Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e35342e302f32342d3234203d3e20313331363931.roa
File:                     3131362e3231332e35342e302f32342d3234203d3e20313331363931.roa (raw, json)
Hash identifier:          RPC7ZQJY5L1NkQcD4jYIBGIpY+dQgS7Hs1IK00SmkvM=
Subject key identifier:   74:5F:97:74:18:6A:02:F5:DC:88:11:C4:CE:5B:55:40:F1:69:6E:38
Certificate issuer:       /CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
Certificate serial:       1C87A0D91AD3C126F288F082CE4BA8B8DC0AC381
Authority key identifier: 9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e35342e302f32342d3234203d3e20313331363931.roa
Signing time:             Tue 22 Sep 2026 06:29:01 +0000
ROA not before:           Tue 22 Sep 2026 06:24:01 +0000
ROA not after:            Tue 21 Sep 2027 06:29:01 +0000
asID:                     131691
IP address blocks:        116.213.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl
                          rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 05:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:87:a0:d9:1a:d3:c1:26:f2:88:f0:82:ce:4b:a8:b8:dc:0a:c3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D
        Validity
            Not Before: Sep 22 06:24:01 2026 GMT
            Not After : Sep 21 06:29:01 2027 GMT
        Subject: CN=745F9774186A02F5DC8811C4CE5B5540F1696E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:69:8f:7b:3b:a6:46:1d:c8:03:b0:67:38:
                    29:7c:a0:68:8b:9a:74:45:16:ef:bc:d7:b8:07:57:
                    23:47:93:ff:66:9c:81:18:b1:7c:07:78:ce:1c:08:
                    81:80:62:0e:8f:6c:8a:62:15:85:71:12:da:2f:ea:
                    07:f5:e8:c7:d6:07:ad:34:96:c8:5c:d9:a3:df:7a:
                    11:0c:45:7b:50:4b:25:81:88:c0:e8:2a:41:c0:7e:
                    12:aa:0f:ce:7f:9c:8b:ca:79:94:ba:5d:2d:c5:c8:
                    20:2f:49:8c:1e:0f:14:3a:99:3e:c7:bf:ca:72:68:
                    80:8c:74:0f:ce:42:dc:a4:ae:95:c6:61:d2:8f:f8:
                    74:61:07:ee:a8:00:b7:03:b0:74:b5:c3:e6:19:95:
                    fa:22:93:7c:91:f1:73:a0:08:37:5d:8f:58:54:47:
                    53:35:d0:4e:8c:7d:ae:f0:34:62:7b:52:38:98:09:
                    0b:9a:fb:bc:59:1f:83:6c:6d:47:82:71:81:0e:91:
                    e2:28:b3:0e:19:79:4f:e8:cb:17:aa:57:b7:45:85:
                    47:79:ff:18:42:06:40:6f:b5:e3:4b:ed:67:90:01:
                    30:f3:9b:08:a5:c3:6a:8c:f9:3c:24:0b:0c:4b:8b:
                    cb:5a:36:0f:22:c9:10:f1:b9:b5:e1:31:4f:17:a1:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:97:74:18:6A:02:F5:DC:88:11:C4:CE:5B:55:40:F1:69:6E:38
            X509v3 Authority Key Identifier:
                keyid:9D:D7:FD:1C:0A:74:FE:31:7E:DA:41:E4:D1:CD:C8:57:AF:C1:77:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9DD7FD1C0A74FE317EDA41E4D1CDC857AFC1779D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/3131362e3231332e35342e302f32342d3234203d3e20313331363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.213.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:56:c8:b7:f7:df:88:46:c1:8f:4f:d0:b5:bd:32:39:67:e2:
         a6:ea:3e:44:d6:21:a9:c4:3a:43:79:ba:25:88:5d:66:a6:c1:
         f2:8b:20:01:19:cc:10:1c:b9:42:a5:1b:5d:34:00:64:fd:0b:
         34:59:23:89:3b:93:36:52:66:32:d3:32:18:7e:94:11:26:17:
         fd:7b:d5:9a:93:2a:6e:05:63:6d:91:fd:38:bb:a3:f7:35:21:
         99:ce:b4:3d:da:08:5b:f3:4d:6f:80:4b:c9:8b:9f:c4:50:a6:
         70:10:e0:8e:88:8d:8d:22:0c:1d:d9:c7:01:ba:63:4e:75:fe:
         db:68:12:85:14:d1:48:7a:79:15:42:30:30:25:65:b5:e8:c9:
         e7:81:e3:dc:51:46:7d:b8:1d:1d:57:d6:44:42:f4:41:a2:38:
         da:a8:74:09:e4:58:58:f1:71:75:62:b6:2c:43:43:90:3b:46:
         18:8a:17:96:98:bd:44:80:24:8e:5e:c2:65:e5:4e:6b:7c:c9:
         9f:72:90:0f:49:0c:28:6c:2f:a6:10:b7:b2:9b:ec:cb:9c:96:
         28:d4:2b:4b:a6:b3:fe:1f:35:3a:97:e0:50:5a:7f:8f:dd:fb:
         5c:72:ff:a1:9f:77:4e:c2:d2:ab:9d:a4:a1:bf:8b:d4:61:d0:
         f8:a8:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:53:33 2026 by rpki-client