Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa
File:                     3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          mML8Y06xC1Ba28dmIO2VE5Ln2tzvvZV3niqEU4AWOB4=
Subject key identifier:   41:13:DD:A7:8D:1C:B0:67:B7:B9:E1:09:16:E7:13:25:7C:D2:C2:1B
Certificate issuer:       /CN=488A458129866D0E7DBFF7668D82664F584F8541
Certificate serial:       4F7F13E81CA4EC023A20F9816629D87997EC2CA2
Authority key identifier: 48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa
Signing time:             Sun 03 May 2026 03:15:14 +0000
ROA not before:           Sun 03 May 2026 03:10:14 +0000
ROA not after:            Sun 02 May 2027 03:15:14 +0000
asID:                     4787
IP address blocks:        116.206.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl
                          rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:13:e8:1c:a4:ec:02:3a:20:f9:81:66:29:d8:79:97:ec:2c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488A458129866D0E7DBFF7668D82664F584F8541
        Validity
            Not Before: May  3 03:10:14 2026 GMT
            Not After : May  2 03:15:14 2027 GMT
        Subject: CN=4113DDA78D1CB067B7B9E10916E713257CD2C21B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:33:eb:eb:56:fb:3a:ce:b2:37:fe:c2:31:
                    29:be:58:cc:01:e7:96:95:7b:7e:fa:b8:ea:2d:4f:
                    36:d0:5b:e9:7c:98:25:dd:0d:90:93:e1:a3:0a:20:
                    ed:92:86:21:b1:83:d7:fe:5f:45:14:1e:4a:27:cd:
                    3e:ac:b2:92:5d:1d:c0:0e:78:ef:0d:96:fe:23:49:
                    48:4f:ad:12:db:b9:94:00:3e:6b:ff:8c:84:6e:90:
                    f8:ae:99:25:1e:6e:b5:16:1b:f1:a5:cf:68:2a:ef:
                    5c:cb:05:5b:71:33:4b:06:b3:de:30:99:b1:17:3f:
                    58:79:67:58:d1:6a:16:41:d9:a0:d9:ab:97:5e:b5:
                    cd:75:1e:86:11:69:9f:bb:fb:d9:a0:33:6e:4c:34:
                    a0:c9:72:e1:30:c5:93:a3:13:04:e5:77:01:57:0c:
                    8a:94:44:a2:fb:2f:0e:b3:3f:78:4a:86:69:43:20:
                    9b:2c:60:28:7d:1c:09:66:8b:8f:d9:de:7e:97:e4:
                    9e:92:69:c9:31:1c:10:72:18:95:24:0e:17:4c:2c:
                    f1:65:c3:79:f4:db:b8:9f:fc:bf:9b:17:b9:d5:87:
                    f9:c8:a2:c8:cb:b3:22:d3:c3:8b:65:97:9c:6b:c8:
                    93:a9:3d:a0:45:f0:8c:b9:f9:77:ad:ba:41:ac:1b:
                    5c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:13:DD:A7:8D:1C:B0:67:B7:B9:E1:09:16:E7:13:25:7C:D2:C2:1B
            X509v3 Authority Key Identifier:
                keyid:48:8A:45:81:29:86:6D:0E:7D:BF:F7:66:8D:82:66:4F:58:4F:85:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/488A458129866D0E7DBFF7668D82664F584F8541.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/488A458129866D0E7DBFF7668D82664F584F8541.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3131362e3230362e3233362e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:0e:a5:45:9a:cb:20:c8:90:0a:a5:0f:ae:d0:04:82:8d:16:
         ab:58:21:74:79:e2:2d:ad:86:1b:59:79:38:ee:2b:1f:ca:04:
         9d:9f:34:a8:56:6f:e5:b8:68:a7:66:f9:bd:d3:aa:ff:7a:10:
         d9:68:87:65:75:07:2d:65:06:d4:bc:c0:c5:80:b9:f2:a0:df:
         44:53:65:43:07:9a:46:46:04:d6:a7:d7:b3:47:e9:d5:5c:e3:
         b0:6e:ea:5f:5b:37:06:af:d5:67:e2:79:22:07:c8:25:e0:41:
         b0:52:45:8c:d2:95:02:a5:62:02:be:b2:84:6a:2b:b1:69:8b:
         24:d8:86:47:b5:63:1d:98:50:49:f0:c6:96:dd:3f:45:e3:92:
         f5:9f:03:a2:5c:74:ec:ca:8b:f4:8b:cb:ed:d7:2a:ad:a9:ca:
         a9:08:2b:9f:a1:8e:03:be:39:01:be:39:1c:06:4b:33:57:5f:
         a2:b6:a5:30:84:65:5d:66:fa:da:7d:a0:21:93:91:1f:41:80:
         1b:a0:35:4c:68:90:29:04:91:ad:f4:df:aa:92:39:57:da:e0:
         5f:2b:7f:8e:bd:62:97:f3:cb:5d:7c:fa:e4:4e:25:08:b0:8c:
         27:98:34:9c:32:d4:9a:c1:1e:78:bb:f6:3b:b8:09:44:a5:d1:
         f0:1a:20:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:27:24 2026 by rpki-client