Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          EL9fXOWLQsHFdm4YLPRS3aq1AYsov8IoKM2+DiLPCzo=
Subject key identifier:   35:D2:51:D1:CC:A1:7F:52:CD:BA:84:F4:6D:C4:72:44:C3:7C:8D:B3
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       6965D7AD3FD840AA96C459F76D3045CFCDF3AE46
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:19 +0000
ROA not before:           Sun 03 May 2026 02:36:19 +0000
ROA not after:            Sun 02 May 2027 02:41:19 +0000
asID:                     137316
IP address blocks:        116.90.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:65:d7:ad:3f:d8:40:aa:96:c4:59:f7:6d:30:45:cf:cd:f3:ae:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:19 2026 GMT
            Not After : May  2 02:41:19 2027 GMT
        Subject: CN=35D251D1CCA17F52CDBA84F46DC47244C37C8DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:a3:75:07:ec:02:3d:a0:c7:9d:a3:20:00:
                    c0:3f:f1:58:c7:05:d0:57:49:de:d3:5a:ac:9e:ea:
                    5b:55:e4:12:13:4e:e7:12:74:5e:4a:f1:37:ee:07:
                    36:d5:63:e8:99:49:16:b4:c2:a5:b1:e6:29:41:6d:
                    78:79:c8:da:fc:4c:42:04:ae:4e:93:7b:a3:24:62:
                    4a:63:aa:a9:24:57:ac:f3:f0:dd:18:e6:72:84:69:
                    4c:21:2e:da:4c:6b:9b:c1:fc:40:aa:0c:44:ee:9a:
                    e1:b9:bd:91:6f:8d:fb:69:af:27:76:88:5f:d4:ca:
                    1a:d7:15:0f:9e:f4:cc:a6:13:c2:f0:cc:f5:dd:c6:
                    f7:6f:28:e7:9e:26:b6:94:75:a5:ad:8a:1f:b5:65:
                    3b:ac:05:04:2a:0c:c9:65:62:13:99:3e:ec:c4:1d:
                    ca:03:b1:e6:97:a8:d0:23:d7:6f:d1:40:a0:7e:ab:
                    4b:50:1a:78:84:ea:37:5d:19:dc:62:47:87:a0:bc:
                    c7:79:1c:b1:d8:e3:f5:4b:3e:01:2e:e5:1c:2f:82:
                    1c:91:94:d7:30:03:b6:f7:e3:21:00:11:b6:bc:87:
                    18:f9:27:88:70:e4:08:b3:a9:6d:83:2b:a1:df:68:
                    51:ed:b6:76:97:e1:14:06:5c:4d:56:6f:74:05:14:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:51:D1:CC:A1:7F:52:CD:BA:84:F4:6D:C4:72:44:C3:7C:8D:B3
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137372e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:4d:b8:c6:5a:1d:b1:60:d6:10:c2:b7:de:6c:1e:d8:50:
         c5:21:0a:4b:3e:9c:be:bd:ee:bd:be:ef:0d:c4:2f:c3:21:a6:
         bb:b3:16:cb:d6:30:10:38:0b:cd:06:92:e6:ca:8b:20:36:2c:
         bd:0f:63:04:d0:67:65:90:15:a0:9b:a7:34:1b:df:be:8d:c8:
         6c:f8:92:c1:e0:43:56:19:f1:79:9b:19:6b:3c:db:29:e3:11:
         82:5c:f7:4d:1e:63:21:37:1c:62:a6:74:98:d3:9c:53:20:59:
         b0:fc:c0:30:f1:be:41:a8:ea:43:9e:34:8f:f2:8c:88:91:f8:
         0a:f3:71:ac:b4:ea:26:69:dd:73:21:71:a7:4e:8b:71:20:d2:
         62:11:b0:49:f2:ad:e5:69:2c:f1:4f:2c:e2:6d:82:d8:98:43:
         c4:53:bd:57:c4:06:f1:4e:dc:3c:bc:37:60:a2:a6:7a:f6:03:
         67:a8:ca:f2:c3:db:4d:ec:a6:41:bc:df:33:9a:e2:42:ae:20:
         4a:81:b7:8d:b4:43:55:5f:c1:3f:10:4c:8b:bb:fc:c9:de:8c:
         09:9f:9d:02:70:c7:45:e1:35:c8:e7:b0:14:f2:30:54:b0:27:
         65:eb:e1:83:9a:ce:98:00:8e:a2:24:a1:20:4b:40:43:57:ce:
         23:f2:df:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:37 2026 by rpki-client