Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa
File:                     3131362e3231322e37372e302f32342d3234203d3e203436303330.roa (raw, json)
Hash identifier:          F6CH1xWOW04b9AWH9hOzpC9sPtP3FUKuSlUMhrOcMFU=
Subject key identifier:   52:FB:72:C3:66:39:25:A6:E3:F7:0F:5B:95:35:16:AC:EB:E3:71:1D
Certificate issuer:       /CN=906CD1832E095FD864326D9340C3360CE2E04D88
Certificate serial:       1EAB14B8D6F314DA0429DDA758D9ED130CBE3E35
Authority key identifier: 90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa
Signing time:             Sun 03 May 2026 02:50:31 +0000
ROA not before:           Sun 03 May 2026 02:45:31 +0000
ROA not after:            Sun 02 May 2027 02:50:31 +0000
asID:                     46030
IP address blocks:        116.212.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl
                          rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ab:14:b8:d6:f3:14:da:04:29:dd:a7:58:d9:ed:13:0c:be:3e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906CD1832E095FD864326D9340C3360CE2E04D88
        Validity
            Not Before: May  3 02:45:31 2026 GMT
            Not After : May  2 02:50:31 2027 GMT
        Subject: CN=52FB72C3663925A6E3F70F5B953516ACEBE3711D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4c:44:28:f5:e9:b4:ed:01:98:fc:a9:4c:28:
                    c6:e7:6b:90:dc:7a:f0:94:66:b9:21:2f:61:04:44:
                    cd:d0:f4:ad:96:f6:c2:f7:49:50:b8:bb:eb:43:db:
                    52:7b:ad:91:f1:cf:2a:c8:f1:1c:d1:ac:55:07:74:
                    a7:61:83:58:2d:ea:68:d7:59:81:32:ba:b0:e7:fd:
                    1e:b6:86:c5:ad:f4:8b:95:88:ae:c4:b1:7f:1e:ce:
                    f9:2b:88:88:74:d7:89:e7:5e:41:a9:54:4e:17:49:
                    55:ae:d6:20:67:ed:06:fe:2b:1f:d1:dc:80:00:ae:
                    ce:1e:f9:47:e3:75:a5:68:f0:59:86:44:3c:2f:15:
                    c8:47:3a:ff:d4:e0:6a:61:90:47:1b:0f:fa:93:cb:
                    ca:20:8e:4b:c5:2d:26:00:18:b6:51:dd:a4:fa:0e:
                    38:38:c8:b5:d6:ed:e0:1e:86:9e:37:fa:1a:11:b5:
                    fe:fe:a0:85:09:f3:06:53:b4:91:64:e5:a1:fe:ef:
                    c7:4a:d6:32:c7:45:7b:89:41:22:26:a4:c1:a0:00:
                    07:90:40:83:9f:28:67:74:26:f2:4a:f5:ce:e7:32:
                    3f:66:15:93:38:d5:f6:cf:63:a2:c5:b0:7d:36:e5:
                    1a:ca:e5:14:7d:0e:ee:82:4c:bd:c3:51:16:84:b2:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FB:72:C3:66:39:25:A6:E3:F7:0F:5B:95:35:16:AC:EB:E3:71:1D
            X509v3 Authority Key Identifier:
                keyid:90:6C:D1:83:2E:09:5F:D8:64:32:6D:93:40:C3:36:0C:E2:E0:4D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/906CD1832E095FD864326D9340C3360CE2E04D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/906CD1832E095FD864326D9340C3360CE2E04D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d1d596c-09e3-4621-a63b-20a513cd48b9/0/3131362e3231322e37372e302f32342d3234203d3e203436303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.212.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b3:af:24:7f:20:59:11:65:85:72:12:aa:14:e7:e1:cb:9d:
         a9:67:51:cc:6b:e9:92:80:f0:58:9b:79:be:c1:6c:8a:de:85:
         c9:81:f7:2c:5b:9f:d3:2a:bf:20:47:db:88:30:1b:af:62:1a:
         45:72:d5:52:45:5e:bd:35:55:11:51:2a:2f:05:3b:c0:60:4b:
         c7:11:f3:04:1a:e4:90:d9:b8:60:7e:76:23:93:4d:23:a2:a1:
         86:8b:d2:67:14:6b:d7:ba:3d:19:35:17:8b:3c:96:e7:bb:c9:
         e0:ac:20:ef:a1:7c:4e:15:5c:65:b2:4d:be:12:3b:27:14:2f:
         f5:d6:e0:20:db:4a:00:5e:12:2d:4c:5c:d2:bf:9b:02:4c:1f:
         ad:1e:1d:dd:99:9e:1b:b9:dc:9e:e1:e7:6d:78:5e:46:10:44:
         bc:e8:b3:69:a3:6e:14:7d:ed:1a:83:8a:fa:0e:01:5c:3b:17:
         62:ed:6a:18:29:e0:25:98:c9:25:4f:d4:38:69:0a:6c:29:6c:
         28:8a:3b:e4:52:bb:f2:cf:89:d6:7a:66:2f:67:90:c3:3a:47:
         4e:d6:78:f9:04:8a:64:e8:a3:83:34:a3:96:8b:64:6c:ba:4f:
         1f:57:c7:5c:70:74:55:97:1f:7b:bb:b0:5d:f2:49:ba:af:7b:
         7a:d0:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:48:37 2026 by rpki-client