Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34362e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          VdZyujauditCo5BInDzGT86RLe022tUhB8aqRECGwWM=
Subject key identifier:   3E:45:19:8B:43:94:F2:1A:35:22:AE:15:A5:A6:ED:C3:71:19:DA:57
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       54893E1A92AF6F680EB4205DBC55D9BE3951D0A7
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:09 +0000
ROA not before:           Sun 03 May 2026 03:13:09 +0000
ROA not after:            Sun 02 May 2027 03:18:09 +0000
asID:                     38165
IP address blocks:        116.12.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:3e:1a:92:af:6f:68:0e:b4:20:5d:bc:55:d9:be:39:51:d0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:09 2026 GMT
            Not After : May  2 03:18:09 2027 GMT
        Subject: CN=3E45198B4394F21A3522AE15A5A6EDC37119DA57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f7:d8:6d:fc:83:8e:35:d7:85:97:4f:68:00:
                    f7:4e:a6:4a:f6:c2:aa:47:6c:0f:75:c9:50:65:5c:
                    1a:1f:bc:60:cf:ee:bc:61:20:06:c5:26:70:fe:cb:
                    ed:15:fe:de:30:49:e4:90:ff:de:9a:bc:7c:a1:96:
                    51:e4:68:cb:83:57:c1:9c:8c:64:61:63:ae:f3:b0:
                    e2:16:7a:58:41:38:ab:67:9c:58:85:84:2d:de:e3:
                    08:dd:b4:a5:38:1c:84:c2:c3:a7:85:40:fd:1c:c3:
                    4e:9a:17:f1:6f:d8:e2:8c:20:ee:b4:0b:21:a7:10:
                    e1:b0:60:02:e1:d0:16:09:f1:6b:7f:9f:19:40:67:
                    74:72:cd:72:3f:95:40:35:9b:f9:94:95:00:61:e9:
                    db:18:20:44:5a:54:a6:b8:de:58:6b:34:e9:7b:22:
                    5e:f1:e0:4f:ad:a4:b7:ae:6e:59:0c:7b:7b:fd:23:
                    d5:ed:0f:c6:6a:b4:4a:c7:76:c6:ff:9e:fb:2d:2f:
                    7f:f1:3b:a4:4e:d3:d8:97:f2:5a:04:35:7d:73:5e:
                    18:8c:59:5d:05:d6:fa:54:64:6c:40:ab:1c:8b:f3:
                    d2:dd:de:2e:6b:6f:ce:68:57:fa:63:6a:ff:8a:65:
                    36:08:ad:10:08:98:10:e4:3c:6b:1b:ec:2f:72:b3:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:45:19:8B:43:94:F2:1A:35:22:AE:15:A5:A6:ED:C3:71:19:DA:57
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34362e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:90:3a:e2:37:1c:18:47:7b:2f:6c:0f:41:c6:0f:e8:25:
         4b:c2:82:38:c5:b6:4f:b2:40:6e:43:a9:f1:be:81:eb:71:a7:
         56:ac:36:aa:7f:0b:f3:a6:6d:11:38:65:17:2b:ce:4d:bf:ce:
         19:9a:23:34:f6:2d:a1:a7:39:12:55:2b:ef:4f:fc:1b:66:1f:
         7d:1d:d3:1d:c3:94:30:fb:c5:ec:bc:8e:47:2a:52:cc:21:43:
         80:69:02:ab:5a:eb:d8:46:d3:d3:b1:e6:93:a5:c6:f4:30:57:
         7a:27:c9:5a:f7:42:e3:41:dc:83:91:69:f6:2f:67:07:cd:d3:
         e7:e3:33:f0:87:4a:bc:e0:5d:d8:d0:d6:53:20:f9:a4:36:36:
         4f:3f:5a:63:d5:2e:6b:7a:85:38:d2:a6:d0:b4:8d:2c:f4:74:
         7c:a8:7b:64:d7:50:f7:89:bd:6a:b9:e1:52:27:f0:92:44:26:
         78:16:06:e8:f3:1a:eb:83:dd:b2:52:68:d8:6b:6b:07:08:42:
         3f:e7:8f:eb:30:c5:41:72:45:9d:f6:a6:f8:8f:84:4a:8e:3f:
         ea:e3:30:f4:41:a0:93:a2:aa:2d:66:94:db:64:f6:a5:66:d5:
         e0:75:82:df:89:01:d6:e8:44:a1:8f:5a:a4:cc:ee:9f:90:da:
         7b:c0:7c:5e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUVIk+GpKvb2gOtCBdvFXZvjlR0KcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA1MDMwMzEzMDlaFw0yNzA1MDIwMzE4MDlaMDMxMTAvBgNV
BAMTKDNFNDUxOThCNDM5NEYyMUEzNTIyQUUxNUE1QTZFREMzNzExOURBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW99ht/IOONdeFl09oAPdOpkr2
wqpHbA91yVBlXBofvGDP7rxhIAbFJnD+y+0V/t4wSeSQ/96avHyhllHkaMuDV8Gc
jGRhY67zsOIWelhBOKtnnFiFhC3e4wjdtKU4HITCw6eFQP0cw06aF/Fv2OKMIO60
CyGnEOGwYALh0BYJ8Wt/nxlAZ3RyzXI/lUA1m/mUlQBh6dsYIERaVKa43lhrNOl7
Il7x4E+tpLeublkMe3v9I9XtD8ZqtErHdsb/nvstL3/xO6RO09iX8loENX1zXhiM
WV0F1vpUZGxAqxyL89Ld3i5rb85oV/pjav+KZTYIrRAImBDkPGsb7C9ysycLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUPkUZi0OU8ho1Iq4Vpabtw3EZ2lcwHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNjJlMzEzMjJlMzQzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0DC4wDQYJKoZIhvcN
AQELBQADggEBAHtKkDriNxwYR3svbA9Bxg/oJUvCgjjFtk+yQG5DqfG+getxp1as
Nqp/C/OmbRE4ZRcrzk2/zhmaIzT2LaGnORJVK+9P/BtmH30d0x3DlDD7xey8jkcq
UswhQ4BpAqta69hG09Ox5pOlxvQwV3onyVr3QuNB3IORafYvZwfN0+fjM/CHSrzg
XdjQ1lMg+aQ2Nk8/WmPVLmt6hTjSptC0jSz0dHyoe2TXUPeJvWq54VIn8JJEJngW
BujzGuuD3bJSaNhrawcIQj/nj+swxUFyRZ32pviPhEqOP+rjMPRBoJOiqi1mlNtk
9qVm1eB1gt+JAdboRKGPWqTM7p+Q2nvAfF4=
-----END CERTIFICATE-----
Generated at Wed May 13 10:23:46 2026 by rpki-client