Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa
File:                     3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa (raw, json)
Hash identifier:          8AEGQtXK/Xs1e1cVuxnjNRKg/MkAzKUk0OckBlGEiL4=
Subject key identifier:   E0:5A:FA:F3:40:49:23:7B:46:C4:10:2C:1F:09:09:76:A7:5D:38:2A
Certificate issuer:       /CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
Certificate serial:       62EC3B47234A0F0638294F267085C3408189A8A8
Authority key identifier: 90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa
Signing time:             Sun 03 May 2026 03:12:38 +0000
ROA not before:           Sun 03 May 2026 03:07:38 +0000
ROA not after:            Sun 02 May 2027 03:12:38 +0000
asID:                     132644
IP address blocks:        116.204.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl
                          rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:3b:47:23:4a:0f:06:38:29:4f:26:70:85:c3:40:81:89:a8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DFB5F1A9E58FE1ACB77CDF0B4E752370346916
        Validity
            Not Before: May  3 03:07:38 2026 GMT
            Not After : May  2 03:12:38 2027 GMT
        Subject: CN=E05AFAF34049237B46C4102C1F090976A75D382A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:99:f8:bd:65:3d:8c:79:b1:c5:1d:f6:61:
                    5e:9f:3b:c1:dd:2b:2d:12:e1:ba:1e:23:ae:9a:bb:
                    a4:8c:c7:48:cc:30:d8:3d:a3:3b:32:4a:2b:e6:9f:
                    de:70:25:26:7f:b4:4b:ab:62:ad:a9:f5:87:bd:49:
                    3f:cb:9a:03:cb:0f:85:e4:98:10:6f:3d:d9:fa:e2:
                    f2:2b:a1:3c:3a:ff:20:5f:c7:16:a3:86:79:0c:64:
                    2a:32:00:f2:d6:27:39:42:9c:6d:cb:4e:2d:3f:6d:
                    05:15:c6:f3:52:58:77:d0:53:24:50:8d:10:84:47:
                    e5:00:41:93:fa:f9:4a:e3:24:35:6f:00:2b:c4:76:
                    e7:96:dd:24:88:95:c7:22:e5:f5:c9:61:1d:1f:c1:
                    2e:33:ad:6e:4f:65:89:85:cb:be:77:9f:67:dd:e7:
                    03:9b:c4:3f:64:c4:0b:e7:d4:6b:c7:06:90:5c:b1:
                    c5:26:93:84:88:c8:04:cf:8f:ec:6d:27:47:70:93:
                    e5:b5:04:1e:67:a6:cf:ca:75:9c:18:5b:00:e7:0b:
                    dc:08:92:c2:43:fc:b0:b2:a0:2b:cc:45:e3:7b:da:
                    92:b9:b1:96:60:0e:00:72:50:36:a0:83:1d:cc:60:
                    e4:2c:4f:e4:df:a1:5e:18:39:50:ca:58:13:0c:f5:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5A:FA:F3:40:49:23:7B:46:C4:10:2C:1F:09:09:76:A7:5D:38:2A
            X509v3 Authority Key Identifier:
                keyid:90:DF:B5:F1:A9:E5:8F:E1:AC:B7:7C:DF:0B:4E:75:23:70:34:69:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/90DFB5F1A9E58FE1ACB77CDF0B4E752370346916.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e139ac1f-38e2-45aa-97dc-992796411cc1/0/3131362e3230342e3235302e302f32332d3233203d3e20313332363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.204.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:42:fa:ee:6c:aa:79:61:41:db:07:c1:ad:59:74:99:01:
         ab:e3:08:a8:43:a6:eb:a7:65:35:f8:35:3c:67:0c:94:ba:a0:
         e2:ba:fe:15:2b:f5:2a:e3:3e:db:29:25:d7:15:85:d2:7c:31:
         90:58:c8:6e:7f:4b:29:4d:ed:dc:2d:b8:4e:76:f5:43:c2:aa:
         5e:bd:59:81:a0:9e:9e:64:10:53:fd:42:ab:90:be:30:59:17:
         63:0f:e2:f1:44:17:d8:3f:04:69:c7:f8:f5:23:27:3e:ff:51:
         ea:9f:59:c6:ac:6c:4e:56:4f:33:d9:2b:25:d9:22:d2:1d:fb:
         ea:d0:52:77:74:3f:c9:8d:e9:97:fe:32:03:47:5d:c5:ea:71:
         e2:ea:a6:a8:0e:68:b6:23:26:35:54:83:d7:5a:3f:db:4d:05:
         f1:0d:75:3d:25:12:06:d9:21:1b:f0:76:0e:e8:cf:6e:84:7c:
         1c:4e:be:a1:24:e3:20:9e:a6:9f:3f:ff:35:69:c2:2f:66:6b:
         f0:9a:c8:54:e2:57:3c:3e:be:2b:00:35:93:b0:45:79:a9:ba:
         08:75:1a:7f:6c:1f:d4:15:d1:27:28:c0:19:90:da:9e:82:b6:
         f8:dc:cc:8b:40:20:75:b1:55:be:c1:ff:d5:fb:94:a5:db:f5:
         ca:c3:bd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:55 2026 by rpki-client