Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34332e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          vuNc4l/9yLIs4KyCpx5p6F1jMwXXBMM4BQHYhbheraI=
Subject key identifier:   6B:BD:98:80:13:14:86:2E:3C:44:78:0A:75:6E:37:23:60:13:19:81
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       2280D5436A0CBBA1BDA202EEF8F753C76F2BE78D
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:16 +0000
ROA not before:           Sun 03 May 2026 03:13:16 +0000
ROA not after:            Sun 02 May 2027 03:18:16 +0000
asID:                     38165
IP address blocks:        116.12.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:80:d5:43:6a:0c:bb:a1:bd:a2:02:ee:f8:f7:53:c7:6f:2b:e7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:16 2026 GMT
            Not After : May  2 03:18:16 2027 GMT
        Subject: CN=6BBD98801314862E3C44780A756E372360131981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3c:57:3c:47:d2:32:26:de:59:c1:98:29:c2:
                    6a:74:4e:eb:57:6d:91:14:fe:12:03:3c:37:65:94:
                    d3:78:99:07:46:52:63:fb:57:a6:77:91:09:8f:a9:
                    98:bf:9c:ec:46:39:9f:03:d5:4d:ea:18:01:d9:7a:
                    e7:a1:60:23:1f:4e:03:12:29:42:55:dc:18:e1:0c:
                    da:94:aa:00:26:dd:fe:3c:04:ea:f2:9f:39:fe:40:
                    2c:1e:7f:b9:a4:9e:0c:8c:7e:fc:3c:0a:5b:a7:06:
                    d9:4c:c5:ad:ce:c7:2d:5d:34:10:b0:f6:bf:6e:93:
                    8d:c1:67:d9:5e:e5:4d:d0:d0:84:a2:d9:f6:eb:fe:
                    2d:4e:e3:e2:1d:10:a3:93:ec:01:33:9e:8d:7a:cf:
                    e1:9e:b0:57:84:43:20:26:3d:fd:b7:17:7b:3f:4d:
                    be:05:b9:8e:46:19:69:1c:6c:8f:21:7a:7a:85:65:
                    f9:d6:d2:5b:9a:96:c3:5a:67:08:b4:e1:88:e4:78:
                    81:2f:8b:2f:25:d4:da:06:52:61:97:c5:1a:dd:29:
                    99:f8:91:f6:71:29:5d:0a:f6:ef:45:8f:1a:31:38:
                    c8:e6:21:17:45:51:9c:79:aa:4d:55:58:bb:14:04:
                    cf:91:58:fa:87:58:be:93:c3:82:94:4e:45:38:63:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BD:98:80:13:14:86:2E:3C:44:78:0A:75:6E:37:23:60:13:19:81
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34332e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:b7:e3:9b:e0:72:e6:e3:c4:0c:77:d8:aa:41:be:9e:c8:5f:
         51:f6:e3:01:ed:3c:48:40:cc:9a:a1:f6:4f:08:0b:6c:bf:94:
         0c:98:46:09:0d:0c:f0:25:92:f3:f1:31:b6:06:65:78:5d:82:
         24:92:38:e5:b1:42:d0:ff:69:27:a1:1e:e4:b3:60:72:5b:cd:
         a3:a1:b7:ad:16:20:23:41:03:39:96:d9:8e:8a:9a:4f:d7:65:
         d6:3b:28:18:49:b7:70:25:fe:57:cf:bb:f1:4d:01:bc:85:d5:
         fc:82:ba:9f:4a:86:c7:ae:a9:bc:66:6c:22:46:0b:de:3f:02:
         d8:ea:ef:0a:cb:ec:87:56:73:ed:0a:5f:05:34:58:9f:36:f3:
         af:9e:34:2d:0c:3e:d3:d4:61:d2:ed:41:3b:e3:85:64:a5:26:
         c8:b3:b0:34:33:cd:30:59:2b:e3:77:93:e3:a5:5d:71:20:15:
         1f:ca:3e:b8:39:bc:02:51:2f:e7:16:d6:53:00:b3:90:0d:a2:
         00:1e:87:eb:fb:2e:06:20:2f:e0:b4:06:ab:ce:aa:48:34:52:
         67:b1:1e:8e:92:f9:48:f6:c4:e5:bc:68:40:ae:ee:61:79:bc:
         a6:b6:87:93:37:0f:95:53:95:34:ad:e9:5a:65:5e:74:40:d4:
         4a:29:56:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:19 2026 by rpki-client