Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa
File:                     3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa (raw, json)
Hash identifier:          PViwWNE+NG9X47qSPjKfZGqholiuXSr1ZOEfMgtcqX0=
Subject key identifier:   8B:E1:77:04:59:5E:AA:07:35:5C:3E:5A:A6:B4:55:CA:6D:82:7C:D2
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       0EB47FBEF4CC4FD0A13D14A00743338E491DBAD2
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:37 +0000
ROA not before:           Sun 03 May 2026 03:07:37 +0000
ROA not after:            Sun 02 May 2027 03:12:37 +0000
asID:                     132644
IP address blocks:        116.204.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b4:7f:be:f4:cc:4f:d0:a1:3d:14:a0:07:43:33:8e:49:1d:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:37 2026 GMT
            Not After : May  2 03:12:37 2027 GMT
        Subject: CN=8BE17704595EAA07355C3E5AA6B455CA6D827CD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:80:da:80:ca:f9:b5:b1:76:a8:de:ae:3b:da:
                    b1:64:7d:42:04:8d:6f:6c:da:16:c3:b9:07:96:a7:
                    64:20:e0:cd:d3:90:79:9b:76:c0:56:03:3b:25:13:
                    26:9a:ca:d3:5d:85:0f:43:d0:20:26:34:5c:4d:c1:
                    20:d2:38:32:bd:d2:39:df:03:34:7f:da:f0:bd:02:
                    80:cd:ac:42:d7:0e:a0:63:4b:77:8a:dc:21:d7:2f:
                    c9:8a:57:8f:1b:9a:0f:db:aa:ff:0e:a8:bc:58:26:
                    99:3f:0f:ae:17:56:e2:6f:60:be:3e:4c:c9:d4:4d:
                    4f:af:7b:9c:6b:25:71:7e:3c:98:ff:01:c3:e4:89:
                    8e:6a:29:8b:25:4d:ad:7b:91:27:18:0b:c5:f0:c7:
                    65:3c:17:6c:50:ca:20:b5:2d:4d:b6:e7:74:78:05:
                    f6:40:73:34:79:ec:9f:0a:c2:a5:6b:dc:b9:15:9a:
                    95:48:9f:cf:47:f6:ff:23:84:04:4d:d5:77:e0:67:
                    2b:88:29:a5:51:f2:75:90:0d:d8:88:e7:6a:6c:83:
                    f6:79:84:69:7f:2f:60:21:ed:1e:8c:13:51:4a:df:
                    83:8b:b5:d5:3d:a7:b4:2b:20:b4:b1:0b:c5:a2:97:
                    24:b3:f8:7b:5e:5f:87:5d:80:bd:ef:95:7a:b7:ab:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:77:04:59:5E:AA:07:35:5C:3E:5A:A6:B4:55:CA:6D:82:7C:D2
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3234382e302f32332d3233203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:0b:37:db:25:94:69:80:4d:d4:14:76:3b:97:30:b5:53:
         78:d9:bc:e2:22:23:d5:b3:19:ac:16:4d:8d:a8:8e:6d:d0:8b:
         47:c5:ba:a4:8d:e9:80:b2:e1:50:43:c9:8f:15:f9:f1:48:88:
         24:a5:af:25:82:fa:d4:2f:ad:4d:39:01:a3:b1:3e:00:ba:c9:
         f3:18:d0:ba:b8:da:52:6f:8b:25:da:5f:49:8e:e8:f3:a6:cd:
         1b:f1:35:a1:6c:44:f7:83:48:a1:00:02:0c:80:c2:3d:d7:ea:
         9c:04:6d:a6:89:bf:d4:f0:4c:1f:7c:27:66:f3:3a:78:15:b6:
         39:4d:6e:16:b3:f6:14:df:c2:42:38:16:af:92:bd:e7:0c:3f:
         e4:f8:9a:3c:24:be:c2:f7:b2:bb:e9:da:15:26:f9:d7:af:2a:
         37:26:68:41:bf:3f:08:8c:a0:d9:54:d1:c0:b0:d7:49:20:11:
         32:6d:81:d7:ee:a3:ac:43:33:de:7d:91:e8:d0:da:7b:7d:de:
         ea:90:51:0a:79:cc:c4:bb:4d:e0:9b:35:a7:9a:18:73:1f:5b:
         6b:99:8c:9d:f2:5e:5c:63:57:23:2f:c7:0e:d4:c6:1d:ea:43:
         f3:a2:de:b0:79:73:f5:67:8b:81:b7:a8:64:24:98:56:0d:6a:
         7e:b1:0c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:51 2026 by rpki-client