Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa
File:                     3131362e36382e3235352e302f32342d3234203d3e203338353030.roa (raw, json)
Hash identifier:          jPCY0n/Xbzc8oiNZkIBw6Yw/AOHbz0M7N+mws5fPKe0=
Subject key identifier:   26:94:47:3B:68:10:1C:71:5A:E7:0F:A1:1D:21:C9:0D:69:AD:99:FD
Certificate issuer:       /CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
Certificate serial:       1010F19084AD5BE0A31DF432109E83A75218B8B5
Authority key identifier: FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa
Signing time:             Sun 03 May 2026 02:59:54 +0000
ROA not before:           Sun 03 May 2026 02:54:54 +0000
ROA not after:            Sun 02 May 2027 02:59:54 +0000
asID:                     38500
IP address blocks:        116.68.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl
                          rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:10:f1:90:84:ad:5b:e0:a3:1d:f4:32:10:9e:83:a7:52:18:b8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB081C4B909CDF56184D0455B2AA1F52EBFC9293
        Validity
            Not Before: May  3 02:54:54 2026 GMT
            Not After : May  2 02:59:54 2027 GMT
        Subject: CN=2694473B68101C715AE70FA11D21C90D69AD99FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:99:a5:d3:05:05:4f:4a:98:df:29:83:30:
                    e4:48:57:77:6c:73:45:b3:16:75:83:4c:14:23:e0:
                    81:dc:b9:11:43:c1:51:e8:8e:ba:14:6d:71:4a:7f:
                    e1:dc:9b:d1:e1:01:97:8d:d2:34:08:df:c1:cf:44:
                    77:d1:7c:45:de:b1:6a:74:36:70:da:a6:06:4e:ad:
                    4b:e8:4e:69:9a:86:6d:fe:41:7f:46:b6:df:ae:ca:
                    8a:e4:fb:6b:cb:c9:f0:13:25:37:5d:55:a3:fa:f6:
                    da:5a:1a:aa:e3:8a:15:c9:09:b5:a8:41:f0:ce:72:
                    f4:89:f5:b4:78:84:db:4f:da:24:ba:ed:86:14:db:
                    20:52:42:fe:b7:76:e2:30:30:4a:fe:c6:db:80:01:
                    b1:25:d3:ca:f6:cf:c7:19:b2:c1:89:34:37:f1:b6:
                    41:4e:5c:74:b8:83:1f:d3:ab:f3:9e:fe:fd:42:45:
                    c6:2f:9a:09:c2:a6:f3:dc:d0:6f:eb:6d:91:75:67:
                    31:9e:91:de:99:0c:c8:61:93:60:7b:ff:44:6e:60:
                    d7:22:91:90:83:19:e3:4c:ac:3d:83:45:d1:57:86:
                    79:b1:d7:2d:6e:c6:85:b5:04:4a:83:bd:38:bb:d0:
                    b6:1e:d6:a7:fb:48:63:99:43:a4:c7:c2:f9:47:26:
                    90:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:94:47:3B:68:10:1C:71:5A:E7:0F:A1:1D:21:C9:0D:69:AD:99:FD
            X509v3 Authority Key Identifier:
                keyid:FB:08:1C:4B:90:9C:DF:56:18:4D:04:55:B2:AA:1F:52:EB:FC:92:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FB081C4B909CDF56184D0455B2AA1F52EBFC9293.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b04068f3-a75b-4764-9e80-1fa5729207fc/0/3131362e36382e3235352e302f32342d3234203d3e203338353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.68.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:e0:64:5f:82:be:46:fc:08:5f:bc:48:f0:01:4b:0a:39:
         17:bd:2f:4d:fc:b3:eb:16:cc:9a:0f:aa:b9:d3:fd:46:3b:e6:
         a0:50:6b:d7:80:0e:df:7e:5b:1d:00:46:91:94:ce:d0:ec:00:
         46:e2:cf:91:0f:02:ba:c3:29:c7:11:e0:1b:58:13:bc:04:5a:
         46:5a:4a:93:22:02:44:f4:cf:47:c3:37:14:95:be:23:46:da:
         76:5a:7c:ae:58:95:cd:fa:4d:ed:29:f5:54:32:de:35:eb:b6:
         6c:bd:22:76:4c:c3:06:48:ec:cd:19:a9:cd:64:be:b9:a3:98:
         02:95:88:aa:2a:56:1f:ef:f3:04:32:c6:69:ba:72:48:25:f3:
         ed:bc:0e:ff:5f:25:ab:eb:42:55:af:45:37:fc:46:c9:3c:3b:
         10:21:5b:ea:60:de:6f:d3:d0:3c:76:7a:e3:5e:d1:7c:ee:57:
         13:1c:16:71:69:3f:d2:3a:d1:ee:49:41:ba:03:34:5c:6a:c2:
         05:67:95:65:65:08:0a:fe:17:76:9b:26:7b:ad:5f:e4:eb:3d:
         f9:52:00:68:3f:e4:e6:d3:1e:6f:3c:a6:5f:5b:56:e5:d0:50:
         ce:8d:7e:cf:31:59:c3:be:4a:3a:63:20:ee:d5:d6:e5:59:05:
         a2:aa:de:bf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEBDxkIStW+CjHfQyEJ6Dp1IYuLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIwODFDNEI5MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJF
QkZDOTI5MzAeFw0yNjA1MDMwMjU0NTRaFw0yNzA1MDIwMjU5NTRaMDMxMTAvBgNV
BAMTKDI2OTQ0NzNCNjgxMDFDNzE1QUU3MEZBMTFEMjFDOTBENjlBRDk5RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe7pml0wUFT0qY3ymDMORIV3ds
c0WzFnWDTBQj4IHcuRFDwVHojroUbXFKf+Hcm9HhAZeN0jQI38HPRHfRfEXesWp0
NnDapgZOrUvoTmmahm3+QX9Gtt+uyork+2vLyfATJTddVaP69tpaGqrjihXJCbWo
QfDOcvSJ9bR4hNtP2iS67YYU2yBSQv63duIwMEr+xtuAAbEl08r2z8cZssGJNDfx
tkFOXHS4gx/Tq/Oe/v1CRcYvmgnCpvPc0G/rbZF1ZzGekd6ZDMhhk2B7/0RuYNci
kZCDGeNMrD2DRdFXhnmx1y1uxoW1BEqDvTi70LYe1qf7SGOZQ6THwvlHJpCnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJpRHO2gQHHFa5w+hHSHJDWmtmf0wHwYDVR0j
BBgwFoAU+wgcS5Cc31YYTQRVsqofUuv8kpMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjA0MDY4ZjMtYTc1Yi00NzY0LTllODAtMWZhNTcyOTIwN2ZjLzAvRkIwODFDNEI5
MDlDREY1NjE4NEQwNDU1QjJBQTFGNTJFQkZDOTI5My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9GQjA4MUM0QjkwOUNERjU2MTg0RDA0NTVCMkFBMUY1MkVCRkM5
MjkzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2IwNDA2OGYzLWE3NWItNDc2NC05
ZTgwLTFmYTU3MjkyMDdmYy8wLzMxMzEzNjJlMzYzODJlMzIzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHRE/zANBgkqhkiG
9w0BAQsFAAOCAQEAXj3gZF+Cvkb8CF+8SPABSwo5F70vTfyz6xbMmg+qudP9Rjvm
oFBr14AO335bHQBGkZTO0OwARuLPkQ8CusMpxxHgG1gTvARaRlpKkyICRPTPR8M3
FJW+I0badlp8rliVzfpN7Sn1VDLeNeu2bL0idkzDBkjszRmpzWS+uaOYApWIqipW
H+/zBDLGabpySCXz7bwO/18lq+tCVa9FN/xGyTw7ECFb6mDeb9PQPHZ6417RfO5X
ExwWcWk/0jrR7klBugM0XGrCBWeVZWUICv4Xdpsme61f5Os9+VIAaD/k5tMebzym
X1tW5dBQzo1+zzFZw75KOmMg7tXW5VkFoqrevw==
-----END CERTIFICATE-----
Generated at Wed May 13 03:56:43 2026 by rpki-client