Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235342e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          2NJAQRPygnAQrBXL1nzsMyZY3N177qCt+PYLTel3gTc=
Subject key identifier:   0F:D3:6F:7E:BB:07:28:00:26:21:DC:51:60:FC:67:3D:19:3B:AE:C8
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       0E04D366D24C753656F74ACB7AD7989E7B0115C7
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:57 +0000
ROA not before:           Sun 03 May 2026 02:54:57 +0000
ROA not after:            Sun 02 May 2027 02:59:57 +0000
asID:                     38500
IP address blocks:        116.68.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:04:d3:66:d2:4c:75:36:56:f7:4a:cb:7a:d7:98:9e:7b:01:15:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:57 2026 GMT
            Not After : May  2 02:59:57 2027 GMT
        Subject: CN=0FD36F7EBB0728002621DC5160FC673D193BAEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:75:a7:75:58:bc:40:60:87:f8:06:90:42:
                    c4:9d:c7:1c:5a:7f:67:90:93:e9:a1:a9:bd:31:19:
                    67:b1:67:f4:98:7a:bf:e8:7e:90:31:58:a4:a6:cd:
                    64:a9:df:7c:cb:cf:73:d1:b6:9e:6e:0b:a2:2d:94:
                    51:f1:cc:44:e4:1e:b3:1f:cb:5a:43:18:6e:cb:8d:
                    64:3d:71:ae:3c:cb:a0:55:05:50:b9:5b:19:db:48:
                    c5:d2:4b:41:14:b3:ad:1f:be:42:54:6c:19:6f:0a:
                    a9:da:53:04:15:e7:bf:9d:e2:e0:44:41:fd:b1:2e:
                    a0:ee:02:eb:75:f4:a6:16:e9:71:00:71:40:76:34:
                    f0:7b:cf:ea:cf:07:40:b7:d0:61:5a:0f:a3:85:81:
                    99:6d:0a:4d:f3:b4:a6:fc:7e:db:f1:b8:df:48:20:
                    dd:db:01:ea:de:d2:f6:55:f0:1c:05:b3:f7:c3:cc:
                    f9:bc:98:78:ba:06:23:47:6c:fe:c9:c5:c3:e1:43:
                    a0:31:7b:e9:35:18:3e:a8:ac:ed:ef:97:b5:70:f4:
                    d1:2b:84:e1:b6:a9:9b:34:76:54:84:5c:6b:4d:84:
                    dd:bd:b7:87:2a:75:9a:30:75:64:4b:7a:e6:df:42:
                    fc:a2:3c:c3:f2:dd:b0:d6:32:a1:7f:fd:44:60:a3:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:6F:7E:BB:07:28:00:26:21:DC:51:60:FC:67:3D:19:3B:AE:C8
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235342e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:15:0d:94:20:1f:20:cd:a7:11:aa:12:5b:d7:8e:53:cb:0b:
         32:94:3a:5c:27:7e:6f:fe:b4:c1:32:6c:19:8f:14:f0:fe:34:
         a3:e7:3f:0e:05:76:3f:71:9e:57:15:73:c1:96:8a:8b:ae:df:
         2d:05:94:19:b8:32:d6:a4:6c:81:c9:68:66:b9:ab:7f:4c:23:
         7a:a6:9f:d3:4c:40:38:b8:ef:92:b5:b6:b9:9c:6c:56:fa:95:
         bf:37:92:a5:86:ed:ff:28:55:3c:39:e4:b8:87:6f:ac:78:9f:
         4b:e1:44:cc:40:d9:08:30:70:b8:0e:08:ef:b4:7e:8a:5d:7f:
         04:68:47:db:87:df:d0:61:fa:39:da:c8:6f:e6:40:b5:ff:72:
         0d:ec:41:b7:7d:d5:13:ea:09:a8:7e:a9:45:ac:d6:79:72:12:
         b3:6e:4d:3e:b0:86:ad:56:4e:44:ef:46:43:92:88:c5:4e:4b:
         c9:6d:b9:5e:1b:9a:82:1f:be:7f:4b:78:a6:e3:8c:6a:aa:70:
         d4:8c:1d:11:e8:39:8b:39:da:cf:c6:7c:94:ba:4b:a9:aa:d9:
         3d:17:78:51:b6:ec:a7:5e:4d:7a:cb:9f:4c:80:f2:4e:6a:84:
         78:17:50:8a:c4:8e:67:ec:e1:85:ac:ae:2e:f2:e6:67:9e:b2:
         32:26:81:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:23:40 2026 by rpki-client