Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa
File:                     3131362e39302e3136392e302f32342d3234203d3e203338373635.roa (raw, json)
Hash identifier:          A2fKGdf5Ir46+7SwaPYiBDHOFS1pnDpJJJlhQaffAd0=
Subject key identifier:   FF:4C:F9:5D:CE:8B:87:7E:AA:FA:4D:7F:1B:7D:8A:BD:E2:14:EB:B3
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       103B1FD4A6DCF49E48E375A1C342B8CAA9AE8F44
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa
Signing time:             Sun 03 May 2026 03:03:36 +0000
ROA not before:           Sun 03 May 2026 02:58:36 +0000
ROA not after:            Sun 02 May 2027 03:03:36 +0000
asID:                     38765
IP address blocks:        116.90.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:3b:1f:d4:a6:dc:f4:9e:48:e3:75:a1:c3:42:b8:ca:a9:ae:8f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:36 2026 GMT
            Not After : May  2 03:03:36 2027 GMT
        Subject: CN=FF4CF95DCE8B877EAAFA4D7F1B7D8ABDE214EBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:c8:81:4d:bf:ce:62:11:bb:3f:f9:67:c6:
                    df:e0:3d:28:3f:d1:a7:cf:3c:4b:7a:9b:c6:78:c0:
                    a0:15:fe:07:ab:71:9f:41:09:c1:3a:1c:c7:59:7f:
                    72:aa:11:91:b2:b0:e0:d1:a4:7e:53:de:e2:bb:1e:
                    5e:71:5f:92:78:8d:60:5a:26:11:ba:3f:6c:2e:22:
                    5f:bf:93:68:17:a3:2c:3a:e9:e5:00:a9:bb:01:b2:
                    26:77:d4:87:8c:30:1a:a7:cb:29:4a:88:fd:b3:e7:
                    d5:e6:3d:95:62:49:da:6c:ee:40:91:c1:e5:b4:68:
                    66:ed:59:e9:7b:06:d4:81:74:98:52:a6:6b:da:2c:
                    6d:5f:6a:8d:e4:c7:6d:39:06:6b:37:b3:d5:33:1a:
                    50:68:de:70:62:68:85:e3:8b:f5:57:15:ce:eb:5f:
                    a2:3d:f0:41:24:1b:d5:4d:9c:1c:5b:fd:f6:e1:93:
                    ab:a7:9b:37:84:09:20:45:67:9d:52:20:8a:28:ba:
                    c1:4d:59:7e:f3:7d:40:a0:32:59:7a:fd:a8:7c:78:
                    53:74:75:c0:8b:e5:03:32:b1:d6:21:02:4d:75:8f:
                    2a:2d:a7:3e:a5:10:0a:45:84:f8:b6:1b:6f:4b:fc:
                    18:cc:58:43:b0:80:30:46:a7:22:3d:08:5b:2f:f8:
                    4e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4C:F9:5D:CE:8B:87:7E:AA:FA:4D:7F:1B:7D:8A:BD:E2:14:EB:B3
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3136392e302f32342d3234203d3e203338373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:e5:ce:0f:36:17:7d:db:3b:d4:a4:8b:78:3d:7f:f3:24:96:
         2a:9e:25:0b:43:03:97:09:31:39:10:b7:e9:d3:14:34:95:4c:
         a9:8d:60:9f:24:82:bd:cf:19:df:8a:01:0f:a2:24:c0:9d:56:
         61:07:7c:42:e9:03:bb:a2:56:57:31:73:12:7b:4b:6b:c7:ad:
         5c:38:90:79:12:38:88:46:c1:eb:c5:07:30:f5:d4:66:73:b6:
         05:16:15:2d:00:55:62:01:12:37:d9:66:57:2d:01:b9:6c:14:
         dd:d8:9f:85:ac:b8:18:fe:1b:d2:87:7e:33:5a:e5:9c:ba:ba:
         7e:bf:3b:eb:cb:b3:2e:ca:91:53:83:b8:ba:56:a9:2b:46:8e:
         8c:db:46:29:5a:6f:fb:9d:7d:3d:06:29:48:13:97:b0:c9:64:
         6f:c6:67:8a:0e:27:d9:c7:62:b9:fe:aa:57:d3:2c:ca:36:8c:
         af:67:d2:4b:e1:fd:7b:df:f2:e2:0e:04:d7:fe:11:38:9d:03:
         1f:da:63:02:de:2b:f6:b7:00:d7:3b:8f:b3:48:1c:03:7a:d7:
         ef:23:1f:6f:31:b5:3f:5e:5d:0f:94:4e:a3:de:bb:28:1f:c9:
         8f:5f:ee:6c:36:57:da:91:55:8b:c3:ed:96:b7:24:c6:2e:b4:
         d5:6c:d6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:23 2026 by rpki-client