Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          QXGc/fRT6X9oT7uy/PDO5MVBNXSwjFZO9LR1YksTXQE=
Subject key identifier:   35:4F:2A:9C:6E:53:E7:60:9F:41:18:D4:F5:30:22:63:AF:69:E2:46
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       569A9A2D176DDFFDA55678109B4896C55735BFBA
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:15 +0000
ROA not before:           Sun 03 May 2026 02:36:15 +0000
ROA not after:            Sun 02 May 2027 02:41:15 +0000
asID:                     137316
IP address blocks:        116.90.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9a:9a:2d:17:6d:df:fd:a5:56:78:10:9b:48:96:c5:57:35:bf:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:15 2026 GMT
            Not After : May  2 02:41:15 2027 GMT
        Subject: CN=354F2A9C6E53E7609F4118D4F5302263AF69E246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:d9:7b:49:e9:e2:79:24:66:cb:d1:b1:8d:
                    22:aa:da:68:ab:dd:04:e6:22:13:ea:a5:a4:50:0b:
                    19:b3:49:22:8d:02:27:5b:e0:29:d9:4a:05:0c:f4:
                    7f:f0:10:c4:c3:9d:53:65:0c:b4:1e:5c:ed:dd:43:
                    eb:56:dc:1b:ca:b9:6f:9b:56:ce:19:5e:f4:0c:d6:
                    f1:09:15:74:6f:20:f9:9f:c7:4c:32:0f:3a:ea:10:
                    80:f7:f2:14:6b:c2:21:0c:bb:52:b6:f0:56:e2:7c:
                    3d:14:0e:5d:c5:b9:e2:b0:43:0e:31:25:6e:61:5b:
                    39:1e:a1:51:60:32:4e:71:19:bd:1f:2a:81:d8:1c:
                    23:0b:6d:21:f9:08:91:e5:e7:7b:4d:45:19:0f:64:
                    3c:b1:4f:49:b8:87:73:e4:4f:43:00:8d:2a:be:0c:
                    33:f7:0f:56:6a:66:b2:1b:47:db:91:d9:9b:d5:d8:
                    42:51:d0:53:64:2d:b6:00:36:ba:3c:98:dc:9c:b2:
                    95:98:24:26:21:b0:dc:28:9d:2f:8e:34:c2:d1:fe:
                    cc:5f:11:e5:8a:13:1c:dd:03:bb:4c:4f:74:d4:88:
                    d7:7a:cf:8a:10:4f:27:b1:8b:32:98:75:2f:fa:42:
                    a5:74:91:1c:0c:49:2c:e8:b3:1b:9b:42:a7:e7:40:
                    ec:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:2A:9C:6E:53:E7:60:9F:41:18:D4:F5:30:22:63:AF:69:E2:46
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137362e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c2:86:f8:7b:93:ff:9a:f8:2e:16:9c:1b:0a:aa:b9:62:99:
         60:eb:68:c3:ac:d2:1b:58:90:fc:39:b6:a1:a8:f4:51:58:92:
         bd:a7:b5:ba:7b:30:c5:ed:7a:aa:88:55:15:f8:67:48:14:d1:
         1c:fd:75:f4:87:50:d9:c7:16:f2:b2:77:f3:f7:7a:a3:e6:87:
         58:97:fa:a9:ba:0e:96:9e:1f:81:93:55:f9:ba:00:7b:65:6e:
         65:f1:b5:56:3f:86:71:a7:e1:33:9b:70:1b:ca:1d:46:ec:01:
         2d:b8:7c:68:16:cb:09:ac:4d:b2:35:18:f5:7b:87:9a:ad:f6:
         b1:ea:ef:0d:aa:41:43:2e:9c:8e:83:83:a9:a0:b7:1e:90:3a:
         d0:47:40:dc:14:ac:28:04:96:8e:c3:14:b0:bd:d5:ca:45:65:
         8b:2f:1d:f8:5c:ec:e7:fe:24:10:bb:84:a6:10:82:3e:93:2f:
         ad:8d:40:9e:0a:6b:fa:38:87:30:d2:91:14:20:d5:b1:8f:47:
         14:ae:d8:7c:a7:91:fa:6b:ce:c8:aa:2e:23:8e:8f:75:eb:6e:
         84:7a:e7:52:18:b1:d9:92:d4:cb:26:12:08:2d:41:23:25:53:
         b1:a5:d1:92:20:1c:de:06:9b:f7:84:ea:29:d4:a0:88:5b:ba:
         72:50:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:08 2026 by rpki-client