Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
File:                     3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa (raw, json)
Hash identifier:          JZInvaWprZojdT0ogHnGT0fyYlzFziTH86i1Q0tvWkY=
Subject key identifier:   91:08:AA:0E:C0:58:87:2C:9C:85:5B:5D:67:7D:F4:0C:51:95:7D:D2
Certificate issuer:       /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
Certificate serial:       537878E55D1A817F8307588A8A73455A9CD59F75
Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa
Signing time:             Sun 03 May 2026 02:40:22 +0000
ROA not before:           Sun 03 May 2026 02:35:22 +0000
ROA not after:            Sun 02 May 2027 02:40:22 +0000
asID:                     131691
IP address blocks:        116.213.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl
                          rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:78:78:e5:5d:1a:81:7f:83:07:58:8a:8a:73:45:5a:9c:d5:9f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
        Validity
            Not Before: May  3 02:35:22 2026 GMT
            Not After : May  2 02:40:22 2027 GMT
        Subject: CN=9108AA0EC058872C9C855B5D677DF40C51957DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:ab:47:a8:32:54:1c:e9:65:27:11:91:c4:
                    bb:d5:28:04:33:8c:ad:90:9c:2c:38:75:51:c5:9f:
                    da:84:2e:f9:04:01:9f:d7:90:81:86:01:e5:c2:aa:
                    f0:a1:d8:72:cb:a6:76:f4:1d:1d:72:15:f3:2c:3e:
                    85:66:80:8a:56:e5:c4:ed:a7:27:55:1f:86:f3:5f:
                    7e:4d:4e:e6:28:7d:96:9d:07:15:dd:28:8f:d1:4a:
                    12:09:fb:b0:dc:36:b0:af:ad:05:8a:13:43:91:72:
                    a7:b4:8c:f4:7f:26:7e:f7:19:5d:24:5b:c8:23:c3:
                    e6:b9:a5:5c:5a:10:7e:8c:5f:0f:55:d9:c6:00:8f:
                    63:fb:1f:11:08:50:40:e3:e9:98:a5:aa:e0:e6:0d:
                    19:65:55:41:b6:b5:9c:93:d5:cb:88:1f:ae:cc:a9:
                    5f:77:74:dc:f0:90:66:66:95:3e:45:2f:1c:7b:f8:
                    82:b1:75:61:2e:15:0b:3c:4c:7b:d7:16:e1:66:26:
                    1d:4a:be:f9:a9:45:9a:e6:16:d8:91:47:f4:e3:02:
                    2e:f3:51:60:fa:25:59:b8:9c:a0:13:88:7b:34:58:
                    bf:de:c0:de:73:e9:30:7a:ed:1b:e8:e2:13:41:03:
                    63:f6:31:ac:a4:6a:48:45:20:22:11:38:6a:19:1b:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:08:AA:0E:C0:58:87:2C:9C:85:5B:5D:67:7D:F4:0C:51:95:7D:D2
            X509v3 Authority Key Identifier:
                keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e34382e302f32302d3234203d3e20313331363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:02:6b:57:e1:0b:00:a4:2f:48:91:b3:eb:b2:ea:08:83:8b:
         c8:0f:b2:77:5c:36:07:8c:1f:30:7a:97:88:ce:d9:87:b4:83:
         5b:ad:f1:16:3b:2d:52:e5:28:af:2d:70:75:48:0a:03:1b:74:
         5e:22:1a:03:05:1c:ba:cf:7c:ca:c0:96:e8:27:cd:c4:43:14:
         04:77:d4:0e:a5:7b:f4:cd:1c:22:cf:77:6b:e0:04:15:03:7b:
         fd:29:ff:86:5f:d8:c4:f2:e0:7c:49:e1:f6:74:a2:0a:3c:18:
         af:b6:02:e7:94:3b:6d:88:39:bc:24:ae:10:cd:54:96:00:ab:
         be:80:3d:68:f3:03:0c:ef:37:e8:f4:2f:96:56:f3:85:21:e0:
         e2:d1:26:78:19:7f:88:34:30:ee:57:80:33:82:b0:6d:06:8f:
         d4:16:01:14:ed:7c:84:fa:8a:db:06:bb:b4:81:11:e0:ad:6b:
         9d:79:57:40:a3:fe:8c:ac:58:ff:ba:35:89:2d:2e:38:e3:03:
         3b:e5:6c:97:53:b9:7b:de:81:8b:27:5b:f0:41:94:09:aa:5a:
         bc:c0:dd:35:e5:bd:c1:8b:1d:69:e4:6e:9e:69:65:72:ce:5f:
         4f:e9:5e:05:b0:1a:24:79:30:12:a2:ab:d1:d0:a3:2c:9e:09:
         ac:d8:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:32:56 2026 by rpki-client