Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3234392e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          YbGEa5+7EgfU8zOa/xFFfP5gXHie0W+N991xWSvjRn4=
Subject key identifier:   99:FE:AA:E3:D1:FC:AA:DA:37:70:3B:4E:65:1A:CD:6F:DC:54:F9:CA
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       3B8F238D160741ED9D551E8161062C1741D2A967
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:57 +0000
ROA not before:           Sun 03 May 2026 02:54:57 +0000
ROA not after:            Sun 02 May 2027 02:59:57 +0000
asID:                     38500
IP address blocks:        116.68.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8f:23:8d:16:07:41:ed:9d:55:1e:81:61:06:2c:17:41:d2:a9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:57 2026 GMT
            Not After : May  2 02:59:57 2027 GMT
        Subject: CN=99FEAAE3D1FCAADA37703B4E651ACD6FDC54F9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:9b:32:4a:68:2d:b6:c9:1b:90:db:16:16:
                    74:a4:5d:ba:b6:fb:b0:4c:bc:f1:92:be:26:21:11:
                    06:f8:0a:60:73:10:ca:7d:eb:3b:b3:09:73:e2:00:
                    ce:1c:3b:65:92:98:53:20:10:83:4c:77:e6:86:ab:
                    ef:c2:15:39:7f:34:3d:e6:b1:1c:6f:e8:7e:3c:12:
                    68:4c:59:9d:c3:90:8f:06:53:84:14:8b:db:ca:7e:
                    ec:f2:6e:b1:cd:a6:f2:5a:00:86:a2:e7:e4:89:9d:
                    12:cb:e2:75:11:9a:4a:73:49:90:18:c8:34:9d:07:
                    e2:d2:a3:32:d9:c4:99:d6:2a:34:a8:07:41:ee:7f:
                    8a:e7:aa:cb:9c:79:a3:64:77:93:a0:a6:73:9d:e0:
                    1d:54:b3:a6:3c:82:49:de:0e:73:cd:d5:96:47:6e:
                    0a:ac:60:ed:dd:ac:5b:b2:a1:bf:90:c8:93:09:85:
                    37:fa:93:49:30:a0:de:62:c9:65:af:13:d3:ad:26:
                    0a:cb:f0:bf:e6:f3:9d:ae:fb:16:d0:48:ed:31:7f:
                    f0:02:70:af:fb:80:4b:bc:0e:92:b4:f6:7e:72:ac:
                    5f:df:e9:46:09:f2:5a:4a:73:e6:63:53:c9:31:e7:
                    1a:96:6b:6d:4f:21:51:93:1f:21:16:56:c1:bc:c6:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FE:AA:E3:D1:FC:AA:DA:37:70:3B:4E:65:1A:CD:6F:DC:54:F9:CA
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3234392e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:be:f5:b4:b2:49:d0:ec:69:09:15:bd:1c:c0:09:d0:c8:1d:
         28:09:63:41:95:f1:2f:f1:3b:41:81:7e:e5:e2:5e:73:4b:fb:
         1a:b1:a1:fc:3f:c9:bb:2e:c1:d9:d8:2f:86:04:26:9e:ad:b6:
         54:29:b8:d7:7f:5c:b0:8d:e9:10:d1:fe:13:b3:e8:2a:01:99:
         0c:a3:e1:e4:9c:c6:ae:0e:8d:97:25:f6:32:94:13:ac:8b:37:
         88:96:cf:5c:12:02:d1:a5:3e:12:61:66:8e:77:c9:f3:f6:63:
         b5:ae:3d:78:33:6d:36:ac:72:a7:bf:f7:07:37:0c:0f:64:29:
         2f:75:08:78:8c:5e:dc:55:b8:ad:69:0a:c8:7c:43:f7:1d:9f:
         af:e6:60:e4:41:87:8e:4b:e9:3d:36:f8:de:88:36:e3:14:2e:
         3b:5d:7a:d6:7e:40:73:96:58:b1:e3:54:11:84:1d:73:4d:ad:
         bb:f3:05:c5:f8:e5:a2:b2:24:3d:31:c0:6b:cb:e0:5c:8f:34:
         dc:4e:4e:6e:01:6f:6d:1a:42:9f:68:48:cf:4b:61:04:58:6e:
         dc:c9:df:f6:36:bb:8c:99:38:e6:46:27:c9:73:11:e8:05:9d:
         a3:50:8b:06:13:7d:18:b9:ed:19:51:b2:43:f3:71:42:7c:8e:
         2d:9b:bf:33
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO48jjRYHQe2dVR6BYQYsF0HSqWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTdaFw0yNzA1MDIwMjU5NTdaMDMxMTAvBgNV
BAMTKDk5RkVBQUUzRDFGQ0FBREEzNzcwM0I0RTY1MUFDRDZGREM1NEY5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVE5sySmgttskbkNsWFnSkXbq2
+7BMvPGSviYhEQb4CmBzEMp96zuzCXPiAM4cO2WSmFMgEINMd+aGq+/CFTl/ND3m
sRxv6H48EmhMWZ3DkI8GU4QUi9vKfuzybrHNpvJaAIai5+SJnRLL4nURmkpzSZAY
yDSdB+LSozLZxJnWKjSoB0Huf4rnqsuceaNkd5OgpnOd4B1Us6Y8gkneDnPN1ZZH
bgqsYO3drFuyob+QyJMJhTf6k0kwoN5iyWWvE9OtJgrL8L/m852u+xbQSO0xf/AC
cK/7gEu8DpK09n5yrF/f6UYJ8lpKc+ZjU8kx5xqWa21PIVGTHyEWVsG8xuIDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUmf6q49H8qto3cDtOZRrNb9xU+cowHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE+TANBgkqhkiG
9w0BAQsFAAOCAQEAAL71tLJJ0OxpCRW9HMAJ0MgdKAljQZXxL/E7QYF+5eJec0v7
GrGh/D/Juy7B2dgvhgQmnq22VCm4139csI3pENH+E7PoKgGZDKPh5JzGrg6NlyX2
MpQTrIs3iJbPXBIC0aU+EmFmjnfJ8/Zjta49eDNtNqxyp7/3BzcMD2QpL3UIeIxe
3FW4rWkKyHxD9x2fr+Zg5EGHjkvpPTb43og24xQuO1161n5Ac5ZYseNUEYQdc02t
u/MFxfjlorIkPTHAa8vgXI803E5ObgFvbRpCn2hIz0thBFhu3Mnf9ja7jJk45kYn
yXMR6AWdo1CLBhN9GLntGVGyQ/NxQnyOLZu/Mw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:36 2026 by rpki-client