Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa
File:                     3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          c03wLpEzYg97ghhueJfI6BXVZd/aJ1GtQxycuxMHJK4=
Subject key identifier:   61:17:64:81:42:17:D0:5D:4C:57:1D:37:21:6D:89:0A:C5:D9:4A:25
Certificate issuer:       /CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
Certificate serial:       382323597E14DEFC1B150FA9B0CCCA9587FE7466
Authority key identifier: C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa
Signing time:             Sun 03 May 2026 03:01:14 +0000
ROA not before:           Sun 03 May 2026 02:56:14 +0000
ROA not after:            Sun 02 May 2027 03:01:14 +0000
asID:                     55699
IP address blocks:        116.193.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl
                          rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:23:23:59:7e:14:de:fc:1b:15:0f:a9:b0:cc:ca:95:87:fe:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA
        Validity
            Not Before: May  3 02:56:14 2026 GMT
            Not After : May  2 03:01:14 2027 GMT
        Subject: CN=611764814217D05D4C571D37216D890AC5D94A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:21:3c:3c:fe:cc:d5:95:a0:6a:5f:c3:4c:15:
                    49:43:aa:39:f5:8f:74:03:10:48:35:af:fc:fc:55:
                    24:12:8d:c2:4b:ed:3d:42:49:99:fe:18:f9:bb:68:
                    82:80:bc:81:0d:fa:0e:7d:22:c2:55:0d:0a:54:24:
                    69:07:90:12:b4:74:48:83:84:b8:d0:70:f3:b5:69:
                    65:47:0a:b3:8b:e2:96:ad:86:3a:31:d2:24:00:4d:
                    90:08:c2:78:c1:5d:40:0d:a5:c0:61:13:01:77:5b:
                    00:28:80:ba:9b:4a:0a:8c:a6:52:6c:b9:f6:fc:97:
                    20:7e:48:fd:3b:99:fb:61:d4:5e:26:2d:68:13:85:
                    a9:5a:61:51:3d:d5:be:57:98:bb:d2:da:c7:7f:75:
                    5b:0e:b8:66:b7:d4:c9:9b:ab:a6:3b:9f:28:78:54:
                    01:1c:37:b5:99:60:70:fd:8d:2f:3c:4f:3f:cd:8c:
                    b0:79:04:0a:c8:34:bf:10:f6:fb:a7:35:b2:b7:48:
                    b0:0c:b3:00:fb:5b:73:28:db:64:50:99:48:38:fe:
                    0c:fd:60:9c:79:ab:59:5f:4c:74:93:fe:8f:9a:4d:
                    19:57:ce:18:da:e9:a8:5a:e4:ed:11:75:01:b7:03:
                    80:41:a2:23:33:36:38:ac:93:fd:7a:d0:f9:ad:c0:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:17:64:81:42:17:D0:5D:4C:57:1D:37:21:6D:89:0A:C5:D9:4A:25
            X509v3 Authority Key Identifier:
                keyid:C1:26:0A:95:8F:86:F1:FF:20:AE:0F:31:E8:46:BA:1C:4E:9A:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C1260A958F86F1FF20AE0F31E846BA1C4E9A24FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3131362e3139332e3137322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:23:30:7c:4d:f6:33:71:31:05:e2:e4:18:c5:e9:d6:4b:
         23:7c:a2:c2:68:5b:d5:71:0e:25:64:4c:7e:24:cd:40:25:6b:
         50:01:45:7b:77:60:47:54:1e:b5:d6:b4:a1:8e:1f:f7:df:da:
         5c:fc:8d:ce:ba:a0:2f:d6:8b:ea:50:ad:66:d4:93:91:cc:b2:
         86:02:43:37:52:49:b7:0c:b6:27:f1:ad:45:b7:93:30:ba:cf:
         90:c1:60:9c:c2:3d:b2:9d:c6:92:fe:58:c1:b3:cb:de:2a:da:
         c3:a5:8e:65:b5:01:2d:bd:f2:b3:6f:5e:49:09:9e:0a:b9:22:
         47:82:38:6d:8a:7b:37:1d:0e:25:ce:99:31:46:08:b7:6d:bd:
         91:63:9b:3c:47:fb:65:ba:53:c0:18:70:39:d7:3f:b9:cd:d9:
         e6:a9:54:72:80:e6:82:b5:9f:43:81:5e:39:3c:26:84:98:e3:
         39:fd:6b:73:33:30:20:74:ec:62:58:67:67:79:b2:69:d9:a5:
         33:f9:44:82:2d:36:12:bd:cb:b9:7d:9e:87:d5:cb:ba:34:f5:
         b7:a2:84:77:38:58:1d:58:61:4c:11:ed:b9:de:b3:69:25:b7:
         90:00:f5:3f:1f:c6:32:e2:f3:5f:ca:e9:98:4c:05:cc:46:31:
         fa:83:73:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:12 2026 by rpki-client