Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37342e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37342e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          YdaOKtrJJCfB2mcsh0BnmVaHbwYDxWuOal7DMCKT+z4=
Subject key identifier:   A1:38:FD:D2:04:A3:EC:47:2A:3F:76:D0:B8:07:20:43:B2:39:C2:F3
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       5AA4D3C7BDF32166EEFD531E26E37BA3B38C2A03
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37342e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:36 +0000
ROA not before:           Sun 03 May 2026 02:45:36 +0000
ROA not after:            Sun 02 May 2027 02:50:36 +0000
asID:                     46030
IP address blocks:        116.212.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:d3:c7:bd:f3:21:66:ee:fd:53:1e:26:e3:7b:a3:b3:8c:2a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:36 2026 GMT
            Not After : May  2 02:50:36 2027 GMT
        Subject: CN=A138FDD204A3EC472A3F76D0B8072043B239C2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:8f:4a:6a:a4:8b:ff:0e:63:8a:13:44:d7:
                    24:76:0a:01:bf:83:fb:bf:e0:3f:9e:b4:a4:d1:ad:
                    2f:5c:f3:81:ac:10:2a:91:f8:14:aa:4c:43:c1:42:
                    0d:08:b5:87:6f:a0:9a:11:14:0b:d7:9b:54:be:30:
                    7a:c4:df:fb:61:13:71:1b:cf:38:29:8e:8f:ce:7f:
                    ee:ac:d6:2b:0d:c5:18:e3:2f:82:62:b8:25:b7:31:
                    6a:63:ca:e8:01:14:72:dc:5d:72:b1:9c:69:b0:89:
                    2d:5d:5b:c4:35:c4:ae:40:93:ed:6a:e0:b4:ca:67:
                    a7:a7:0d:62:bf:79:b9:9f:c6:e9:24:9e:80:36:47:
                    09:de:1c:28:28:19:46:5c:21:9a:8a:aa:b4:04:6d:
                    8b:f1:b8:18:d4:de:94:c4:7b:6a:d7:1d:f8:b6:14:
                    a9:b3:1b:69:8e:aa:17:03:21:5c:5e:95:91:55:e1:
                    3d:4b:c3:ed:6d:0c:1e:32:67:0a:99:6a:fd:dc:26:
                    5e:e7:37:89:2d:d5:b5:12:38:41:12:b8:f6:87:4f:
                    7b:05:df:9c:e1:63:cf:05:9c:10:55:40:b2:08:09:
                    f6:0c:8a:33:74:22:b2:eb:55:62:bb:e9:7c:f7:10:
                    91:0e:99:1a:dd:95:e1:ea:9d:e6:05:6d:e2:7a:eb:
                    d5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:38:FD:D2:04:A3:EC:47:2A:3F:76:D0:B8:07:20:43:B2:39:C2:F3
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37342e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5f:2d:1c:c8:f0:b0:c7:6a:e4:08:86:4a:f7:d8:f6:53:d4:
         ad:4d:df:f4:3d:13:fd:db:78:22:18:10:92:e3:e7:9c:8e:5d:
         21:0c:17:80:18:7e:c7:1f:3d:ed:13:68:9c:66:8b:79:a6:fc:
         94:2a:2d:0e:7e:5d:61:08:bd:ec:e2:dc:15:d5:7e:c2:6c:f3:
         56:e5:ba:82:66:f3:8c:6d:04:bc:ab:40:e3:b6:9d:50:4c:6d:
         e9:6c:a6:65:7a:e7:b6:6e:2f:3b:e8:84:3f:28:6d:77:44:0a:
         42:60:5d:e4:71:44:e5:3a:58:cc:7a:e1:2b:d7:92:0e:e4:07:
         f4:fb:97:73:d0:08:e8:e8:65:e5:06:e4:86:75:f9:e3:fe:4b:
         38:be:03:68:1a:b6:f9:12:ce:34:f4:b4:fd:f2:f2:3b:48:a4:
         12:a2:4d:9c:8e:86:01:1c:24:b5:a8:7f:b0:0d:88:ce:82:d7:
         b9:a0:12:12:ee:0b:dc:5d:65:e9:45:1c:5a:f2:d6:db:cd:93:
         4f:d8:72:e7:5a:7a:45:3e:08:ac:4c:a2:03:2a:c9:e3:1c:11:
         f2:a9:a2:72:7d:14:74:ac:d4:05:86:c6:77:b2:cf:14:67:f0:
         a2:65:b1:74:26:a1:44:4c:db:57:16:0f:d7:dd:8a:75:f7:0d:
         ab:94:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:34 2026 by rpki-client