Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235312e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          2TF0RM1n4gKfHsHGmBcuhbHP4uyfAzoLTDRjisZn5Rs=
Subject key identifier:   FB:0F:C5:D0:88:48:7B:6F:9F:36:DA:C2:3B:1C:74:26:D1:19:63:46
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       2ACB30F7A68C6D11E89A1EB11F7437AE9ABCB0
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:54 +0000
ROA not before:           Sun 03 May 2026 02:54:54 +0000
ROA not after:            Sun 02 May 2027 02:59:54 +0000
asID:                     38500
IP address blocks:        116.68.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:30:f7:a6:8c:6d:11:e8:9a:1e:b1:1f:74:37:ae:9a:bc:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:54 2026 GMT
            Not After : May  2 02:59:54 2027 GMT
        Subject: CN=FB0FC5D088487B6F9F36DAC23B1C7426D1196346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:0b:90:78:67:e9:36:a4:a4:cb:ca:62:9e:
                    36:dc:17:37:5a:f0:63:a8:e2:03:fa:45:1c:ca:54:
                    64:37:70:ed:90:e1:76:00:ac:f5:92:31:33:53:35:
                    49:5e:4b:46:c8:df:f7:b1:61:30:27:2f:5e:bf:a5:
                    98:46:23:41:16:71:d2:83:0c:75:3e:19:4a:cc:b8:
                    8c:45:7f:07:6c:a4:86:46:21:c7:87:4c:31:75:5a:
                    d5:b8:07:73:04:b5:93:bb:57:e1:54:22:6d:87:4c:
                    31:b5:7d:12:f7:b6:e0:8c:ac:d0:86:2a:67:ee:04:
                    eb:1e:eb:9d:5c:87:09:6c:2d:84:91:10:76:30:34:
                    57:a8:ec:3d:39:42:85:42:9f:a2:67:9b:eb:e2:70:
                    1a:d3:f7:78:52:d8:97:5d:85:1a:82:4d:a9:5d:e7:
                    1b:54:92:67:75:b0:0f:14:2e:35:74:40:9b:50:01:
                    a4:16:76:83:74:27:07:96:e6:03:15:5f:78:a8:1d:
                    b9:50:9f:c2:b1:c8:9a:52:96:01:ef:c4:da:2c:e7:
                    ea:db:3c:3a:63:9a:9a:c4:04:10:bb:88:56:66:7b:
                    d7:a6:86:b5:43:88:d4:58:f6:7c:be:88:d0:02:00:
                    a1:88:a1:44:30:30:7c:1c:ac:df:96:8c:99:32:3d:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0F:C5:D0:88:48:7B:6F:9F:36:DA:C2:3B:1C:74:26:D1:19:63:46
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235312e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:18:75:7a:39:68:97:2b:85:67:de:5e:e1:b5:de:af:f6:
         b7:98:e2:1b:d8:2e:19:a5:4e:35:51:98:4f:76:1f:70:c6:5c:
         34:83:07:1b:8f:b6:39:05:9c:9c:a6:4c:50:fd:b5:28:c9:66:
         9e:f7:10:e6:b9:ea:40:91:42:41:76:62:5d:04:dd:cf:1d:77:
         aa:26:a7:21:c2:0d:bd:d2:49:ce:c0:fa:c2:9b:05:fb:02:1e:
         fe:80:67:43:b9:a5:df:b7:d9:c1:4f:94:56:4f:d4:46:ad:e9:
         39:2a:b0:7d:d5:c7:51:87:e7:02:9d:87:a3:fd:fd:05:63:d5:
         80:e3:a9:6f:c1:eb:8d:9f:27:7d:6f:6c:2a:5f:82:d0:1a:75:
         74:8f:2f:df:c2:aa:d7:ca:02:76:a1:57:12:22:fb:ba:11:04:
         2e:0a:e1:b3:aa:d5:e6:50:e9:b7:2e:09:39:9f:00:51:b9:cc:
         91:5c:56:be:fa:ca:d4:9e:19:8d:6e:ec:eb:a5:0d:f0:ba:98:
         ef:ef:4c:1d:0f:b8:4d:62:88:c2:8d:ff:29:5c:d0:0e:a5:ad:
         86:a3:bc:85:28:5a:fa:45:c8:5e:78:70:73:dd:34:cb:a5:8d:
         8c:43:d8:40:de:65:01:da:b4:f3:23:b9:34:e2:2a:f2:47:c7:
         89:9a:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:25 2026 by rpki-client