Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa
File:                     3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          S3vlimdvoGzFuAyUKAon3zByGdBKiazihI8BHyvXGC8=
Subject key identifier:   BE:5F:27:76:2A:F2:5D:D1:0E:3E:5E:9A:43:87:19:7D:30:FF:F1:2B
Certificate issuer:       /CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
Certificate serial:       4B3C57B8AE9B2C53AA1A5979706C98BEA462C7D5
Authority key identifier: 69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa
Signing time:             Sun 03 May 2026 02:57:48 +0000
ROA not before:           Sun 03 May 2026 02:52:48 +0000
ROA not after:            Sun 02 May 2027 02:57:48 +0000
asID:                     59282
IP address blocks:        116.206.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl
                          rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 12:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:3c:57:b8:ae:9b:2c:53:aa:1a:59:79:70:6c:98:be:a4:62:c7:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69955FC73F1288024E7CAF0C1D825E8389B6B25D
        Validity
            Not Before: May  3 02:52:48 2026 GMT
            Not After : May  2 02:57:48 2027 GMT
        Subject: CN=BE5F27762AF25DD10E3E5E9A4387197D30FFF12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:88:e9:96:c8:91:f6:d3:03:01:69:96:ff:
                    d8:4b:62:26:80:b7:e7:75:66:13:03:c1:41:6e:92:
                    90:a1:14:d1:3d:51:5d:a7:5c:ec:a5:07:31:c2:5c:
                    3b:46:ad:7d:7b:dc:b2:49:00:21:ff:7f:2a:61:71:
                    a8:5b:63:27:1d:00:69:f5:a1:ef:0e:5e:37:91:27:
                    bf:64:08:b4:cd:98:78:5a:f7:28:a0:2a:1c:e8:10:
                    ce:a8:a8:23:61:6d:54:c8:00:37:23:75:dc:d0:45:
                    72:c0:d3:3d:1c:33:0a:93:a3:03:3f:a9:86:aa:b6:
                    f4:9c:e2:bf:d4:c5:7c:e5:cd:05:1f:5f:b0:9b:f5:
                    cb:1a:0c:fc:70:cd:a3:c3:0b:cf:7f:2f:8f:94:58:
                    eb:e3:28:b6:3c:ea:18:35:ac:40:31:60:bc:50:1b:
                    74:ef:e9:bc:b2:b0:14:09:cc:11:a4:e4:4b:2f:40:
                    c4:56:31:f0:ca:a7:63:cc:f4:dc:91:bf:34:b9:19:
                    75:d2:6c:9d:50:05:82:68:0b:77:8d:43:de:e8:68:
                    60:95:14:50:74:b1:92:7e:18:9e:a0:4e:6f:c1:45:
                    46:c4:16:d9:51:1b:45:2f:06:5e:0e:5d:a3:6b:97:
                    85:cf:f9:db:70:e9:30:39:d3:d9:52:f8:09:13:9b:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5F:27:76:2A:F2:5D:D1:0E:3E:5E:9A:43:87:19:7D:30:FF:F1:2B
            X509v3 Authority Key Identifier:
                keyid:69:95:5F:C7:3F:12:88:02:4E:7C:AF:0C:1D:82:5E:83:89:B6:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/69955FC73F1288024E7CAF0C1D825E8389B6B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/69955FC73F1288024E7CAF0C1D825E8389B6B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231342e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:46:58:6a:dc:56:3c:aa:29:20:07:48:20:b1:ca:4c:0c:dc:
         fe:23:24:a3:06:7c:52:8d:4c:4f:9e:14:9b:5b:42:10:91:1f:
         77:81:c8:da:30:97:47:b3:6f:ca:c4:b6:a2:41:13:37:8c:3b:
         35:9e:92:4a:e0:a1:14:95:56:f2:12:1a:aa:eb:d2:25:4d:1a:
         4b:4a:d8:f7:ae:c3:d0:cf:71:12:3b:15:01:ac:c8:79:f8:0d:
         46:a9:78:fc:21:d6:02:8d:57:e4:49:d9:35:0e:8a:8e:72:d3:
         04:74:58:9d:1a:e6:ab:8f:4e:3e:fd:28:d2:a8:be:0f:26:70:
         a5:22:39:95:df:86:a5:92:1b:7a:3f:52:9e:7f:31:09:4d:fa:
         d7:29:29:00:3e:81:3c:2b:af:44:c7:f2:23:2f:65:86:ec:3c:
         b8:1e:e5:ee:d0:46:85:81:74:dc:80:c8:59:31:89:1d:02:6f:
         c2:c8:eb:61:49:62:0e:4d:ed:8d:d0:22:90:22:52:70:70:ec:
         0f:ad:af:6c:33:22:7f:f8:2f:bd:6f:ff:6f:8b:86:26:21:cf:
         9d:f2:71:59:5e:a9:06:c5:18:bd:7a:20:fb:66:14:83:ba:d3:
         53:98:fd:6a:18:dc:6a:f1:5a:c2:2f:a2:2c:1e:ce:c7:de:2f:
         df:d0:49:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 21:07:27 2026 by rpki-client