Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa
File:                     3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (raw, json)
Hash identifier:          0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=
Subject key identifier:   DF:8C:82:5B:65:61:6D:BF:9C:17:F5:3E:DA:00:0D:53:66:74:03:8D
Certificate issuer:       /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
Certificate serial:       3A9F3597D415577838A80231D5F57E231A4E35DD
Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa
Signing time:             Sun 03 May 2026 02:42:51 +0000
ROA not before:           Sun 03 May 2026 02:37:51 +0000
ROA not after:            Sun 02 May 2027 02:42:51 +0000
asID:                     152060
IP address blocks:        113.192.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl
                          rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9f:35:97:d4:15:57:78:38:a8:02:31:d5:f5:7e:23:1a:4e:35:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38
        Validity
            Not Before: May  3 02:37:51 2026 GMT
            Not After : May  2 02:42:51 2027 GMT
        Subject: CN=DF8C825B65616DBF9C17F53EDA000D536674038D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:32:2e:60:ca:a9:bf:7e:21:e2:69:ba:2f:
                    a0:de:fd:89:61:20:74:ba:52:0a:18:f1:90:58:61:
                    ec:65:7b:00:bb:5f:7c:2f:62:1e:75:14:c6:ca:79:
                    13:0e:14:77:e7:d0:19:e8:2e:c0:f9:1f:58:ba:d0:
                    9e:f2:08:a9:50:92:49:dd:38:fd:42:45:f5:79:66:
                    41:25:f0:85:d9:14:99:90:56:dd:c9:69:2f:db:20:
                    5d:c1:93:6f:32:d7:b2:6c:f2:ef:93:32:08:34:08:
                    2b:68:3f:bd:80:e0:d8:f6:42:0c:32:5b:71:ea:7c:
                    d4:1e:4b:bd:f8:4f:86:fc:07:11:09:be:cb:4e:12:
                    71:22:22:7b:43:3e:b3:52:33:ab:76:b8:fa:34:4d:
                    f7:bf:98:fb:32:93:ea:3e:7c:24:39:e7:42:e1:f4:
                    c0:58:68:8e:e1:94:10:47:a1:25:a0:86:ea:58:4c:
                    1a:82:b9:45:58:5c:db:95:d8:c3:c8:2e:e1:88:1a:
                    76:18:c5:c4:fc:d4:e4:db:7a:f0:3f:2b:74:83:f1:
                    ba:95:a7:16:07:da:5c:77:51:fc:42:f9:61:db:3e:
                    60:d3:7f:10:4d:70:6d:13:50:ba:02:70:bc:4f:16:
                    94:c9:e7:c1:38:9d:69:ad:60:2c:1b:07:b4:c3:60:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8C:82:5B:65:61:6D:BF:9C:17:F5:3E:DA:00:0D:53:66:74:03:8D
            X509v3 Authority Key Identifier:
                keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/3131332e3139322e302e302f32342d3234203d3e20313532303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f1:bc:0c:a2:76:e9:e8:50:36:f5:56:df:1d:bc:dd:23:5b:
         f8:72:19:0b:8c:95:e4:3b:64:8f:77:cb:fe:cd:d8:dc:9a:3c:
         23:1c:13:73:b1:a8:25:ac:c3:39:a7:86:db:55:06:3e:99:36:
         e1:69:28:5d:68:28:ab:15:b2:78:86:e1:5c:24:55:8c:a9:02:
         bb:8e:41:f1:94:75:27:60:e9:a3:52:44:49:92:04:d8:4a:0c:
         6c:b7:b5:36:09:fe:cd:43:13:58:df:66:5e:85:5f:d7:7b:d1:
         ee:cc:f8:1a:26:7a:93:94:e5:aa:a3:7c:af:6d:a2:3e:5a:64:
         c5:97:4d:29:4b:37:99:61:65:5d:70:76:12:48:26:e8:d4:dc:
         02:87:d2:27:0a:d2:aa:3f:29:20:8d:37:9c:9d:ed:43:43:6c:
         46:ef:88:4e:b2:ee:08:64:66:37:76:df:b2:9c:b9:cb:39:01:
         3a:b9:1a:a9:1b:d0:58:5d:de:bf:6d:a0:e0:d5:7f:e5:68:e6:
         22:7e:d4:62:21:cb:1e:70:96:3d:5d:55:76:66:6a:e7:9a:62:
         c7:05:72:cb:df:a2:f2:24:14:16:17:2f:fd:32:2e:20:b3:4d:
         72:63:2f:5d:90:07:ad:cc:d3:d0:a0:b2:46:1b:cb:fc:4c:f3:
         22:26:15:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:16:42 2026 by rpki-client