Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa
File:                     3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          9or0Aovq+itDbFnRJWHEFOrI8Bwnt6OpiiswZ3Ku8uc=
Subject key identifier:   EF:FA:3D:C4:8D:7A:45:28:B0:C5:73:F8:E7:58:43:A3:06:2D:0E:90
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       4AACA233EB53E28BF3E0BE5DF2123D5885251C43
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:50 +0000
ROA not before:           Sun 03 May 2026 02:52:50 +0000
ROA not after:            Sun 02 May 2027 02:57:50 +0000
asID:                     59282
IP address blocks:        116.206.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ac:a2:33:eb:53:e2:8b:f3:e0:be:5d:f2:12:3d:58:85:25:1c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:50 2026 GMT
            Not After : May  2 02:57:50 2027 GMT
        Subject: CN=EFFA3DC48D7A4528B0C573F8E75843A3062D0E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:14:da:66:39:67:dd:fd:8e:da:25:0a:b6:
                    73:fb:e9:d3:95:fe:8c:bc:a9:06:17:7e:01:fe:1c:
                    34:2e:1f:17:cf:5e:74:2a:7d:e8:41:b3:02:04:a7:
                    77:28:26:da:11:73:4c:13:56:b3:49:84:33:c1:9c:
                    03:bb:3a:41:a8:c2:38:ab:34:ae:82:05:fe:9d:0c:
                    e5:2e:a1:b6:8d:04:2b:5d:1c:6a:e9:07:05:10:6c:
                    2b:de:90:d6:45:e5:2e:f0:05:c4:ab:8e:ec:7e:14:
                    2e:24:4f:4f:d1:9d:7b:a0:0f:ca:63:45:e0:0f:50:
                    b2:0c:ca:d9:e7:c5:37:b8:ac:b9:42:8b:8c:a5:8b:
                    38:9d:6a:64:36:d1:26:0d:f9:79:5c:14:16:22:82:
                    44:02:9c:f9:7d:1a:0e:7a:bc:08:18:db:0f:c7:ac:
                    47:fb:44:ad:1b:65:16:71:56:ab:3a:fb:07:d1:d7:
                    c2:87:98:5d:5d:cd:ce:52:ac:9e:15:da:08:15:a6:
                    b3:52:89:80:60:dc:65:53:91:5d:a9:2d:24:35:97:
                    f9:8e:24:20:36:79:77:4e:74:11:3f:a5:22:88:fa:
                    ad:ea:f5:40:8f:c7:20:64:5e:b3:71:05:7f:d2:62:
                    62:47:d5:55:ef:3b:66:86:f0:b5:98:58:b1:d3:db:
                    99:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:3D:C4:8D:7A:45:28:B0:C5:73:F8:E7:58:43:A3:06:2D:0E:90
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231332e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:34:c2:55:0d:20:31:a0:7d:8c:14:ac:a6:ca:c4:35:0e:
         2a:78:68:ea:e1:4a:5d:d2:37:56:39:e6:39:c3:71:f8:8c:cb:
         d2:91:1f:52:d6:70:e9:8f:dd:ce:56:f0:fc:45:5a:68:20:35:
         33:fb:91:fe:03:d4:bc:c4:a8:0f:3f:41:60:44:05:64:f1:51:
         88:6f:9d:a5:4f:f8:fe:7d:67:42:95:90:55:44:be:7d:6d:db:
         2e:96:a6:40:dc:07:9e:30:e7:6d:68:aa:87:c5:14:2f:59:81:
         ba:65:80:1b:a0:be:bb:1b:af:65:67:95:c5:98:0f:d4:25:30:
         90:d1:62:cf:b7:d8:81:4d:2c:44:ab:51:62:44:34:87:02:de:
         2f:4e:ab:ec:01:62:55:14:1f:39:dd:aa:fc:2d:1a:4d:4f:56:
         ab:5a:5c:99:cc:ab:dd:2c:d0:84:c9:2c:9c:63:bb:74:45:7d:
         af:43:27:f2:b0:04:aa:06:d0:f2:0c:f8:55:dd:4e:56:bb:e7:
         70:18:21:f3:76:1b:b2:a8:8c:00:91:25:af:ea:85:4f:f5:2d:
         e1:06:42:1d:3e:80:98:4c:4e:1b:4d:4f:47:06:52:35:27:e5:
         70:d9:e8:ab:3b:39:44:79:88:8a:21:04:71:bb:9d:1e:f4:cf:
         9f:b4:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:03:32 2026 by rpki-client