Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          97HEq762ggjb36ObJvOB+0O4UVTOw9S1KAUH3wNcpO4=
Subject key identifier:   07:E8:01:1E:74:81:CB:C6:B1:98:67:3B:8A:17:D7:56:6B:6E:36:70
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       3DDCA53E0690DDA401A5D74D5BD11E5A22B83932
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:38 +0000
ROA not before:           Sun 03 May 2026 03:07:38 +0000
ROA not after:            Sun 02 May 2027 03:12:38 +0000
asID:                     132644
IP address blocks:        116.204.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:dc:a5:3e:06:90:dd:a4:01:a5:d7:4d:5b:d1:1e:5a:22:b8:39:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:38 2026 GMT
            Not After : May  2 03:12:38 2027 GMT
        Subject: CN=07E8011E7481CBC6B198673B8A17D7566B6E3670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:8c:07:16:2b:89:b8:bb:91:45:ec:02:db:
                    bc:36:be:09:ac:df:eb:ba:70:e6:9f:9e:c4:a7:43:
                    9d:6a:ac:e1:99:1c:8e:50:14:14:2b:31:39:40:8f:
                    af:72:de:a4:2b:55:37:ea:b7:0c:bd:db:ea:7e:5d:
                    25:86:cd:ff:07:06:bb:ed:81:ed:58:48:cd:49:c4:
                    ab:34:2d:36:22:17:76:b2:3a:0d:c3:62:91:ec:3f:
                    76:e1:03:c5:fe:44:d4:9f:05:d8:0f:7f:a5:96:f4:
                    3f:d8:aa:55:d5:b5:9c:c0:12:9b:ac:36:a8:5a:24:
                    0b:d4:05:77:cf:af:5f:63:a1:bf:14:3f:63:34:fa:
                    d1:82:fb:78:4c:8b:20:b4:af:e6:9e:c6:d3:80:2a:
                    a7:3e:ba:c3:65:45:a0:49:42:e8:db:ed:94:b8:62:
                    ce:de:d6:27:85:1a:2d:d5:00:cc:22:54:c5:b5:5a:
                    47:d0:21:b9:5b:d8:51:0c:10:f0:18:de:0c:29:b5:
                    5c:5e:05:0b:f6:47:e3:08:69:37:6b:2c:5f:e4:5d:
                    87:05:20:19:56:54:97:74:88:b5:40:41:bd:0d:95:
                    9a:12:28:dd:62:c5:bd:45:c6:18:e3:5d:95:61:5a:
                    fd:02:c7:a8:ed:98:16:0c:19:89:1e:9a:7c:ba:a2:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E8:01:1E:74:81:CB:C6:B1:98:67:3B:8A:17:D7:56:6B:6E:36:70
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3132392e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:9f:a4:16:e2:8f:e5:36:de:8e:2c:19:7e:75:9e:0c:1c:
         c7:ae:13:9a:65:89:be:a0:90:18:67:e1:67:c1:67:c9:c7:9b:
         69:ff:05:0e:fa:28:d6:1f:2a:97:7a:aa:05:89:f5:95:38:29:
         1a:4e:cb:d6:49:6f:3e:a5:da:cf:6f:0b:8c:95:d0:56:fb:2a:
         4d:ce:88:95:2d:9e:99:de:19:4f:71:de:cc:28:41:4f:be:c2:
         38:f8:a6:59:36:3d:eb:5f:30:e6:fd:f5:82:80:05:4b:2c:88:
         ee:3a:9c:ad:aa:76:47:9b:6e:33:1d:b9:8a:4f:79:9d:fb:79:
         5e:bd:56:83:e7:20:f6:77:97:0e:ba:ae:3d:72:90:66:9c:55:
         fa:6c:1e:a0:57:ef:3b:0b:e9:cd:8c:be:cb:8b:6a:21:b2:ad:
         ed:c9:0f:8d:ed:e0:28:2d:01:62:91:52:f9:fb:55:4b:b4:92:
         54:6d:72:b4:92:01:cd:d7:c8:e3:59:d8:9b:96:19:50:21:77:
         df:26:a1:01:5b:3b:9e:b6:bf:67:d6:bf:c0:f6:10:f3:a3:e1:
         7e:8a:9b:e9:f2:7a:5f:2b:3a:2e:b7:69:39:a0:e9:09:55:42:
         bc:99:2f:7d:07:72:7b:62:6a:93:86:6c:ad:5a:c4:18:33:9f:
         df:8f:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:17:46 2026 by rpki-client