Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa
File:                     3131362e39302e3137352e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          /qEYLlKMh/bznCj0on51dJMCP246ZpHW5gp9/yY5t6c=
Subject key identifier:   06:64:7C:A7:17:67:3F:28:C4:AF:05:DD:FF:D6:3D:08:12:78:AF:65
Certificate issuer:       /CN=67239F5E47D123019D26807163E6542441401507
Certificate serial:       50F505C04AA7A91D05AA7726E90C2A9C4EFBF945
Authority key identifier: 67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa
Signing time:             Sun 03 May 2026 03:03:46 +0000
ROA not before:           Sun 03 May 2026 02:58:46 +0000
ROA not after:            Sun 02 May 2027 03:03:46 +0000
asID:                     18059
IP address blocks:        116.90.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl
                          rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f5:05:c0:4a:a7:a9:1d:05:aa:77:26:e9:0c:2a:9c:4e:fb:f9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67239F5E47D123019D26807163E6542441401507
        Validity
            Not Before: May  3 02:58:46 2026 GMT
            Not After : May  2 03:03:46 2027 GMT
        Subject: CN=06647CA717673F28C4AF05DDFFD63D081278AF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:a8:0f:60:82:59:a0:ae:05:0f:1f:67:18:
                    92:63:3b:f4:4a:63:46:f7:44:d6:e2:c0:c9:58:aa:
                    ef:56:54:5b:ba:04:3b:8c:c4:49:37:2a:d2:b5:cb:
                    1a:86:cd:6a:d4:7e:b5:41:61:06:6d:3b:18:34:a7:
                    df:1d:cf:b8:a5:34:8b:bd:91:2e:31:52:c1:6b:81:
                    93:d5:1e:8f:cf:50:f5:05:eb:74:53:52:a5:b1:eb:
                    8d:db:6a:7f:f7:a9:77:0b:15:99:96:6d:4f:d7:8f:
                    de:88:0a:70:14:83:86:8f:f3:18:c1:17:94:aa:70:
                    10:b7:4e:4e:ab:00:4a:34:fd:61:7f:cd:72:32:a5:
                    61:82:f4:5e:cb:4d:1e:da:74:ef:31:83:2e:7b:df:
                    3d:0b:07:d8:cf:b5:0d:ca:12:fa:ce:60:7e:5c:4d:
                    43:64:bf:69:73:a5:e5:f7:12:e4:66:da:cd:11:c5:
                    3a:58:85:b0:c2:2e:41:74:7f:a0:4f:c3:7b:50:47:
                    eb:21:86:5a:3d:d8:63:82:7a:96:d0:f4:a6:13:64:
                    18:7b:2f:dc:6a:b7:98:77:d2:c3:2b:fd:57:c3:70:
                    66:ab:6d:2c:9d:f3:a1:c8:89:fc:03:72:b8:09:e2:
                    60:30:8e:6d:c8:bd:a5:c9:15:85:ea:44:0e:5d:0d:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:64:7C:A7:17:67:3F:28:C4:AF:05:DD:FF:D6:3D:08:12:78:AF:65
            X509v3 Authority Key Identifier:
                keyid:67:23:9F:5E:47:D1:23:01:9D:26:80:71:63:E6:54:24:41:40:15:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/67239F5E47D123019D26807163E6542441401507.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67239F5E47D123019D26807163E6542441401507.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3131362e39302e3137352e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:8e:f7:c3:15:fc:60:34:5a:0c:11:25:b8:72:ed:b8:22:
         98:b6:b2:54:57:3e:84:c6:5e:98:71:f6:a1:d3:0a:65:9f:46:
         f3:a4:2e:50:dd:88:be:02:ab:ed:66:e0:02:a4:4f:7b:f6:93:
         dc:66:75:f7:55:fb:83:c9:8c:3d:03:5d:9c:29:5e:00:c2:d0:
         d5:fd:5d:a8:29:b2:4f:c5:8f:11:86:fa:1d:bb:8f:69:05:62:
         1b:48:96:60:b2:e3:8a:05:d5:3e:15:65:4e:6a:bc:7b:d9:d7:
         37:5c:f9:71:02:af:56:97:40:7f:40:5f:34:34:a4:6c:2c:71:
         b3:2c:f1:01:ce:fd:d1:00:0c:86:6f:b9:af:eb:92:04:f8:9c:
         df:48:6a:39:75:ba:a9:8f:64:8a:b4:30:64:d1:77:95:2f:a8:
         6f:79:f5:c2:69:a9:0a:53:ea:67:97:1b:5b:66:54:ab:0f:74:
         39:ec:ae:e7:a3:ad:ed:be:80:0c:90:78:79:f7:95:ba:ab:8d:
         95:b2:6a:82:c9:05:28:f2:a6:29:1b:71:f7:1d:d0:6e:44:ac:
         f6:10:3f:1f:20:7b:fc:85:1c:e6:91:4d:d9:7e:e9:67:23:44:
         cb:58:c3:f8:88:1c:d4:5b:47:f3:fa:9a:5e:26:e3:36:51:bc:
         79:11:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:00:58 2026 by rpki-client