Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa
File:                     3131362e35382e3139322e302f32312d3234203d3e203338313534.roa (raw, json)
Hash identifier:          +LPJ5wMBOnCiRiVVBw9/f075KEvSA/QkdJARXOeWxBI=
Subject key identifier:   53:EA:A8:5C:B2:5E:C5:D4:76:0F:8A:F0:5A:79:0D:53:B1:28:8C:7D
Certificate issuer:       /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
Certificate serial:       68356F7BFDAC4B6DE2EE6CC9FF4A839E2A95F5DB
Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa
Signing time:             Sun 03 May 2026 02:42:22 +0000
ROA not before:           Sun 03 May 2026 02:37:22 +0000
ROA not after:            Sun 02 May 2027 02:42:22 +0000
asID:                     38154
IP address blocks:        116.58.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl
                          rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:35:6f:7b:fd:ac:4b:6d:e2:ee:6c:c9:ff:4a:83:9e:2a:95:f5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
        Validity
            Not Before: May  3 02:37:22 2026 GMT
            Not After : May  2 02:42:22 2027 GMT
        Subject: CN=53EAA85CB25EC5D4760F8AF05A790D53B1288C7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:fa:42:10:4a:fb:89:b3:fb:90:a8:83:5e:
                    15:b6:a4:06:8e:75:8d:5e:05:70:f8:ce:33:7b:0b:
                    6b:5c:50:06:c5:81:da:17:5d:02:c7:76:b9:8d:1b:
                    ea:bc:15:22:0d:98:0c:e1:dd:e6:81:da:73:47:35:
                    0b:15:bb:6b:3c:fe:6e:da:85:95:ad:53:ac:e1:02:
                    68:37:0d:f6:a3:52:ee:e1:31:cf:92:3a:ce:51:48:
                    aa:64:3d:ea:39:ff:a8:f8:0f:68:37:cd:1d:cd:7c:
                    06:50:02:23:57:96:9b:95:45:6f:94:22:ff:1a:49:
                    15:6b:4e:e7:e7:61:c3:3c:49:eb:f5:2b:b1:af:bf:
                    72:7e:41:f9:b1:6c:0d:3f:f8:13:08:6f:c6:3c:cb:
                    cf:bf:37:a2:5e:ba:40:60:81:34:72:52:8c:e2:c0:
                    90:2c:1d:0d:90:9f:b5:0e:bb:17:b2:4b:d5:7a:d7:
                    92:8c:df:34:82:82:99:be:ea:a4:3a:6d:10:d2:16:
                    f9:c1:9a:1e:07:c0:6d:32:9b:27:b9:2b:2f:5e:3d:
                    48:b4:96:77:25:8f:30:43:bd:9b:80:31:aa:f5:45:
                    6c:14:25:89:7a:1e:5c:64:0d:d1:00:c8:8c:5f:99:
                    0d:94:63:8d:27:10:db:cc:19:13:a2:ee:f4:37:90:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EA:A8:5C:B2:5E:C5:D4:76:0F:8A:F0:5A:79:0D:53:B1:28:8C:7D
            X509v3 Authority Key Identifier:
                keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139322e302f32312d3234203d3e203338313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:e6:31:9c:58:5c:31:8d:74:f9:1b:80:60:e3:40:9d:5e:8f:
         36:ca:6e:bf:4b:c9:a2:73:0a:b2:d3:80:70:b9:82:33:0d:f2:
         e1:04:f6:29:12:f8:6c:ba:f6:4a:c0:63:27:29:0d:74:88:db:
         5c:68:5d:20:85:3f:4d:3e:c4:2c:ec:82:f9:ea:46:8d:3c:65:
         60:4d:8a:b7:49:2b:d1:3c:a4:95:00:0e:82:f9:7e:bb:07:5b:
         f7:b5:80:d7:4a:ac:f4:03:7c:9a:82:9f:82:ee:ab:d4:ec:11:
         17:f0:b5:48:35:4f:cf:9f:fa:d5:19:67:4c:99:ef:0f:20:9f:
         c9:a2:16:65:da:dc:01:a3:13:8d:90:78:f3:82:2a:b7:c8:ea:
         81:df:45:ad:ad:82:0a:65:cf:07:4d:48:88:54:c8:ff:06:57:
         0c:d6:d4:26:92:55:3d:5c:f3:35:70:73:3b:27:6d:28:fb:3f:
         10:b9:63:85:ea:f3:ca:80:1d:9d:1b:0a:81:00:e1:d1:2a:5c:
         42:15:02:a6:ac:ea:39:97:a1:24:df:7e:05:7b:3f:a1:ea:dc:
         c4:f2:2a:9d:a1:3e:9e:96:60:76:32:f1:1e:74:fb:5e:30:85:
         12:fe:57:b8:2e:b0:b5:91:37:ed:13:8d:ba:f0:e8:7a:fc:b3:
         b1:5b:fe:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:37 2026 by rpki-client