Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
File:                     3131362e302e302e302f32312d3234203d3e203539313339.roa (raw, json)
Hash identifier:          sLtYSAekx4+fWo5lqk7vJ2/nnu8bKXpxqT5BWuDEsBY=
Subject key identifier:   27:0C:1F:2F:0B:7E:47:78:9F:EF:50:32:5B:C6:B6:EE:6A:08:91:45
Certificate issuer:       /CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75
Certificate serial:       0E56110677B5E2F2C1B4AF8C7772CEFE6BD06166
Authority key identifier: 91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
Signing time:             Sun 03 May 2026 02:46:11 +0000
ROA not before:           Sun 03 May 2026 02:41:11 +0000
ROA not after:            Sun 02 May 2027 02:46:11 +0000
asID:                     59139
IP address blocks:        116.0.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl
                          rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:56:11:06:77:b5:e2:f2:c1:b4:af:8c:77:72:ce:fe:6b:d0:61:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9176CB6BBE53908AB21AEFFC4F8F151D9A747E75
        Validity
            Not Before: May  3 02:41:11 2026 GMT
            Not After : May  2 02:46:11 2027 GMT
        Subject: CN=270C1F2F0B7E47789FEF50325BC6B6EE6A089145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:74:92:51:f7:97:e0:f1:63:ce:00:4a:0b:
                    60:22:87:86:dc:87:34:de:dd:e3:44:e3:67:53:eb:
                    c2:d1:ee:9b:cd:65:ec:61:6e:61:84:b6:f5:78:ab:
                    3f:01:37:46:11:f1:89:75:82:00:1d:2e:b1:b1:fc:
                    e8:5c:b3:91:7f:be:a2:fb:37:eb:a1:b0:f6:9b:90:
                    79:9f:6a:fc:f8:3e:bf:d7:69:e3:b4:e6:3d:32:40:
                    79:5f:fc:c1:7f:7f:ca:e2:de:2e:40:7a:86:28:27:
                    7a:a3:43:79:13:9b:4a:4a:f5:bb:0a:8e:9e:40:5a:
                    93:69:c6:69:d3:95:36:01:63:43:44:0d:7e:47:b3:
                    db:28:c9:f2:fe:65:f3:85:05:b6:00:1d:60:c8:ea:
                    e5:d1:73:06:bf:7c:6c:df:05:54:68:9a:59:3b:78:
                    22:d8:31:70:67:9a:62:71:7f:c2:0f:06:fd:71:f9:
                    20:fd:f8:a1:9d:f7:da:ab:0d:a2:4d:1b:76:01:b3:
                    20:43:91:98:05:8b:0c:3d:5c:26:50:e6:ee:1e:3c:
                    7d:a0:1f:aa:5d:ac:87:de:52:d9:f1:84:cd:6f:86:
                    66:46:b3:be:a0:b2:70:c8:58:ec:0b:65:94:a9:c7:
                    f2:f9:5f:86:75:b0:d3:40:03:e7:01:9a:42:cf:ec:
                    b6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0C:1F:2F:0B:7E:47:78:9F:EF:50:32:5B:C6:B6:EE:6A:08:91:45
            X509v3 Authority Key Identifier:
                keyid:91:76:CB:6B:BE:53:90:8A:B2:1A:EF:FC:4F:8F:15:1D:9A:74:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9176CB6BBE53908AB21AEFFC4F8F151D9A747E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:36:b1:04:12:a3:2a:46:4d:29:22:f1:89:67:93:f9:be:
         03:5f:83:32:91:7e:99:8d:74:24:d1:ff:5e:99:96:1c:e4:40:
         dd:5f:cd:1f:c0:2d:38:83:84:3a:74:30:5a:8d:9b:af:1b:e8:
         c8:a3:0b:1f:f2:8c:81:13:55:de:46:4f:40:bc:99:68:0c:75:
         8b:99:26:47:88:6f:98:07:80:75:d9:fc:e6:25:80:76:ac:01:
         de:df:3f:ac:c1:cb:40:22:a9:4c:fb:a4:ba:31:27:91:6e:3a:
         87:b2:ec:a7:ac:aa:90:5d:75:31:7b:59:c0:61:e8:f0:4c:8d:
         a0:23:77:50:16:b3:58:18:e3:60:82:42:85:43:0c:56:57:99:
         f8:a4:ed:65:c5:12:11:29:be:73:db:a5:13:8d:50:93:26:5b:
         a3:2c:b9:a1:99:7a:09:25:6e:e9:ae:8a:d8:16:b5:26:c1:47:
         af:9c:97:28:dd:63:f0:e1:5b:d3:17:f8:f8:9e:37:21:38:90:
         15:74:d8:89:52:f5:da:1d:95:d5:d5:1b:4b:dc:09:6d:c6:f9:
         94:f7:72:f1:12:63:ff:2e:a8:c3:21:7b:09:5c:85:97:fe:43:
         10:56:4a:b8:6b:b7:55:7d:6e:f0:c0:92:09:c9:f1:32:24:17:
         a4:30:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:11 2026 by rpki-client