Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa
File:                     3131362e35382e3139342e302f32342d3234203d3e203338313534.roa (raw, json)
Hash identifier:          4hL7+e18qobBBQHbTnmFkA+ZM9pKWiAv/aAZLelInyQ=
Subject key identifier:   DD:6E:B3:5C:53:46:0C:47:38:9A:7A:D1:BC:78:C9:D0:04:0A:8D:E6
Certificate issuer:       /CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
Certificate serial:       06FD84AA585AC5592356B053157EF81C57CA2785
Authority key identifier: B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa
Signing time:             Sun 03 May 2026 02:42:21 +0000
ROA not before:           Sun 03 May 2026 02:37:21 +0000
ROA not after:            Sun 02 May 2027 02:42:21 +0000
asID:                     38154
IP address blocks:        116.58.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl
                          rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fd:84:aa:58:5a:c5:59:23:56:b0:53:15:7e:f8:1c:57:ca:27:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865
        Validity
            Not Before: May  3 02:37:21 2026 GMT
            Not After : May  2 02:42:21 2027 GMT
        Subject: CN=DD6EB35C53460C47389A7AD1BC78C9D0040A8DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:75:c3:e5:51:30:be:2b:93:e9:f7:36:94:
                    15:59:e6:72:39:d3:36:82:87:89:1b:76:10:a2:60:
                    30:97:13:ef:1b:22:db:e2:38:f9:d7:3a:a1:76:6e:
                    c9:b5:eb:1e:d3:9f:de:55:c6:8f:67:89:df:c4:22:
                    3f:2f:04:06:71:e7:7d:d1:db:b1:cd:77:63:89:06:
                    ca:b3:98:8d:49:13:fb:2c:2b:b0:c2:b1:f6:d9:00:
                    b4:a1:ea:0b:92:d2:c9:31:71:44:93:94:ea:32:b9:
                    88:64:b7:b7:5f:ca:36:1b:3b:57:9c:02:7e:47:6f:
                    4f:a2:70:aa:35:d3:ab:95:3c:e7:8d:ea:ac:c1:4a:
                    57:cb:13:66:0c:83:a8:6e:a8:75:79:2a:c9:b5:5a:
                    e8:08:1d:3d:17:da:77:79:c1:c1:97:5d:74:69:33:
                    8b:36:07:87:1d:e9:40:af:95:02:b1:8d:1a:de:f7:
                    53:88:e9:e6:2c:c9:f3:65:fc:ce:b7:28:86:7e:77:
                    c4:98:2c:ad:df:53:35:a4:23:0f:3b:fe:0c:b0:73:
                    63:59:04:75:20:8d:05:65:cc:c7:67:8a:49:b6:70:
                    10:32:a9:fb:6f:8d:d3:46:88:55:d7:cc:31:e5:a1:
                    05:98:98:6e:04:8c:bc:aa:d7:f8:07:83:07:58:27:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:B3:5C:53:46:0C:47:38:9A:7A:D1:BC:78:C9:D0:04:0A:8D:E6
            X509v3 Authority Key Identifier:
                keyid:B9:BC:CC:BE:89:27:A7:BA:B7:85:3C:7A:BB:0A:F3:95:CD:04:78:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B9BCCCBE8927A7BAB7853C7ABB0AF395CD047865.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6febb68a-8a5d-411c-8bb3-833423100b6e/0/3131362e35382e3139342e302f32342d3234203d3e203338313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.58.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:3c:7c:c6:73:c9:6a:5e:c8:d7:83:2d:78:9a:91:79:3a:48:
         18:44:f8:a6:e8:46:41:e8:1f:d7:5e:6a:2a:a8:c9:58:9c:ec:
         12:ef:6a:9d:e6:7c:c8:e1:0e:13:2d:d9:0d:a2:79:02:b3:f4:
         74:e2:c5:12:04:d5:1a:1b:e4:39:9f:27:56:15:10:e9:ac:9a:
         69:57:66:53:8e:a7:15:65:19:77:3d:03:37:a9:ee:f6:d5:b1:
         e4:ea:72:1f:3a:61:8a:19:37:01:e4:df:13:1b:d9:b3:45:5e:
         0d:32:ad:14:d9:30:e3:15:0e:81:55:74:53:b2:14:e4:39:89:
         ec:c1:71:c4:ba:5a:56:fe:9e:9a:68:cd:3d:56:4b:31:51:63:
         dc:9e:04:d0:e5:31:4c:ed:fd:2b:49:95:16:86:70:06:43:71:
         06:9a:32:ec:c5:ab:ee:b7:b3:e3:16:ae:7e:ae:a2:45:f7:dc:
         62:91:35:c9:7c:2e:0e:53:b2:51:94:93:e6:be:a3:59:c6:d5:
         4d:4e:f6:3e:69:3d:46:59:54:ca:3b:2c:a8:35:13:a5:be:12:
         a6:df:a1:dc:46:b2:34:ee:b4:b5:e8:86:d9:c3:b9:9e:76:ac:
         dd:03:5a:a5:b4:e3:1a:1b:df:91:51:06:23:ca:3f:6e:5d:bb:
         3c:b8:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:50:20 2026 by rpki-client