Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa
File:                     3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa (raw, json)
Hash identifier:          YrsTK2Y9639gKpZZNuXe3bw5wGTnhWGGPOil0c8e8wM=
Subject key identifier:   AF:E3:84:56:81:20:EA:E7:18:53:F7:7F:D8:D1:4A:8B:65:85:6E:C3
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       75C018A8852F3B4BC5C8F7EA34CE1275F5667C76
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:40 +0000
ROA not before:           Sun 03 May 2026 03:07:40 +0000
ROA not after:            Sun 02 May 2027 03:12:40 +0000
asID:                     132644
IP address blocks:        116.204.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c0:18:a8:85:2f:3b:4b:c5:c8:f7:ea:34:ce:12:75:f5:66:7c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:40 2026 GMT
            Not After : May  2 03:12:40 2027 GMT
        Subject: CN=AFE384568120EAE71853F77FD8D14A8B65856EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:38:9e:f4:5f:54:04:d8:b5:3c:9e:95:98:57:
                    7f:a3:da:6b:2b:4b:8a:36:02:6a:4a:39:ad:28:1b:
                    68:bc:ef:3a:dd:3f:98:19:1f:dc:57:dd:10:8b:bc:
                    1b:0d:60:5a:7f:e0:90:dc:0f:02:12:ad:7b:4f:84:
                    6a:b1:1b:8e:09:7f:5e:ce:3e:ff:88:45:a1:8d:c8:
                    23:b9:fd:a2:e5:30:9d:da:d1:72:6d:f4:3b:9d:d7:
                    15:45:f5:5e:49:0b:c0:84:8a:25:69:dd:aa:a3:60:
                    da:38:f9:09:80:c6:da:81:0e:6e:c8:ea:b4:bc:8a:
                    10:61:d5:bd:e6:f2:5f:ff:d7:1d:6e:fa:91:c3:88:
                    25:a6:46:43:54:c6:6b:b8:ad:ef:dc:f7:12:5a:9c:
                    d1:ad:e7:be:48:77:85:a4:22:43:bb:85:9e:ce:f1:
                    13:b1:01:ce:26:a5:f8:ec:72:a6:7b:f0:eb:22:7f:
                    8f:16:49:e6:2a:ec:21:46:6a:8c:29:d0:0a:52:30:
                    d4:d4:5e:64:33:42:95:54:6a:74:53:5b:ad:ba:c6:
                    7e:08:d5:d3:f2:df:53:0f:b7:b0:f0:99:3f:cf:5f:
                    55:4d:29:7e:ee:b5:db:b4:cd:46:f0:b2:6c:f9:d0:
                    b0:64:44:f5:e6:80:15:18:a1:10:cb:88:67:2d:2c:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E3:84:56:81:20:EA:E7:18:53:F7:7F:D8:D1:4A:8B:65:85:6E:C3
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3133312e302f32342d3234203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:fd:fe:be:bd:a7:ae:bc:55:e4:98:ca:5b:68:a5:2e:cd:27:
         f7:f2:e5:4f:99:fb:2d:96:b7:ef:30:84:f2:cb:a9:82:72:70:
         ac:d8:81:23:e5:17:18:96:9f:63:01:8b:d2:0a:d1:a4:24:04:
         5c:b9:5d:cc:68:db:f0:c0:8c:80:f7:d9:d9:aa:86:2f:27:cc:
         c7:50:8e:af:1a:42:12:8f:56:d5:93:42:9e:1f:f9:ea:e5:cd:
         4f:95:24:de:c3:7a:7a:8b:73:b4:33:dc:f6:9a:4b:0a:4d:93:
         47:64:e3:e5:6b:fc:b4:a5:5c:59:34:bc:67:ee:3b:e8:1b:3b:
         1c:87:0c:73:10:6c:9f:74:ab:d7:41:c6:fd:dd:b9:d9:07:6a:
         20:e5:e2:a6:2d:b2:be:90:80:b1:da:12:c9:54:7a:34:4a:1e:
         7d:e7:6f:79:23:b3:6c:0d:cc:c5:e3:86:a4:2a:cf:bb:e1:47:
         77:91:2b:91:db:ca:b1:31:ba:24:a6:82:8d:41:c0:f3:16:d2:
         cf:b5:f7:f8:64:b0:e5:64:97:e5:a4:c0:86:d8:39:a0:12:fb:
         a7:f1:dc:a3:88:af:58:63:93:91:57:df:aa:42:80:e1:fb:29:
         b1:d7:31:ba:17:6a:ad:84:ae:2e:ed:00:0c:ab:ff:8e:50:70:
         78:60:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:03 2026 by rpki-client