Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
File:                     3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          K2rJXObunbVeGUGmNLr3mwtBf8bkZX6YYlP1we9FNao=
Subject key identifier:   FD:B2:25:96:4B:1C:E9:3A:5C:A4:65:BC:35:58:81:A3:85:AA:C9:3C
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       7F932BC709584CA0ABB5B0290B507BD32C51A50D
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:47 +0000
ROA not before:           Sun 03 May 2026 02:52:47 +0000
ROA not after:            Sun 02 May 2027 02:57:47 +0000
asID:                     59282
IP address blocks:        116.206.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:93:2b:c7:09:58:4c:a0:ab:b5:b0:29:0b:50:7b:d3:2c:51:a5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:47 2026 GMT
            Not After : May  2 02:57:47 2027 GMT
        Subject: CN=FDB225964B1CE93A5CA465BC355881A385AAC93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:4b:21:b5:96:a1:f5:46:74:51:a6:3b:28:
                    3b:74:7c:ee:7a:61:a4:98:0e:be:57:a6:ab:72:f0:
                    e3:5a:1a:58:dd:5c:39:4a:06:bd:3c:ec:94:cd:ab:
                    48:b1:e5:2c:bb:e4:aa:47:e1:d0:1e:2d:4a:ef:9e:
                    96:ea:d4:37:d4:b5:82:15:5a:59:d5:01:81:cb:3b:
                    a4:7e:e7:b1:75:08:46:ef:80:32:79:d2:bb:09:03:
                    53:c8:af:34:12:bb:9c:61:92:65:63:d0:dd:8c:bc:
                    ff:17:72:5e:2b:09:76:a2:0d:f1:dc:73:e4:dd:5c:
                    2f:00:6d:ef:d5:91:bd:e8:ac:1f:60:b4:dc:49:46:
                    64:df:7d:d3:a4:06:93:56:d0:c4:a3:96:aa:46:a6:
                    b1:87:1b:01:90:cb:ea:d1:40:9c:27:90:9e:72:1f:
                    28:f9:5a:8b:05:8e:a1:42:40:fc:e3:44:42:be:ef:
                    e5:55:88:be:08:9c:90:3e:ea:03:90:04:d6:60:53:
                    e0:c9:fb:51:b1:25:c8:08:4b:37:71:60:de:99:bd:
                    11:30:82:af:1e:ea:11:cb:d8:ca:52:75:32:9f:a0:
                    e5:ac:aa:79:7a:bd:21:76:2f:78:55:66:f2:89:60:
                    be:ea:ea:e2:99:09:3f:af:cf:9a:e6:4f:ba:72:7c:
                    97:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B2:25:96:4B:1C:E9:3A:5C:A4:65:BC:35:58:81:A3:85:AA:C9:3C
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:cb:34:ea:a3:37:b7:a3:19:21:9e:1c:11:a7:b6:b0:98:
         e1:5c:98:9c:8c:34:9b:f5:a4:32:b7:4f:23:c8:62:ff:72:27:
         75:75:eb:20:b3:1e:51:fe:fe:4c:71:f2:65:34:19:e7:22:21:
         4f:83:0a:e0:ef:4d:79:2e:d6:a7:cd:ec:02:5b:54:1d:82:b0:
         66:4c:9d:2a:c8:7c:82:ca:21:a9:c5:2c:d6:2d:44:37:ad:7c:
         74:bc:0a:19:31:1e:e9:92:f4:08:55:51:a2:55:f0:ed:9f:56:
         c4:7a:4f:90:a9:ce:67:18:7f:5e:c9:0a:ad:cd:38:74:f2:7d:
         62:11:58:97:40:19:2b:bf:53:de:6b:6c:0b:12:06:9e:3d:41:
         7f:4f:c4:08:d7:c5:63:00:04:cc:d8:3c:01:97:d1:00:27:93:
         e9:f3:98:12:36:4e:cf:84:92:27:0c:42:ba:1a:a8:b4:6d:a3:
         c5:4f:a2:d5:2f:16:0e:6d:6d:8e:2f:43:36:23:87:78:11:2f:
         b4:bb:b8:d1:0b:c8:cc:a1:77:96:55:b2:0c:f6:5a:58:22:02:
         76:b1:51:9c:22:de:06:b8:0c:a6:be:75:d6:1c:0d:7a:dd:53:
         f9:42:5b:e7:ba:51:d7:44:da:9a:a1:cb:5c:e8:f2:d7:bd:7a:
         f9:18:3b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:05:45 2026 by rpki-client