Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3136302e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          dSwWWuJK7OoopvlW25o6Ktb34zt9jfTYdCw0df7SklU=
Subject key identifier:   4E:9A:EE:B7:BF:34:F5:69:26:7E:37:6F:74:B7:ED:3F:17:B0:F6:04
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       1CB1ACBD5ED311E47A34EE8DBDB43D486512058B
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:54 +0000
ROA not before:           Sun 03 May 2026 02:58:54 +0000
ROA not after:            Sun 02 May 2027 03:03:54 +0000
asID:                     18059
IP address blocks:        116.90.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b1:ac:bd:5e:d3:11:e4:7a:34:ee:8d:bd:b4:3d:48:65:12:05:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:54 2026 GMT
            Not After : May  2 03:03:54 2027 GMT
        Subject: CN=4E9AEEB7BF34F569267E376F74B7ED3F17B0F604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:60:75:6f:cc:57:3a:ce:87:08:a7:fb:6e:ba:
                    61:34:80:3a:f4:2f:37:be:2d:5c:5d:50:ab:07:c5:
                    ce:3a:bb:2d:20:03:45:df:cf:d8:84:d4:a1:41:16:
                    03:7a:10:15:e9:23:26:68:ce:cc:5f:5f:17:4f:8f:
                    fe:ec:ea:13:9e:a1:14:9f:1a:f0:61:ab:4c:b0:5b:
                    8a:13:51:75:d1:2a:17:31:86:cd:d6:d5:3e:40:e3:
                    25:8a:a8:37:ad:24:8a:ae:c3:3d:ec:97:f9:91:d8:
                    8a:70:8f:a7:70:44:2b:3f:ef:66:98:c1:d0:60:75:
                    30:bc:e7:fb:f5:37:d1:c9:bd:bd:75:d3:99:61:4a:
                    7e:fd:0e:bf:29:dd:01:51:40:a9:92:8a:ec:44:29:
                    5a:c7:e1:8a:0b:d4:88:e5:94:62:49:88:9e:81:9e:
                    69:ea:18:0a:9a:59:36:cc:70:c6:55:2a:24:86:43:
                    d0:25:28:de:66:b8:3e:23:52:18:17:fc:37:a1:5c:
                    b7:30:92:3e:32:35:88:c7:be:18:ab:0e:51:3c:af:
                    46:58:fa:96:50:27:fd:00:65:ff:03:60:05:09:1a:
                    b7:91:90:4e:be:5d:7b:e2:0b:b0:36:6e:c3:30:df:
                    f4:08:88:6a:54:63:d0:b7:f1:1a:65:5e:8c:48:ab:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:EE:B7:BF:34:F5:69:26:7E:37:6F:74:B7:ED:3F:17:B0:F6:04
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136302e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:93:30:8c:1d:d0:21:18:0d:a2:70:cd:1f:2c:f1:f1:f3:
         ae:f6:f4:76:17:36:09:c2:fe:54:73:3b:c0:2b:0e:99:2d:4c:
         5d:15:de:04:e7:e5:14:cb:16:0f:eb:19:27:c9:14:ec:df:46:
         9e:2b:4e:5a:23:0d:4d:7a:5d:25:db:55:91:92:3d:6c:c8:3b:
         25:25:b0:41:4d:d6:d2:8d:91:81:17:8e:8b:e2:b0:d9:34:3a:
         13:9d:03:23:6b:11:7e:e9:60:c2:15:06:d3:db:31:9f:c5:74:
         bb:33:15:f8:6a:23:6f:04:6f:90:39:3b:14:e5:0c:f0:89:04:
         1a:27:20:66:6e:80:2c:69:2b:f2:0b:85:f3:a7:67:1e:72:63:
         94:41:ad:ab:55:3e:80:e0:c0:80:a5:f7:7a:62:12:b1:18:59:
         38:e0:68:b8:59:91:24:45:4b:00:7c:09:b7:a4:55:1f:a8:2a:
         ec:34:12:8d:99:2b:40:e5:54:01:51:d5:ef:d6:ad:20:87:7e:
         da:51:17:d5:ed:32:db:2f:af:ca:b9:44:ec:50:eb:56:73:6f:
         cd:a5:93:10:f2:ed:6b:07:66:c5:70:49:4f:1e:df:fd:bb:5a:
         8f:ce:4d:21:e9:f3:82:15:0b:c3:7f:3d:41:c8:84:ba:0a:19:
         a5:5a:ee:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:09 2026 by rpki-client