Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          ZplGjQm5AJToWkOfjaun30sMJtYUPIBMV0JqNXb3aqs=
Subject key identifier:   66:92:0F:9C:84:8E:BF:AD:3A:B8:29:7C:08:E2:56:30:67:7C:D4:05
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       2F90170495CA0E96BB60BAAFF90BDD03FDBA58F9
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:39 +0000
ROA not before:           Sun 03 May 2026 03:07:39 +0000
ROA not after:            Sun 02 May 2027 03:12:39 +0000
asID:                     132644
IP address blocks:        116.204.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:90:17:04:95:ca:0e:96:bb:60:ba:af:f9:0b:dd:03:fd:ba:58:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:39 2026 GMT
            Not After : May  2 03:12:39 2027 GMT
        Subject: CN=66920F9C848EBFAD3AB8297C08E25630677CD405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:b4:21:ef:cf:e7:46:d4:84:25:64:43:47:
                    60:3d:fb:18:26:5f:49:18:db:bf:d4:b7:68:ee:e5:
                    f3:3a:46:a0:0f:a7:bf:4b:ca:2e:0a:57:ff:cb:7d:
                    42:bd:ee:19:60:ba:b2:32:3e:74:fa:e2:f0:42:04:
                    29:ed:d6:c6:1d:0d:ba:f9:79:ef:71:37:59:07:38:
                    6f:c2:31:91:eb:9f:1e:5e:29:bc:e2:57:a5:7b:d7:
                    ce:d1:31:6f:25:62:13:0e:37:97:86:ee:96:e4:43:
                    92:57:af:10:21:3c:73:f6:cb:ad:89:40:d2:b6:30:
                    6e:25:d5:ef:27:68:87:02:5b:07:26:b5:75:73:78:
                    2a:5c:71:ec:2a:4a:15:b8:91:34:04:fa:2c:c9:e1:
                    7f:58:17:c7:ea:39:03:84:b8:9f:4e:b5:c8:18:4f:
                    2f:9d:e9:32:09:52:4b:c9:ef:d4:d0:3e:8f:c8:fc:
                    a3:b8:25:fb:45:36:85:f1:f6:0d:11:b9:44:43:9a:
                    4f:6f:cc:56:54:1b:b5:96:d3:d4:54:7b:26:7d:b9:
                    8f:c2:0e:d8:8e:47:41:0f:c5:65:1b:b2:13:0b:77:
                    1a:8f:7a:32:83:16:8f:bf:d4:eb:33:bc:67:17:9e:
                    a3:46:48:3e:ba:b2:6e:81:9a:c4:e0:5e:d3:11:5e:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:0F:9C:84:8E:BF:AD:3A:B8:29:7C:08:E2:56:30:67:7C:D4:05
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133302e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:72:6a:7b:57:76:bc:1a:bf:5c:8b:0b:8e:9a:83:a5:13:89:
         85:da:d2:3a:3e:2a:1b:c5:2f:a0:27:d5:9b:b5:94:cb:5d:d1:
         77:17:5c:96:d3:fa:64:8e:7e:42:d8:8c:fd:a2:83:56:e8:c5:
         fa:b7:42:d3:54:27:e3:e0:eb:12:24:7b:4d:74:55:20:f9:46:
         34:ce:71:86:79:5a:72:fb:66:4f:82:df:c8:90:70:4e:00:d3:
         0d:35:6b:a7:4c:40:8c:df:2c:41:7c:65:a4:f0:af:3d:16:e5:
         dc:55:74:d4:de:d6:1e:a2:2d:48:85:d0:4a:4b:2a:3c:7b:41:
         f1:a1:94:84:98:fb:b2:ce:10:b0:f7:5f:d6:36:9c:8c:bf:eb:
         91:d8:33:28:a4:cf:ba:30:6e:47:b5:1e:da:73:fe:de:bc:4a:
         95:1d:2d:8b:3e:91:7d:03:ca:46:b2:d2:d5:a2:05:4f:eb:35:
         ef:70:1b:53:25:da:ac:b2:1f:f7:c4:21:e4:a4:92:4f:20:85:
         f3:2c:50:c5:e6:1c:53:a5:ac:ce:96:99:4f:44:5a:28:b6:79:
         35:a1:77:bd:dc:06:b2:aa:ae:47:08:58:45:10:94:45:2c:18:
         d2:9f:93:65:f0:1e:3f:f7:7a:27:e5:e7:98:45:b7:3f:2c:e4:
         69:de:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:57 2026 by rpki-client