Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          F7W3l45HCPDJENu+RobZMG7HgvBdxexYhGm3GKsDUsc=
Subject key identifier:   6C:D2:74:54:A6:6B:55:E9:21:C7:52:C3:3E:28:B9:79:61:9F:16:C5
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       317F62B93B7297E8BED9CF5DC6BDC80FD60D17AF
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:08 +0000
ROA not before:           Sun 03 May 2026 03:13:08 +0000
ROA not after:            Sun 02 May 2027 03:18:08 +0000
asID:                     38165
IP address blocks:        116.12.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7f:62:b9:3b:72:97:e8:be:d9:cf:5d:c6:bd:c8:0f:d6:0d:17:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:08 2026 GMT
            Not After : May  2 03:18:08 2027 GMT
        Subject: CN=6CD27454A66B55E921C752C33E28B979619F16C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:2d:3a:8b:c0:bc:b5:b5:e6:b0:91:09:f8:
                    59:f0:66:e9:72:17:16:2b:90:83:ae:35:bc:d4:fd:
                    51:be:68:cc:fe:ff:05:97:8f:85:f9:c9:d6:65:3b:
                    58:0e:59:b4:da:c6:40:3e:3c:b6:e1:b9:21:74:7c:
                    9d:7b:cf:5e:61:d8:8b:db:72:d5:74:da:60:8f:86:
                    3f:36:0d:27:07:e8:45:86:30:5b:3a:f5:d4:b7:ed:
                    21:1e:08:09:54:7a:55:ae:7f:5d:05:4e:90:c7:92:
                    1d:66:b9:93:bf:04:dc:31:97:87:9b:90:42:e7:82:
                    f7:64:4d:5d:13:de:7f:b0:0b:91:04:a3:01:ed:bc:
                    35:cb:7f:f4:ff:8b:9a:b0:d0:e1:50:89:e3:25:f0:
                    25:07:0a:66:28:d8:b2:76:52:6b:7f:e6:39:a3:3b:
                    79:df:a5:2a:f5:3c:c5:1b:23:35:6d:38:b8:e7:28:
                    47:ce:a2:98:27:3f:18:6e:b4:27:ac:3b:83:86:13:
                    8a:65:35:1c:3d:2c:b0:0f:af:78:ff:53:9d:17:de:
                    db:06:0c:22:f3:e4:ba:fd:02:43:39:11:ad:56:0b:
                    f0:a0:cf:4a:fe:46:59:91:76:76:6f:ec:a2:ea:ba:
                    0f:7a:21:f1:ed:7e:4a:50:8a:7d:d6:14:4c:31:74:
                    99:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:74:54:A6:6B:55:E9:21:C7:52:C3:3E:28:B9:79:61:9F:16:C5
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:52:f6:00:79:ba:2f:78:8b:16:ad:cf:69:ae:d7:70:3d:bd:
         ca:b3:d0:ab:a1:fc:a5:98:9a:ac:06:dc:f6:c3:83:ae:7f:0b:
         59:a7:06:0c:06:bc:23:55:66:fc:6f:64:93:93:1f:ea:94:39:
         8b:16:5a:39:e1:e6:84:70:b5:0b:40:9c:3f:3f:64:ce:2b:24:
         48:cd:3c:7f:69:94:4f:94:38:d0:71:f1:68:fa:1c:54:e6:c9:
         1b:60:b1:f1:79:17:b0:6d:33:24:3b:92:6f:5a:b2:16:34:35:
         c8:a8:9d:68:24:d3:ce:fd:bd:6f:05:2c:0a:fa:f6:32:17:bf:
         ac:13:67:49:08:80:35:7f:23:52:b7:98:d5:f6:36:90:88:a2:
         dd:68:e8:e5:6d:a7:56:b4:f2:1e:02:ab:30:cd:ad:65:da:13:
         c2:f0:86:8f:4c:1d:ca:39:b3:ea:d8:b9:0a:35:e4:33:dd:84:
         14:1e:34:08:83:3a:65:8d:51:82:16:e5:bb:af:c3:10:04:9b:
         75:72:dc:31:e6:5e:d8:31:64:60:4b:48:de:8f:5c:6f:d9:b1:
         da:3b:06:15:ce:80:e7:5d:24:fb:9f:8a:cd:3b:08:be:87:e4:
         cb:a6:97:17:c0:5d:64:69:40:40:02:15:34:12:7a:65:f1:5f:
         37:0f:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:48 2026 by rpki-client