Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          jx7F8IfrVx81Xa4tjsCWniPJd7MrdX4p2VrY36t353g=
Subject key identifier:   A3:D1:B0:DA:2B:9D:BF:F8:B4:2C:C9:89:2F:5C:35:7F:1A:3B:6C:41
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       70C3324C5EC8A31AD00B35AEE455E2C51B76BFAD
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:18 +0000
ROA not before:           Sun 03 May 2026 02:36:18 +0000
ROA not after:            Sun 02 May 2027 02:41:18 +0000
asID:                     137316
IP address blocks:        116.90.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c3:32:4c:5e:c8:a3:1a:d0:0b:35:ae:e4:55:e2:c5:1b:76:bf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:18 2026 GMT
            Not After : May  2 02:41:18 2027 GMT
        Subject: CN=A3D1B0DA2B9DBFF8B42CC9892F5C357F1A3B6C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:f9:d8:e9:b6:34:7c:e6:f2:fa:b6:00:52:
                    cf:ad:51:0d:53:8a:fe:c5:36:23:3f:cc:bf:1e:49:
                    50:7f:67:45:9f:7d:42:a6:ee:c6:ac:64:db:d3:4f:
                    64:b2:47:72:e8:b7:7e:5f:85:54:b1:93:8c:c7:ab:
                    ec:c5:33:2f:62:84:d5:f0:9a:2c:c0:4a:9c:b6:f8:
                    8d:9d:18:cb:18:f4:c0:c4:8f:6e:69:e5:69:b9:d8:
                    4a:ab:de:a6:2f:c6:3b:a2:fc:e9:75:6d:96:0e:1d:
                    b7:f7:17:98:c3:61:e2:8e:3b:ac:1f:fe:95:3e:62:
                    d4:3b:3a:33:d7:2b:45:26:99:2e:49:e9:fc:76:c2:
                    02:1a:0e:2d:03:88:13:26:e1:46:f9:35:c5:5e:0c:
                    d7:76:2c:e5:eb:95:8f:42:fc:7f:8d:aa:a5:84:69:
                    ab:b0:f1:de:d0:15:81:e4:8c:1d:0f:61:b5:8e:85:
                    87:86:98:3e:64:79:33:52:56:fd:f9:40:d1:d6:9c:
                    15:a4:84:45:68:b4:14:93:18:5d:fe:38:98:ea:74:
                    ca:d0:63:97:b6:f0:b7:6f:eb:7a:e1:c6:5c:d8:98:
                    80:df:23:e0:69:30:e6:fa:f2:7e:29:d9:f1:00:5f:
                    8f:e1:55:38:50:ab:d6:98:f9:f3:0b:cd:55:24:de:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D1:B0:DA:2B:9D:BF:F8:B4:2C:C9:89:2F:5C:35:7F:1A:3B:6C:41
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3137392e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:66:c1:d9:73:37:6c:cf:03:12:cf:e6:90:1d:c2:64:49:
         63:83:e3:2d:b4:92:45:61:f7:f1:b8:68:eb:40:b9:65:f0:d9:
         1c:3a:2e:72:4e:9b:f9:16:01:23:25:99:b3:c6:7e:21:2a:48:
         de:1a:85:08:03:a0:79:85:14:ea:9d:60:4a:26:9b:5b:f8:2c:
         e7:95:da:77:1a:0d:c6:2e:01:ee:47:6b:75:79:8b:f6:25:4d:
         ef:01:bd:dd:8c:e9:34:ff:87:2f:60:ef:07:11:42:59:cb:68:
         b2:8f:3c:4d:ce:8e:18:ea:70:ca:90:f9:6d:71:0c:bb:78:81:
         29:ae:66:d4:95:85:2d:b3:c8:ad:db:5c:86:3b:13:8b:d5:63:
         5a:d5:89:9e:19:37:80:bb:be:5e:30:62:c3:a6:59:35:12:d1:
         30:2d:5f:3d:d2:61:c9:4b:cb:a8:e6:85:0d:20:e1:33:0c:11:
         fd:c3:16:b6:0f:42:13:46:56:e0:12:98:aa:f9:da:dd:8b:98:
         44:cd:76:34:3a:1b:3a:45:b6:70:b5:77:83:3f:f3:04:98:9b:
         c9:8e:12:f1:d0:d3:08:29:1a:d9:b8:4f:98:2c:ff:13:09:ee:
         4f:c9:ef:92:e2:36:80:c4:fc:74:5b:87:dc:6e:9a:83:96:79:
         a4:8d:c3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:58 2026 by rpki-client