Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235302e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          daAygj5e9yqsIZukkKuUYjq1SIgTcHnkRSqlWagQlRI=
Subject key identifier:   F6:4C:00:E9:0B:A0:2D:39:57:6B:11:2D:67:9D:55:4F:9B:A5:88:91
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       56890F7F7E701FFBB40BD681EC67536C653EEB1A
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 03:00:07 +0000
ROA not before:           Sun 03 May 2026 02:55:07 +0000
ROA not after:            Sun 02 May 2027 03:00:07 +0000
asID:                     38500
IP address blocks:        116.68.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:89:0f:7f:7e:70:1f:fb:b4:0b:d6:81:ec:67:53:6c:65:3e:eb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:55:07 2026 GMT
            Not After : May  2 03:00:07 2027 GMT
        Subject: CN=F64C00E90BA02D39576B112D679D554F9BA58891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:fd:9f:21:9c:5e:c4:68:51:a2:54:29:00:
                    74:e6:f6:37:c9:fd:06:69:67:02:8a:28:7f:85:41:
                    f2:09:ff:44:6c:83:32:86:73:49:e8:f8:97:96:52:
                    f9:53:e4:47:f5:72:48:48:55:90:ff:53:fc:d6:8c:
                    bb:2d:35:a4:a5:17:dc:3a:ea:06:ef:95:04:15:4f:
                    e6:3c:fd:26:84:75:d9:07:a7:c5:f1:68:68:c6:92:
                    11:e8:69:f5:81:8c:45:d5:34:b5:e0:20:90:12:b9:
                    61:24:fe:45:4c:61:e8:c6:01:d6:81:78:01:79:a6:
                    2b:50:70:84:d2:8f:d0:6a:98:c6:2c:c0:ff:20:b8:
                    17:3b:e8:5a:3f:dd:df:08:db:d0:b8:e9:f5:20:65:
                    c2:74:3e:88:8c:76:f8:72:eb:b7:e5:10:b2:f2:58:
                    1e:23:e5:73:3b:f5:a4:67:ee:78:50:2a:24:79:fd:
                    c9:fb:53:51:06:b0:c9:84:da:36:19:f8:60:82:69:
                    99:db:2a:2f:01:56:c3:a0:b4:61:72:e3:6c:4f:fc:
                    18:49:7f:0f:e0:fd:3d:4c:8f:af:e9:dd:33:d3:67:
                    ca:26:e3:40:59:4d:cf:29:dc:eb:65:8d:9c:03:6c:
                    bd:72:29:0c:8b:fd:8d:e0:11:12:2a:38:d5:fc:46:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4C:00:E9:0B:A0:2D:39:57:6B:11:2D:67:9D:55:4F:9B:A5:88:91
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235302e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:48:d1:fb:c2:72:e8:7c:64:16:dc:53:40:ef:89:cd:e1:e2:
         44:4a:18:9e:ec:1e:dd:26:0d:1d:5b:87:ba:5d:3c:36:37:59:
         ed:3c:e6:50:32:33:93:97:53:f3:e2:ef:15:65:b7:b0:f0:a5:
         5d:72:e1:96:4a:db:39:4e:1d:55:4c:30:26:8f:94:de:36:3d:
         6f:37:88:7e:03:6f:1d:1c:ee:c1:33:54:cc:af:09:df:c4:64:
         7f:fb:7f:9a:05:f2:62:e5:5c:be:b5:5c:31:ac:88:08:9d:9b:
         0a:24:b5:52:fd:76:37:a0:5e:3b:44:c4:cb:9a:5e:4f:fd:4d:
         e2:1c:7b:55:fa:bb:3a:ea:7d:a1:3b:10:b5:c5:ae:16:19:ed:
         56:e9:d6:f7:b6:83:b2:18:ac:97:96:d5:ea:98:ba:90:4f:b1:
         0b:68:fd:98:4c:86:81:20:e9:56:a7:3d:04:a7:1b:5e:53:c9:
         07:60:7b:69:a5:b7:64:7c:25:45:c4:58:f0:c9:d9:61:64:c6:
         76:f3:82:e2:b1:45:1b:9c:b8:12:ba:76:f1:58:10:82:66:54:
         04:fd:2a:67:95:2a:4b:ee:f1:c7:37:4b:45:34:d0:5a:28:95:
         e4:be:2f:e7:43:be:cd:b6:3a:04:af:9b:14:05:03:41:12:31:
         1d:86:4b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:10 2026 by rpki-client