Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa
File:                     3131362e31322e34372e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          ls6pClLibFG+ZtAvlvA5DPGIjVB65RJG/A/2js2edZI=
Subject key identifier:   6B:C9:7F:84:E8:D4:65:CE:03:0C:4A:27:C2:B7:E6:BE:99:DD:7B:3B
Certificate issuer:       /CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
Certificate serial:       15E7836FE51AD361A478DC47B1B3EBF56BD98B26
Authority key identifier: A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa
Signing time:             Sun 03 May 2026 03:18:12 +0000
ROA not before:           Sun 03 May 2026 03:13:12 +0000
ROA not after:            Sun 02 May 2027 03:18:12 +0000
asID:                     38165
IP address blocks:        116.12.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl
                          rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e7:83:6f:e5:1a:d3:61:a4:78:dc:47:b1:b3:eb:f5:6b:d9:8b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DFB6024D05A37CA0C756EC747E898140885BC9
        Validity
            Not Before: May  3 03:13:12 2026 GMT
            Not After : May  2 03:18:12 2027 GMT
        Subject: CN=6BC97F84E8D465CE030C4A27C2B7E6BE99DD7B3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:d7:53:d4:f2:93:ae:16:53:a3:d5:d8:c5:
                    b3:d9:7c:34:8a:0d:6c:6f:5c:0b:a7:3c:6a:7d:a6:
                    71:46:74:f3:e7:3b:66:7c:92:43:21:1a:6a:d2:86:
                    ed:1f:e0:90:c8:1b:6f:71:56:96:4d:e6:36:8f:56:
                    e5:01:2b:21:bd:f3:97:9a:09:8e:b8:43:37:7e:94:
                    3e:0f:9e:44:ec:49:af:7a:56:67:68:72:37:90:d2:
                    08:d8:be:31:02:3a:af:7b:b1:9c:ab:d1:65:0d:50:
                    52:db:63:49:9b:62:2c:6b:fa:86:a8:f0:3d:94:ab:
                    45:23:8c:cb:4f:b0:06:ed:c1:9c:83:d1:47:34:1c:
                    bb:e4:b3:bb:6c:0e:d3:8e:ec:5c:fb:d0:93:33:a8:
                    55:7d:e4:19:38:c6:38:50:16:9d:72:97:0a:d9:67:
                    ed:81:b6:ec:c5:5c:f7:3d:10:b9:50:06:ae:28:e5:
                    da:28:2a:6d:04:43:49:36:fe:9f:c2:08:04:a8:0c:
                    d0:ce:22:d5:29:3c:b8:85:3f:9d:51:7c:ba:e2:84:
                    50:a4:c1:09:8b:30:6f:4e:7d:7b:23:9c:be:fc:af:
                    31:a8:0d:cf:21:0b:ae:a2:b5:f6:17:2d:99:2b:3e:
                    6f:d6:26:52:92:0e:fa:ee:b5:d7:3c:d4:f4:b0:de:
                    72:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:7F:84:E8:D4:65:CE:03:0C:4A:27:C2:B7:E6:BE:99:DD:7B:3B
            X509v3 Authority Key Identifier:
                keyid:A9:DF:B6:02:4D:05:A3:7C:A0:C7:56:EC:74:7E:89:81:40:88:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/A9DFB6024D05A37CA0C756EC747E898140885BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9DFB6024D05A37CA0C756EC747E898140885BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3131362e31322e34372e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:a9:b0:69:d6:1e:86:9e:d3:1b:8a:8c:01:c0:7e:3a:f1:af:
         10:50:9e:33:56:b1:e9:cf:63:10:55:02:d2:fd:38:7f:f9:f6:
         7d:9b:72:88:77:07:c9:5f:b0:00:6e:b5:03:e1:f7:a0:49:8d:
         b0:7e:8f:e5:ac:d7:93:9d:6f:b1:8c:2d:14:1a:f0:43:7e:d9:
         60:a2:67:b1:a1:e5:fa:61:49:a5:61:ad:ae:f2:bc:4c:f2:f0:
         1c:3b:e1:e1:14:e9:ea:e5:ed:44:62:76:72:e6:f6:f0:9d:6e:
         f1:6f:d3:c4:36:92:e8:cc:73:41:7e:be:16:23:0d:59:6f:89:
         d8:7a:d6:f6:22:82:bb:fa:30:05:bb:c9:3b:75:bd:4e:b5:bc:
         af:93:27:a0:64:64:f5:9f:9a:39:d0:e0:cb:6d:a0:81:36:2b:
         92:f0:8f:eb:3c:b7:40:41:ab:0a:1b:69:55:c6:96:cb:46:16:
         f3:62:26:cc:4f:ca:c8:e8:bb:fc:8d:67:7d:0f:f3:cc:7e:42:
         52:8c:5c:21:0f:fd:82:b5:9c:4b:44:4e:42:06:0b:68:28:a6:
         df:4d:8c:e3:e8:a4:fc:aa:8b:e2:b7:d8:ac:ff:98:68:ae:63:
         c2:9d:8f:ca:de:f9:d3:78:11:5a:84:c1:33:84:f9:19:81:d8:
         f2:08:d7:f0
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFeeDb+Ua02GkeNxHsbPr9WvZiyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERkI2MDI0RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0
MDg4NUJDOTAeFw0yNjA1MDMwMzEzMTJaFw0yNzA1MDIwMzE4MTJaMDMxMTAvBgNV
BAMTKDZCQzk3Rjg0RThENDY1Q0UwMzBDNEEyN0MyQjdFNkJFOTlERDdCM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvq9dT1PKTrhZTo9XYxbPZfDSK
DWxvXAunPGp9pnFGdPPnO2Z8kkMhGmrShu0f4JDIG29xVpZN5jaPVuUBKyG985ea
CY64Qzd+lD4PnkTsSa96VmdocjeQ0gjYvjECOq97sZyr0WUNUFLbY0mbYixr+oao
8D2Uq0UjjMtPsAbtwZyD0Uc0HLvks7tsDtOO7Fz70JMzqFV95Bk4xjhQFp1ylwrZ
Z+2BtuzFXPc9ELlQBq4o5dooKm0EQ0k2/p/CCASoDNDOItUpPLiFP51RfLrihFCk
wQmLMG9OfXsjnL78rzGoDc8hC66itfYXLZkrPm/WJlKSDvrutdc81PSw3nKnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUa8l/hOjUZc4DDEonwrfmvpndezswHwYDVR0j
BBgwFoAUqd+2Ak0Fo3ygx1bsdH6JgUCIW8kwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Zjc0NDhjMTEtZjhkMy00NTdkLThlMjItODQ4ODdhYjIyYTMwLzAvQTlERkI2MDI0
RDA1QTM3Q0EwQzc1NkVDNzQ3RTg5ODE0MDg4NUJDOS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BOURGQjYwMjREMDVBMzdDQTBDNzU2RUM3NDdFODk4MTQwODg1
QkM5LmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzEzNjJlMzEzMjJlMzQzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB0DC8wDQYJKoZIhvcN
AQELBQADggEBAGmpsGnWHoae0xuKjAHAfjrxrxBQnjNWsenPYxBVAtL9OH/59n2b
coh3B8lfsAButQPh96BJjbB+j+Ws15Odb7GMLRQa8EN+2WCiZ7Gh5fphSaVhra7y
vEzy8Bw74eEU6erl7URidnLm9vCdbvFv08Q2kujMc0F+vhYjDVlvidh61vYigrv6
MAW7yTt1vU61vK+TJ6BkZPWfmjnQ4MttoIE2K5Lwj+s8t0BBqwobaVXGlstGFvNi
JsxPysjou/yNZ30P88x+QlKMXCEP/YK1nEtETkIGC2gopt9NjOPopPyqi+K32Kz/
mGiuY8Kdj8re+dN4EVqEwTOE+RmB2PII1/A=
-----END CERTIFICATE-----
Generated at Wed May 13 09:24:16 2026 by rpki-client