Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
File:                     3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa (raw, json)
Hash identifier:          WTjpFHIGu2gDfB2GlQZXB/JsliErUHPADqrKcqLudZY=
Subject key identifier:   ED:10:08:6F:51:16:F4:50:C3:14:74:A1:01:56:10:DE:DB:AD:F8:1C
Certificate issuer:       /CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
Certificate serial:       727DE042C188310F67D6694FA8B69D990913CB9B
Authority key identifier: B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa
Signing time:             Sun 03 May 2026 02:41:17 +0000
ROA not before:           Sun 03 May 2026 02:36:17 +0000
ROA not after:            Sun 02 May 2027 02:41:17 +0000
asID:                     137316
IP address blocks:        116.90.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl
                          rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:04:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7d:e0:42:c1:88:31:0f:67:d6:69:4f:a8:b6:9d:99:09:13:cb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1C01C2D31007FA9F778570A33A0BBB321509E8A
        Validity
            Not Before: May  3 02:36:17 2026 GMT
            Not After : May  2 02:41:17 2027 GMT
        Subject: CN=ED10086F5116F450C31474A1015610DEDBADF81C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:8f:cd:89:15:ea:b4:07:89:34:1a:6d:00:
                    1d:a1:7d:b8:32:15:9f:e4:c9:b5:d3:f3:8f:61:e6:
                    93:cf:c0:da:36:d7:24:b4:9c:c4:6d:49:f7:c0:36:
                    c9:9f:14:b3:d5:93:62:93:ad:87:fa:1a:f0:8d:a1:
                    1d:f5:70:65:96:7b:02:45:26:bf:2d:85:1c:98:66:
                    0d:7c:44:7b:6f:d9:69:8b:90:fb:ae:09:eb:b8:2d:
                    5a:f9:86:3e:ec:8f:3d:55:9d:f3:e9:7d:0a:46:84:
                    64:0d:52:f4:49:4f:8b:2f:ce:f8:a0:51:1e:0d:32:
                    ce:dc:18:6b:60:81:bc:b4:5b:ee:ef:31:fb:b7:0c:
                    3f:d0:03:ac:59:ae:4a:1f:1c:c3:d0:35:db:63:ea:
                    8d:04:1d:d8:09:a3:6d:53:f3:c9:41:15:46:70:94:
                    e8:e2:40:d1:1e:8b:d7:a8:73:31:7b:34:b0:ed:20:
                    a5:06:15:a9:4d:77:91:a7:8f:2a:dc:8c:04:a6:68:
                    65:27:20:71:6e:74:86:5c:9c:86:4f:8d:69:5b:6b:
                    95:5e:51:ba:d9:62:4d:a4:c5:c9:55:8a:4b:3e:08:
                    25:65:c9:85:00:39:14:2e:51:54:89:ce:83:55:90:
                    aa:c3:22:b6:44:81:be:91:fe:52:b6:be:9b:b5:8d:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:08:6F:51:16:F4:50:C3:14:74:A1:01:56:10:DE:DB:AD:F8:1C
            X509v3 Authority Key Identifier:
                keyid:B1:C0:1C:2D:31:00:7F:A9:F7:78:57:0A:33:A0:BB:B3:21:50:9E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/B1C01C2D31007FA9F778570A33A0BBB321509E8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B1C01C2D31007FA9F778570A33A0BBB321509E8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cc462a5-8f74-42af-883b-5e89ee5f2df3/0/3131362e39302e3138332e302f32342d3234203d3e20313337333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5c:74:b6:df:25:bf:0c:70:c3:9f:1b:aa:7f:18:98:f8:99:
         72:2c:00:dc:3f:de:a2:cc:27:39:92:52:c6:35:9b:0b:c3:23:
         39:9c:f3:40:67:22:9a:ac:da:6b:eb:7f:79:ec:0b:af:a2:07:
         16:20:06:46:02:d0:a1:f2:d5:30:7f:97:a5:fc:b6:fc:94:4e:
         af:5f:03:22:3e:a9:f9:c9:f4:67:4d:16:62:d2:0c:79:d1:5b:
         b4:b8:f0:15:f0:b2:03:54:8e:8d:9a:98:4e:44:28:d0:75:10:
         07:16:08:f8:a1:52:a5:9b:91:a5:16:60:53:5a:07:f1:a7:00:
         2d:97:f3:0e:4c:f1:3a:58:58:c0:6f:73:cb:3f:20:30:06:64:
         f6:50:2d:3c:b9:e2:50:7d:15:2a:f5:20:6c:b9:cd:08:b4:3e:
         d1:ba:14:bb:84:aa:14:ee:3c:57:2a:15:68:88:c6:b7:60:ea:
         17:a9:84:96:5d:89:ce:5c:e8:77:c5:ed:5f:19:59:44:7e:b7:
         84:07:fa:41:d0:22:19:8e:80:54:01:9f:11:f7:2c:e1:09:51:
         3f:d0:af:59:cd:9f:37:6d:de:10:7c:61:51:f9:29:1b:e1:ca:
         d8:4e:f8:07:4b:50:0f:59:f8:29:ce:00:bc:9d:84:b6:80:9d:
         e6:39:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:53 2026 by rpki-client