Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa
File:                     3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa (raw, json)
Hash identifier:          JaMj7Mn/vinF3SqmQ06RkAsyunCmsAh4LYSl4fBlc2I=
Subject key identifier:   1C:90:7B:88:2C:FE:F2:A3:9F:2F:F7:5F:97:B4:29:6D:13:23:DB:D1
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       24F7E2536F0238B034560896A9E7318C6B1D8633
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:47 +0000
ROA not before:           Sun 03 May 2026 02:52:47 +0000
ROA not after:            Sun 02 May 2027 02:57:47 +0000
asID:                     59282
IP address blocks:        116.206.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:e2:53:6f:02:38:b0:34:56:08:96:a9:e7:31:8c:6b:1d:86:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:47 2026 GMT
            Not After : May  2 02:57:47 2027 GMT
        Subject: CN=1C907B882CFEF2A39F2FF75F97B4296D1323DBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:4c:72:e9:ac:66:70:0c:a4:60:65:7a:6f:
                    45:d9:c8:73:ca:e9:32:69:aa:ed:4c:57:0e:2d:79:
                    07:54:5b:b8:19:4f:6c:86:5a:2c:8e:ef:80:69:5a:
                    a2:48:24:68:d8:af:da:59:1c:89:15:63:79:c3:d0:
                    79:4e:52:75:ce:61:3b:65:97:b0:99:88:70:f0:f1:
                    66:40:e2:a3:a0:e4:43:87:20:90:f9:52:ad:12:9d:
                    5c:83:7a:71:8b:fa:ea:3a:5e:5b:8b:0d:f6:fa:f8:
                    67:b5:f0:44:3b:11:50:ad:12:94:a6:6b:04:62:e3:
                    61:c9:94:bf:99:32:45:cc:8c:72:85:1a:ad:24:cf:
                    88:1f:1c:d8:3c:f5:9c:41:1c:6f:0a:4a:7c:e8:09:
                    8a:27:24:e0:2a:6f:ac:a2:94:37:48:09:1a:8c:0e:
                    79:ca:91:ca:85:ff:79:5d:63:3c:1d:f5:73:84:db:
                    eb:95:bc:6e:56:a9:58:59:ed:6d:06:f0:8b:df:4b:
                    5c:07:ee:d2:e0:e6:ab:e2:4a:1e:c4:60:40:8e:d4:
                    d2:82:a8:34:d4:f7:fd:46:e0:3b:cc:82:4f:00:61:
                    66:fc:3b:ee:3c:4b:5b:61:66:41:9c:da:52:f6:15:
                    b7:a9:4a:54:73:bf:f8:df:dd:a7:99:d4:02:fb:48:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:7B:88:2C:FE:F2:A3:9F:2F:F7:5F:97:B4:29:6D:13:23:DB:D1
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f5:05:43:21:40:ed:10:74:05:80:b6:44:41:a5:db:78:ae:
         5c:49:39:d9:30:3d:c4:5f:7f:97:34:3c:e7:12:1b:f6:3e:15:
         d9:db:ba:f5:79:8d:83:fe:a5:ae:5b:ba:3d:14:74:38:07:fd:
         79:8f:e9:aa:8b:21:ee:ab:26:9b:5b:69:56:53:52:14:2f:ef:
         01:74:48:a2:48:0c:41:ff:f5:8e:e3:0d:40:31:0a:d7:9a:02:
         6c:fd:4b:34:6d:b8:59:77:95:29:71:05:60:04:b5:0f:b0:65:
         44:7c:af:34:9b:2f:da:8a:64:f5:65:f2:3d:7c:38:a6:52:d0:
         7e:07:22:e7:be:4f:c1:8d:de:68:86:e4:b2:bd:bd:2d:14:ef:
         74:38:dd:78:12:84:a9:39:ee:0b:98:a7:33:7a:75:53:d1:7f:
         5d:60:bb:67:a2:48:09:89:91:04:71:31:06:66:bb:36:42:80:
         47:70:f2:7a:48:f2:e2:19:22:14:56:96:5b:73:ba:e5:03:be:
         ea:fd:19:91:c0:0b:b0:9d:bd:3e:6d:92:a9:d8:2f:00:26:8e:
         c6:f6:55:70:fe:d8:fb:e7:04:d6:41:d4:80:60:21:48:f9:23:
         de:6a:cd:0a:6c:21:24:34:14:53:3a:15:4e:e2:ce:10:11:52:
         18:72:20:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:02:54 2026 by rpki-client