e36382e3136392e302f32342d3234203d3e203538333839.roa (raw, json)
Hash identifier:          bgkBxSYpOS0/fInKoNfYSm7+8QjQH1llqxQvsMDmNoI=
Subject key identifier:   C8:00:9D:5C:4D:BF:0B:63:30:0B:2F:12:41:30:DA:8C:C1:F9:0D:DA
Certificate issuer:       /CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
Certificate serial:       0E0F87D5A7CAA621C8622399053CE495680D1DE7
Authority key identifier: 10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa
Signing time:             Sun 03 May 2026 02:36:36 +0000
ROA not before:           Sun 03 May 2026 02:31:36 +0000
ROA not after:            Sun 02 May 2027 02:36:36 +0000
asID:                     58389
IP address blocks:        116.68.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl
                          rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 00:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0f:87:d5:a7:ca:a6:21:c8:62:23:99:05:3c:e4:95:68:0d:1d:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10DB2C44E26CA2A146EF738D39F53CBB0901DB52
        Validity
            Not Before: May  3 02:31:36 2026 GMT
            Not After : May  2 02:36:36 2027 GMT
        Subject: CN=C8009D5C4DBF0B63300B2F124130DA8CC1F90DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:f1:a2:d8:38:d4:1d:53:ce:c1:92:c4:45:
                    97:94:2a:d0:36:2a:a5:56:02:a7:cd:17:58:c6:54:
                    79:c1:a2:75:c2:88:52:88:9c:50:9a:db:59:39:3f:
                    84:88:7f:22:fd:ed:4c:fb:ed:8d:62:ab:e4:1b:e6:
                    ba:81:f1:19:5d:ee:b4:cf:e2:07:f2:ff:e3:2b:5f:
                    c0:f3:1c:a3:5b:bf:25:52:3c:35:9c:5c:2b:ec:4c:
                    63:67:c9:81:6a:23:56:24:73:a1:00:85:db:ec:ab:
                    81:22:eb:6e:93:14:28:a6:5e:81:7f:c7:23:a3:ce:
                    c9:18:37:ba:64:d6:3c:33:1c:25:35:2a:e7:26:5f:
                    2c:02:73:6d:51:42:50:51:39:84:f4:83:2c:38:aa:
                    16:14:32:e4:e7:ef:07:cb:63:8f:10:13:22:8b:87:
                    40:33:23:46:97:a0:e5:55:d0:6a:3d:03:67:36:61:
                    da:89:22:4e:a9:94:d2:b9:db:f3:4e:30:c5:d0:ed:
                    3a:8f:7e:53:55:df:a8:21:48:d8:e1:a4:ff:3f:e2:
                    0e:c1:0d:02:27:54:26:aa:2a:c1:83:3c:c4:29:a6:
                    84:59:01:fa:c2:43:d8:55:e6:7b:ad:b8:a1:b4:74:
                    34:67:0d:f2:a5:9d:4f:3a:57:1f:35:0a:21:89:78:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:00:9D:5C:4D:BF:0B:63:30:0B:2F:12:41:30:DA:8C:C1:F9:0D:DA
            X509v3 Authority Key Identifier:
                keyid:10:DB:2C:44:E2:6C:A2:A1:46:EF:73:8D:39:F5:3C:BB:09:01:DB:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/10DB2C44E26CA2A146EF738D39F53CBB0901DB52.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3131362e36382e3136392e302f32342d3234203d3e203538333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:a0:8a:7d:d5:7f:f3:a5:c2:f2:68:7a:07:69:71:af:a3:b1:
         c0:61:4a:7d:17:07:8c:79:a1:eb:9a:7f:40:88:a1:56:6a:e5:
         2c:ea:7f:9e:7a:9c:03:91:2f:0a:1c:7a:fb:5c:f8:76:4b:5a:
         5e:01:ce:e3:d9:c5:2a:da:d6:1c:ee:77:05:0e:eb:0b:2f:71:
         8a:7b:49:9c:ac:db:97:c1:e9:16:6e:39:31:38:02:ed:e2:ba:
         b6:2a:87:3e:ba:ff:e6:7e:de:24:cb:9c:dd:b8:37:5e:ab:8f:
         8c:38:4d:f4:bc:79:20:49:df:b2:4f:0c:98:da:6f:15:00:85:
         27:df:83:36:10:fa:e6:b8:ed:37:58:64:67:e9:a2:3e:58:07:
         71:e0:2a:c3:e1:27:21:5b:b6:5d:b1:32:0e:ce:3f:7c:85:ef:
         c8:7b:b7:93:e7:3f:6e:7f:15:95:b6:1c:2a:ae:d1:a9:56:31:
         f2:bb:7e:45:f9:52:e0:34:d9:ca:76:d6:44:ff:c5:a9:ce:db:
         dc:93:2e:a0:89:c4:96:15:b1:60:0b:cf:72:9f:be:43:69:54:
         b6:4f:76:4a:e1:8c:cb:15:f3:b5:51:30:c7:4a:16:48:a0:d1:
         fd:84:a4:fa:cf:9a:e6:9f:aa:cd:80:ea:63:db:eb:aa:c0:77:
         cc:84:ce:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:58 2026 by rpki-client