Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          M9GmOl7DSf3JgqEI4OyXiGmMeRs5OMlGvZJmwiVp3yA=
Subject key identifier:   B4:36:7E:50:CE:BC:30:11:44:88:0D:63:B7:43:E7:43:AF:FA:C3:E6
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       0A1894009F69C27DD22D5F63FB3AE68F5F4161CC
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
Signing time:             Sun 03 May 2026 03:01:27 +0000
ROA not before:           Sun 03 May 2026 02:56:27 +0000
ROA not after:            Sun 02 May 2027 03:01:27 +0000
asID:                     45296
IP address blocks:        113.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:18:94:00:9f:69:c2:7d:d2:2d:5f:63:fb:3a:e6:8f:5f:41:61:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: May  3 02:56:27 2026 GMT
            Not After : May  2 03:01:27 2027 GMT
        Subject: CN=B4367E50CEBC301144880D63B743E743AFFAC3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:de:d2:ce:8a:6e:eb:a4:a3:d1:81:af:c6:
                    83:d3:57:8f:61:89:67:21:fe:cd:cb:9b:0d:25:bf:
                    53:02:ac:66:33:40:60:86:2e:22:96:07:32:b0:1e:
                    03:14:e7:9b:76:6c:3e:f0:ec:1c:e1:35:c4:bd:f3:
                    74:54:fd:bc:2a:bc:21:e7:e5:ed:ef:b1:f3:88:f6:
                    8e:81:2c:6c:68:ca:a6:e7:41:ff:33:5f:94:18:0a:
                    bf:d9:10:15:e6:e4:0b:ef:d9:92:b2:ac:b4:1a:41:
                    7a:7c:62:ad:01:fc:72:eb:59:bd:e3:dc:3e:a4:8a:
                    39:66:0f:43:40:43:ce:23:e8:ab:23:56:2e:a0:c1:
                    6d:f2:d0:98:52:83:2e:53:6b:54:b5:c2:27:8e:6e:
                    83:f2:dc:46:9b:9c:e5:45:34:ce:c4:f2:21:31:68:
                    e9:85:dd:b2:01:da:e0:17:42:39:4e:3b:39:97:64:
                    2e:da:ba:a8:b5:58:3f:64:12:0a:b0:f6:79:34:14:
                    0e:68:2e:89:43:14:14:97:7b:f9:53:61:83:fe:f6:
                    b3:98:e1:aa:47:10:a7:fd:fb:b8:94:22:25:f4:93:
                    bc:75:61:20:4e:bb:c9:fe:c4:2c:b3:d5:a7:6a:cc:
                    b1:05:9a:dc:a8:0a:27:0d:9e:a4:18:de:b4:70:95:
                    62:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:36:7E:50:CE:BC:30:11:44:88:0D:63:B7:43:E7:43:AF:FA:C3:E6
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:84:e9:b7:3e:96:54:5e:bd:8d:77:97:0b:9d:98:26:f7:43:
         c7:79:2c:1e:a9:38:87:8a:0a:5d:95:b5:3b:53:cc:24:0f:a5:
         ea:96:6e:0c:b9:00:43:58:a7:0b:f5:57:d8:b1:61:2e:25:b7:
         6a:66:35:4f:21:b7:fa:da:07:eb:cb:2b:84:43:58:1d:25:10:
         5c:10:f5:87:d7:3c:42:a0:20:9b:bd:e8:4b:35:19:a4:ca:89:
         8d:06:08:89:4e:a2:f7:a5:8a:6e:c3:94:f6:43:1b:31:32:01:
         c0:87:7c:1e:59:bb:b0:08:5b:31:29:e6:22:8d:e4:f9:8a:7b:
         b5:73:c1:0a:6c:d6:59:04:d9:40:51:35:72:01:9c:5d:b5:6c:
         1c:f4:9d:81:f5:43:fc:81:68:c1:61:d6:3f:c5:e0:30:be:c6:
         5e:68:6d:38:6d:06:e1:36:db:79:d5:e7:f5:77:b7:a4:0a:e4:
         cd:f8:5d:6e:4e:81:8f:40:94:15:e5:25:0d:7b:f7:d9:ff:8f:
         c2:9a:ac:8a:47:30:7d:9c:81:7b:d2:ba:4c:e0:6f:27:40:c7:
         5c:28:62:fb:2e:27:04:a5:5c:52:f1:03:3f:60:4b:21:39:70:
         39:01:f8:2d:84:9a:c8:82:7b:e8:ed:c4:de:c8:bb:c8:15:58:
         d1:b1:7f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:30 2026 by rpki-client