Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34342e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          4eVsgYjQx/GwRQGHLYtsEEdD640KhW1jdNg/AXAmGj8=
Subject key identifier:   77:A5:05:B0:5E:6C:0D:0C:B1:CB:42:D0:B4:78:1E:A1:59:C6:CB:C7
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       3AFC1FF7952DA987CF2E781AAE61EDF9131BEDA5
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:13 +0000
ROA not before:           Sun 03 May 2026 03:13:13 +0000
ROA not after:            Sun 02 May 2027 03:18:13 +0000
asID:                     38165
IP address blocks:        116.12.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fc:1f:f7:95:2d:a9:87:cf:2e:78:1a:ae:61:ed:f9:13:1b:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:13 2026 GMT
            Not After : May  2 03:18:13 2027 GMT
        Subject: CN=77A505B05E6C0D0CB1CB42D0B4781EA159C6CBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:eb:7a:00:f9:96:64:69:57:5a:cd:2d:14:9b:
                    3b:65:86:94:83:2e:ac:8b:0a:12:a2:1d:83:ed:f4:
                    28:5e:cd:3d:24:70:f7:54:3d:96:5d:2f:2f:91:4a:
                    c5:ff:d9:a6:d3:92:dd:31:08:96:ad:14:6d:e1:ef:
                    20:24:b6:9a:05:87:bc:23:a0:9e:e3:ae:b1:87:dc:
                    72:fd:7f:0a:29:f3:db:95:7a:96:05:c5:d2:1e:41:
                    f8:9f:cf:2c:68:2b:de:d8:47:04:04:c6:21:c0:23:
                    d7:26:64:f6:c7:a7:93:73:fe:4c:f8:a6:f1:a0:ef:
                    95:ad:b5:a1:96:f3:34:cd:dd:22:d4:c0:42:96:7d:
                    17:2f:f6:99:28:d4:93:7b:d3:66:79:fa:0e:78:d4:
                    d9:f5:8a:b6:65:cd:5c:28:3a:6d:44:f2:e8:ef:a6:
                    09:f6:7e:34:d7:fb:e3:71:35:9d:60:f3:3c:7c:b0:
                    54:ac:ac:a2:2c:38:76:c5:2f:91:8f:54:c9:1c:d2:
                    33:10:93:28:4c:0e:76:73:94:f7:78:bf:20:b3:ee:
                    ff:f4:96:94:98:3e:ff:8e:ba:f9:21:35:01:82:dd:
                    b3:95:6e:5f:15:fb:43:b8:0a:83:c6:75:32:29:ed:
                    a9:e1:70:09:48:cc:2d:57:96:e7:5d:55:e8:b8:4b:
                    20:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:05:B0:5E:6C:0D:0C:B1:CB:42:D0:B4:78:1E:A1:59:C6:CB:C7
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34342e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:2b:c3:33:be:b4:bc:21:62:11:b9:29:28:6a:10:4a:b4:
         a5:d7:76:d7:ed:0a:d6:46:8e:0b:a1:af:6b:0a:ec:02:a4:59:
         6a:c7:ce:c9:54:3a:de:4d:a2:b9:9c:9e:4f:d7:68:45:d7:bc:
         a4:09:fe:0c:6d:5b:80:a0:c3:fa:96:3f:09:41:ef:37:0c:89:
         5a:6c:f4:fc:f4:fc:20:e7:7c:d9:86:5d:87:aa:32:2e:f7:b4:
         37:84:02:2a:8d:1b:9b:a8:6a:77:95:5b:1d:87:9e:47:11:2e:
         0d:9d:67:47:bc:1d:fe:55:72:0f:d7:0e:c0:ca:45:a1:be:f1:
         0c:c5:f1:0c:db:ef:8d:fc:8b:f2:50:c6:03:58:6b:73:c0:f3:
         a3:70:61:88:81:63:da:07:7e:b3:0f:e6:67:ab:98:32:52:16:
         7e:83:b8:f4:df:f5:a4:63:5e:61:4e:d4:03:87:33:4a:55:7f:
         cf:0f:7f:cc:ac:3f:ba:09:ee:62:99:4f:9f:4d:d1:72:a0:53:
         f4:f8:e2:23:63:3e:9c:d0:c4:12:fe:d8:42:92:af:1e:dc:89:
         a4:ce:48:93:be:32:f1:46:be:90:f9:27:25:87:97:7c:de:42:
         64:29:aa:1d:49:05:58:62:e4:88:d6:d0:7b:72:99:51:ce:10:
         74:3a:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:47:55 2026 by rpki-client