Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa
File:                     3131332e35392e3233322e302f32322d3234203d3e203435323936.roa (raw, json)
Hash identifier:          xLjlTIflH6sc0X3Sbj2zzWpljnqqaMPM3eUOug3XrMk=
Subject key identifier:   8E:A6:A1:4B:72:5E:72:08:C1:49:B9:62:46:05:4C:60:2B:78:34:DC
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       3EA366590D5947D18FCCC2739BCF6BB2952D7703
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa
Signing time:             Sun 03 May 2026 03:01:30 +0000
ROA not before:           Sun 03 May 2026 02:56:30 +0000
ROA not after:            Sun 02 May 2027 03:01:30 +0000
asID:                     45296
IP address blocks:        113.59.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a3:66:59:0d:59:47:d1:8f:cc:c2:73:9b:cf:6b:b2:95:2d:77:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: May  3 02:56:30 2026 GMT
            Not After : May  2 03:01:30 2027 GMT
        Subject: CN=8EA6A14B725E7208C149B96246054C602B7834DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5f:4d:ba:81:ba:de:d9:ce:47:69:d7:2f:22:
                    b1:93:4b:0a:e6:fa:a1:06:1e:6e:0e:7c:e4:bb:f5:
                    87:5a:08:9a:1b:64:3e:de:79:f5:08:b1:0c:34:24:
                    a1:c6:44:9a:41:34:93:aa:30:af:81:b4:c3:2b:bd:
                    7c:7a:5f:f4:21:fa:5c:09:2e:1e:46:04:ad:43:f2:
                    de:d0:dd:c0:ee:fe:2f:4d:57:da:30:e8:ea:34:6d:
                    be:d6:3e:b8:a2:a0:9a:ff:5b:12:eb:64:53:a3:90:
                    b5:05:af:d4:e4:45:1d:41:73:18:d0:67:46:83:a8:
                    95:26:27:f2:1b:2e:e7:28:a5:41:1c:c7:ec:e6:06:
                    7d:7a:b7:e8:30:1e:9e:e8:08:3b:b0:51:16:f2:57:
                    67:f9:c1:7f:fe:52:78:0f:39:7d:b7:ff:7f:1b:c4:
                    bb:b4:4d:4d:01:3e:1f:73:b2:1d:04:f2:e4:2f:73:
                    28:6e:bc:2f:21:2e:71:ce:00:54:91:a9:5b:3d:d1:
                    af:6a:e7:30:39:ed:1e:f6:37:d6:76:f2:40:cb:df:
                    ca:70:29:6c:11:b6:21:39:29:38:13:6b:ce:5d:b5:
                    e3:30:b7:d4:d5:c7:78:90:9e:b5:0e:0d:ba:bb:5c:
                    5a:2c:f5:16:b4:09:48:fd:38:59:c5:69:27:16:c2:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:A1:4B:72:5E:72:08:C1:49:B9:62:46:05:4C:60:2B:78:34:DC
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32322d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:22:d6:d3:63:6d:15:4c:21:4d:12:bc:b6:f3:3c:06:9b:
         ef:a6:8f:f3:b8:67:b7:5f:cb:db:28:6e:a3:8b:01:c7:76:2c:
         0e:dd:9c:4b:8c:36:02:f9:ee:c5:b6:d5:9b:f6:d9:df:bf:03:
         d2:c4:c7:0c:e1:e6:eb:ad:0e:f6:fb:13:e5:e6:18:af:77:20:
         84:a4:24:95:9f:3d:5f:36:6a:3e:d7:3d:d8:fd:7e:05:97:17:
         5b:57:e6:6a:de:71:99:46:0f:f4:81:b8:47:ba:82:cc:12:67:
         5d:86:50:33:0e:29:b2:54:50:85:3d:9c:91:b1:a0:a7:66:f5:
         67:83:15:81:19:e3:d0:2b:d3:a8:73:79:89:d4:16:b4:de:f3:
         07:8f:f5:31:ee:44:24:bd:8c:c7:44:67:f4:8d:b0:76:51:64:
         6c:27:d2:09:aa:86:28:9c:2d:9d:34:de:31:db:e6:dd:0f:e2:
         48:0a:4f:39:f2:61:dd:66:f1:74:c6:76:dc:f9:a1:9d:6a:74:
         a1:21:be:81:db:69:4b:31:3c:60:c1:7f:9a:5e:31:38:32:08:
         e6:cd:aa:13:f5:bc:c2:97:37:92:de:1f:97:ba:fd:97:b0:97:
         44:f1:20:e4:47:a1:ab:06:71:70:94:40:40:58:9f:8c:8d:7b:
         64:a1:6e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:30 2026 by rpki-client