Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          RBFdUHZpMD/gDIa6CRB91FevIsYdigIpmwwSIwzhi98=
Subject key identifier:   35:2B:51:E1:77:D4:3C:CB:F0:6C:B5:2E:E2:4E:5D:5C:75:9C:5E:24
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       7CFAC259D6B4929C94CE03F7DB3CAAE1B46627D7
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:40 +0000
ROA not before:           Sun 03 May 2026 03:07:40 +0000
ROA not after:            Sun 02 May 2027 03:12:40 +0000
asID:                     132644
IP address blocks:        116.204.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fa:c2:59:d6:b4:92:9c:94:ce:03:f7:db:3c:aa:e1:b4:66:27:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:40 2026 GMT
            Not After : May  2 03:12:40 2027 GMT
        Subject: CN=352B51E177D43CCBF06CB52EE24E5D5C759C5E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:e7:70:81:a0:71:51:03:a4:99:6c:96:78:
                    bb:cf:97:37:d0:34:6f:8d:23:03:57:4d:c2:4b:6f:
                    19:e3:4d:1f:7e:84:f2:d1:92:fb:7a:04:4e:f0:b1:
                    5a:7f:d1:1b:33:f7:3b:3d:78:f9:be:25:bb:ce:c4:
                    b3:d1:fb:49:96:55:dd:1a:a0:1b:d5:ca:53:be:37:
                    57:7f:7f:e8:0e:8e:3c:e5:0b:7a:74:3d:cb:02:82:
                    e9:31:68:d2:5b:a5:5c:d6:03:ac:e3:44:ef:20:19:
                    85:5d:25:98:10:02:cd:5b:6e:0f:c9:0a:97:b0:03:
                    0e:14:e0:1d:80:e3:2c:35:f8:b8:34:ac:2a:e4:9b:
                    40:1c:8f:d0:17:8e:64:cb:cd:1e:30:c2:06:54:68:
                    f8:b9:e9:85:0a:60:34:d6:4e:e8:34:1d:80:b2:53:
                    e2:e7:86:44:b8:5d:48:8c:c0:2b:49:05:66:a8:16:
                    42:95:3b:49:3c:9c:a5:3e:d6:75:1f:23:76:b3:a8:
                    d8:e3:18:0c:96:a1:dd:dd:fb:3c:da:9e:df:7e:18:
                    da:73:d5:f2:33:33:ed:ab:17:59:44:23:2a:74:6a:
                    4b:8d:27:d8:8f:f3:a0:4c:26:27:af:8e:03:c3:35:
                    3e:4b:0b:9d:1a:9c:4f:44:6e:96:21:06:ad:4c:01:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2B:51:E1:77:D4:3C:CB:F0:6C:B5:2E:E2:4E:5D:5C:75:9C:5E:24
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132382e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:a7:ca:90:23:8d:d3:a2:66:f8:0d:67:6c:bb:b2:c2:2f:90:
         c5:41:fc:ce:7e:3c:f8:4e:e1:37:b1:9e:e6:3f:34:e8:a7:94:
         b0:de:78:01:d6:da:31:b6:a8:4e:3e:95:1e:f7:d2:3d:ae:e2:
         50:0a:ea:1a:ff:a0:b9:3d:5b:97:8c:e0:d5:92:5e:8f:71:8c:
         ce:b0:e5:12:41:63:e5:cb:85:0b:33:56:60:2a:9b:a7:86:38:
         83:95:77:de:cb:49:7b:b3:67:bb:47:57:48:75:d0:1a:2a:19:
         bb:28:af:3b:02:65:06:32:84:3e:b7:69:51:bb:e1:d3:a9:5f:
         3d:f6:4f:e6:00:64:e9:70:70:fe:39:b3:4c:5b:7b:51:d4:15:
         c2:6a:34:c5:03:99:9b:1d:be:53:f0:7c:82:d4:b8:5a:bf:fe:
         79:2d:a4:b7:a5:8a:dc:93:65:ad:e0:6b:1e:86:6d:48:16:17:
         89:49:9c:3d:bc:b1:9a:79:56:d6:a3:99:da:d6:cd:0c:e3:83:
         05:d5:79:40:6d:32:20:5f:dc:1e:9e:d8:ef:85:05:d9:9b:6c:
         20:d3:12:e5:11:61:03:b6:8d:67:36:fc:59:ba:f3:16:88:25:
         f0:f9:18:1b:cb:8e:89:f4:5a:77:14:db:1d:26:f7:9c:60:fd:
         f4:39:2c:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:29 2026 by rpki-client