Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137312e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137312e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          D0Oyd6q2MglXsG/pkdyA/9qd+ge4/Jij+r1mgNFbh1g=
Subject key identifier:   D2:D5:E2:B9:DF:69:DB:17:F7:A8:AA:AE:4B:5D:D8:79:98:BE:CB:D0
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       34539C962B5D792C87124AE4F0FAFC79959D7876
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137312e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:29 +0000
ROA not before:           Sun 03 May 2026 02:58:29 +0000
ROA not after:            Sun 02 May 2027 03:03:29 +0000
asID:                     18059
IP address blocks:        116.90.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:53:9c:96:2b:5d:79:2c:87:12:4a:e4:f0:fa:fc:79:95:9d:78:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:29 2026 GMT
            Not After : May  2 03:03:29 2027 GMT
        Subject: CN=D2D5E2B9DF69DB17F7A8AAAE4B5DD87998BECBD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:24:e7:83:ba:14:30:6e:fe:52:47:d5:a3:
                    45:f5:05:51:51:73:63:25:81:47:41:c3:eb:f5:05:
                    8d:f0:46:cd:7d:9a:b3:3b:36:97:a4:04:65:3b:88:
                    a0:42:b0:0e:e3:b5:52:15:e3:d5:64:e7:6e:30:a5:
                    fd:88:cb:00:cc:9a:c7:8f:10:15:5c:50:62:d8:7e:
                    66:4a:ba:8f:36:15:55:24:30:bd:aa:cd:d7:1d:fd:
                    b3:4f:bc:b0:61:71:82:0e:57:7a:f8:13:80:6b:d7:
                    b9:9a:c5:98:5e:55:e2:a0:06:74:7c:11:3b:3a:68:
                    e0:cc:bd:2f:34:2e:1d:ba:9d:e5:6c:ff:1b:a1:c1:
                    50:fb:68:fc:5c:b4:95:84:e8:df:94:51:36:ca:b3:
                    b2:8c:f9:e4:ab:70:11:2e:23:1f:11:f1:f9:7c:e9:
                    47:6a:a3:d3:f6:cd:64:6d:73:2e:97:66:ba:49:fa:
                    a3:c6:fb:20:7d:0d:39:72:3b:28:83:30:76:90:69:
                    3b:91:cf:a0:52:60:f4:3e:0b:c3:12:25:59:36:23:
                    76:e9:fd:75:df:28:04:29:cc:e2:39:1d:13:c2:8a:
                    c7:ab:bf:cf:2d:8d:fb:d6:e2:b3:14:de:a8:2d:d9:
                    e9:2b:d5:2c:5a:75:cc:8a:a9:25:50:cf:b5:ea:db:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:E2:B9:DF:69:DB:17:F7:A8:AA:AE:4B:5D:D8:79:98:BE:CB:D0
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137312e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:f0:2f:03:0e:ed:74:8f:87:95:f1:7c:7e:60:a4:d3:ef:9e:
         4c:6a:e6:43:e8:61:67:53:94:d8:b4:5a:67:d7:ec:72:df:6f:
         66:a0:32:fc:d7:a5:21:2b:e2:30:42:d0:c3:eb:6d:ea:6c:7e:
         14:c0:9a:df:f3:ce:3a:cf:be:59:38:6c:fb:b1:c6:6f:9d:a4:
         5f:a5:a7:ca:73:0c:92:c3:4e:be:57:9f:77:4c:f5:c7:47:ce:
         b8:bd:fe:11:0a:93:29:12:46:b2:4d:ff:c0:30:9e:ee:fe:b2:
         e4:6e:86:79:89:56:df:73:57:3d:20:fe:59:a4:98:6a:3a:47:
         2d:7c:b3:59:e5:cc:ce:cb:8e:2e:6e:88:c3:bc:46:7c:bc:ab:
         6c:06:dc:61:0f:46:20:2d:d8:e6:01:4d:7c:c6:6e:83:f1:04:
         8c:e1:ac:a4:c7:e2:da:21:89:4b:ee:c9:64:0c:55:ed:61:76:
         e5:e1:4e:e4:d4:0c:d7:77:1d:c9:8d:86:d8:4d:e8:a0:e5:ae:
         40:10:cf:ad:b3:56:c3:7d:0f:c6:15:e9:5d:f5:68:54:68:00:
         b4:f7:ec:f3:11:9c:63:b8:a6:35:b5:4e:fb:b4:45:4d:ca:a5:
         29:cc:97:76:5b:2d:fe:b1:91:6f:e7:b3:d9:d0:23:83:7d:07:
         5b:97:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:01:18 2026 by rpki-client