Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          YZJGRKgbn++QjdW/BYBy5zi4Iey6oxaZnIjLCUOoVQY=
Subject key identifier:   2E:4C:2C:EE:13:0C:FD:9A:D3:DD:44:84:1F:D0:F2:62:F1:59:D5:2E
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       18CBEBC2C4DFD289BABAF329B0FB9E604F5D8948
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa
Signing time:             Sun 03 May 2026 03:01:29 +0000
ROA not before:           Sun 03 May 2026 02:56:29 +0000
ROA not after:            Sun 02 May 2027 03:01:29 +0000
asID:                     45296
IP address blocks:        113.59.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:eb:c2:c4:df:d2:89:ba:ba:f3:29:b0:fb:9e:60:4f:5d:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: May  3 02:56:29 2026 GMT
            Not After : May  2 03:01:29 2027 GMT
        Subject: CN=2E4C2CEE130CFD9AD3DD44841FD0F262F159D52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:be:10:d8:a3:aa:54:22:6d:97:34:dc:6d:
                    24:ea:af:31:7d:23:35:7f:c2:eb:bf:e6:f6:91:81:
                    be:1b:af:ac:a1:42:1b:46:d3:66:c7:f3:ee:00:9b:
                    b5:07:da:39:0e:a0:95:e4:4e:4a:7b:3b:9f:fa:80:
                    c1:e2:81:77:77:d4:53:b2:58:37:e5:97:89:2b:4d:
                    c3:2d:f7:9e:07:09:08:03:8e:66:49:9b:81:05:26:
                    3c:dd:28:eb:b9:31:11:a1:f1:69:cf:4a:82:fc:fc:
                    16:5a:e8:d1:a2:d1:aa:65:28:c3:29:09:e8:a7:1b:
                    61:77:3e:7a:cf:53:1c:2c:27:2b:71:db:eb:36:20:
                    42:36:1a:c0:5b:38:30:a9:20:96:3d:0b:45:95:69:
                    38:06:a4:bd:e6:81:dd:fd:49:ae:37:0d:31:aa:c6:
                    0e:b2:67:20:21:ad:17:b7:c1:b4:c0:aa:e7:30:90:
                    37:c1:0d:20:8e:04:4d:dc:7b:2d:d2:ff:4d:43:2e:
                    45:5f:f2:3d:4b:b2:a5:27:d0:f2:45:16:a6:af:bb:
                    3e:3b:eb:ef:21:0a:f6:ac:6d:41:da:be:31:b7:12:
                    c7:5f:c8:c6:7b:04:e4:2e:c1:72:cf:29:f2:5e:16:
                    f7:a5:a3:c2:21:20:2d:d0:31:3f:41:76:be:a0:75:
                    6d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4C:2C:EE:13:0C:FD:9A:D3:DD:44:84:1F:D0:F2:62:F1:59:D5:2E
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:63:ea:f3:97:b4:2c:c9:24:f9:4c:59:ad:dd:10:f1:5e:
         f5:3a:1d:47:68:e9:2c:65:d8:1d:85:5f:d8:09:14:99:25:e2:
         32:74:a0:97:48:35:0d:31:5b:3a:a9:c4:4f:d2:71:e0:61:83:
         df:5b:5f:5f:e0:25:ee:d1:22:64:3d:d3:44:f9:cd:ec:6e:62:
         fe:86:d8:82:ad:f3:f4:2a:8f:ad:2f:46:6d:7c:c5:ab:ec:c9:
         be:19:f8:5d:53:bc:a4:1f:bd:c7:55:74:dd:bf:06:37:23:f1:
         b8:7d:1c:3c:70:7b:90:49:44:d6:b3:52:b9:23:d0:5c:1c:4d:
         c2:94:f4:cc:1c:53:0a:24:bc:97:d0:b7:80:25:9a:3d:ef:90:
         5a:62:63:2c:25:b8:bb:42:aa:a5:24:b1:51:50:56:f4:53:ba:
         13:26:08:7a:10:08:3c:15:70:b2:ba:54:db:a9:88:47:15:fe:
         c2:1d:27:b8:d9:7a:5a:29:25:79:7a:23:c1:6d:a3:04:6d:12:
         96:57:ee:a4:b9:9d:be:33:c6:ee:ad:be:89:87:75:e1:d6:73:
         d5:34:54:3b:05:fa:3b:06:f8:e5:7c:31:a9:e1:e7:36:89:8a:
         10:b7:91:c6:d8:54:33:c5:1c:a0:b9:9e:58:cf:23:bc:cf:93:
         00:92:2a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:31 2026 by rpki-client