Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235322e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          8H9mZWrRONWSsxkfHaa1ehPVsOxQmHxQwrH189Mr7gk=
Subject key identifier:   70:CC:67:CB:EB:B2:40:B9:AB:66:48:27:B2:F4:B4:F4:7B:B6:28:CB
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       481123D6920DF6A6194BBAD082D3906E9A11772F
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:53 +0000
ROA not before:           Sun 03 May 2026 02:54:53 +0000
ROA not after:            Sun 02 May 2027 02:59:53 +0000
asID:                     38500
IP address blocks:        116.68.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:11:23:d6:92:0d:f6:a6:19:4b:ba:d0:82:d3:90:6e:9a:11:77:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:53 2026 GMT
            Not After : May  2 02:59:53 2027 GMT
        Subject: CN=70CC67CBEBB240B9AB664827B2F4B4F47BB628CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:82:63:0b:d8:d6:79:a8:26:dd:cb:4b:3d:20:
                    cd:f9:e0:97:49:c0:f3:4c:07:a8:b2:e9:87:ba:52:
                    59:c0:af:a6:d5:87:74:30:a8:a2:1b:ae:4e:b4:8b:
                    4d:dc:19:9a:39:fe:56:fa:f4:dd:8f:a8:94:81:9e:
                    96:0b:74:88:d9:d5:dd:8a:81:cc:83:4f:9c:fa:c1:
                    2c:bf:65:14:c7:b3:31:3c:06:1e:56:7f:ad:41:2c:
                    b9:2e:e8:de:5e:65:ec:7e:d9:cb:14:61:8a:bc:97:
                    9b:9b:28:8a:74:55:f3:46:99:fb:1c:0e:ad:a4:83:
                    3d:7e:19:b8:28:bc:b1:f8:72:58:58:8f:89:47:df:
                    90:16:e4:6e:4e:85:ce:91:34:54:cf:cd:7f:9f:ab:
                    68:5d:47:6e:ff:a7:20:8c:df:e0:c4:9b:34:95:1d:
                    0a:ca:40:8c:96:03:8e:60:0a:b7:d9:86:fb:05:05:
                    57:2e:82:73:8b:13:32:4a:d7:97:cb:64:92:6f:f7:
                    f2:78:08:72:86:3a:6b:92:01:dc:36:10:15:f1:9c:
                    99:2b:e3:0e:2d:3e:94:23:a4:63:9b:76:c4:38:cc:
                    98:66:55:7e:2e:0c:2c:5a:e6:40:c6:72:e0:ff:0a:
                    32:9e:03:97:83:1c:55:ce:af:d6:db:a3:90:b5:97:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:67:CB:EB:B2:40:B9:AB:66:48:27:B2:F4:B4:F4:7B:B6:28:CB
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235322e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:98:5a:a7:8c:49:f9:99:4c:4e:72:83:4f:2c:1e:6c:d0:
         89:b3:1d:84:74:c4:ce:5f:83:f7:f3:03:d0:c6:03:c6:7e:ad:
         b0:a5:36:e6:5c:89:0a:65:7b:28:57:08:9f:0c:9d:18:70:8b:
         ad:41:79:6d:75:58:95:10:b1:f3:ec:1e:1f:03:1c:0f:98:b4:
         29:30:ad:ae:ac:83:81:18:46:d2:5a:86:59:6c:70:c2:3f:f6:
         49:68:21:65:b1:c7:76:08:7f:44:8e:9e:d5:68:11:b3:50:f4:
         b7:eb:3f:1c:d6:3c:1c:1e:8a:6c:f2:bc:4b:c9:d1:ff:a2:c1:
         b2:46:a3:8a:ec:f5:18:0c:80:e5:2a:b6:6b:e7:de:93:ae:01:
         1d:b8:b0:54:77:f3:3e:38:9b:33:af:bf:8f:ae:44:3b:2c:00:
         4d:60:40:15:ea:c4:2d:b0:39:40:eb:ac:10:5d:cc:48:64:68:
         71:00:ff:bd:b6:eb:02:e1:5f:2a:02:77:57:77:ae:3c:21:4d:
         98:c8:2d:47:f6:bc:ce:1e:05:82:48:3d:01:ab:a3:8f:1a:7a:
         d9:a6:69:32:3d:e1:d4:75:6d:40:5e:e3:a9:53:e1:a8:df:e9:
         f1:f0:29:55:e5:c2:14:84:9a:34:71:81:78:9c:f9:ff:2b:e4:
         2a:a0:ce:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:46 2026 by rpki-client