Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          WcflqBWiLgPAZ9Y0v7/46V6GV1t5xWnWDOoYXcwaOd8=
Subject key identifier:   52:1D:C1:7E:E9:0B:FB:D3:D5:CF:A1:01:B8:BF:AF:6D:1D:1D:3B:06
Certificate issuer:       /CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
Certificate serial:       2254BD2C14569795193E4917147270668D126283
Authority key identifier: 5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa
Signing time:             Sun 03 May 2026 03:01:29 +0000
ROA not before:           Sun 03 May 2026 02:56:29 +0000
ROA not after:            Sun 02 May 2027 03:01:29 +0000
asID:                     45296
IP address blocks:        113.59.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl
                          rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 22:33:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:54:bd:2c:14:56:97:95:19:3e:49:17:14:72:70:66:8d:12:62:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D778C6B5A83CFE34283BD9495BBB48BE3D59563
        Validity
            Not Before: May  3 02:56:29 2026 GMT
            Not After : May  2 03:01:29 2027 GMT
        Subject: CN=521DC17EE90BFBD3D5CFA101B8BFAF6D1D1D3B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:82:80:21:5c:61:8e:e4:95:18:b6:ed:19:
                    c3:3b:bf:f6:46:3e:21:e0:3a:6c:3c:15:17:3d:23:
                    b9:f8:33:79:91:1a:60:31:88:9f:7f:99:40:c4:1d:
                    19:42:65:15:95:c3:e5:c6:7b:47:7d:2f:58:c8:c7:
                    12:1f:af:22:63:35:0f:ab:ed:98:6b:e8:e6:c6:fb:
                    d4:96:63:87:38:c8:65:df:4f:a1:cd:d1:03:9d:f3:
                    46:8b:b9:b5:f0:72:be:e1:90:02:cc:e9:bc:77:56:
                    a9:ca:77:ba:8d:76:e0:ba:ba:d5:5e:c8:6f:a1:af:
                    c9:c4:69:6b:83:90:1a:ed:7c:cd:5f:8f:d1:35:95:
                    07:03:0d:b8:05:7e:28:9b:ad:62:57:e7:ce:f1:f5:
                    6f:c6:c7:93:f4:44:6a:07:8a:a9:fc:7f:c3:d6:c7:
                    9e:94:81:64:be:9c:12:f0:db:0d:35:5d:31:b4:68:
                    ff:cb:2f:b1:04:8f:f5:33:3f:8f:9b:e1:57:58:59:
                    fb:7e:33:4a:fe:94:81:1e:33:01:db:fa:6b:77:91:
                    b8:91:11:62:64:9b:65:8c:0b:15:36:1e:81:31:52:
                    e9:12:ea:29:ee:23:84:62:e4:a5:7f:eb:8f:9c:78:
                    5d:07:f1:8f:4b:64:67:4c:4c:84:97:5f:b5:7b:76:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:C1:7E:E9:0B:FB:D3:D5:CF:A1:01:B8:BF:AF:6D:1D:1D:3B:06
            X509v3 Authority Key Identifier:
                keyid:5D:77:8C:6B:5A:83:CF:E3:42:83:BD:94:95:BB:B4:8B:E3:D5:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5D778C6B5A83CFE34283BD9495BBB48BE3D59563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:30:6e:1f:4d:f7:02:18:8c:df:56:aa:03:ef:57:b6:a4:1e:
         5e:04:65:92:4a:67:ec:ba:dc:14:93:65:c8:54:d2:c1:2f:a0:
         ea:cc:00:ef:29:f3:28:3d:28:df:4d:cf:cf:df:1d:0f:6d:4b:
         32:d9:59:5f:c9:8d:7d:2f:6c:45:25:fc:da:8c:11:d5:cf:d1:
         d4:2b:3d:72:b7:6c:b3:01:b5:c0:aa:50:d6:bd:9b:4e:3a:ef:
         32:e1:59:88:e4:b1:62:e8:2a:ea:f7:09:21:64:c8:7e:61:91:
         c9:3f:74:af:27:a0:0f:8a:4a:c8:57:ab:c6:29:a3:96:a6:ed:
         11:38:6b:32:e0:31:dc:b6:26:37:b4:b4:1d:b4:00:60:7c:87:
         54:f9:6c:9f:3e:c0:d8:b0:28:7d:87:d6:16:d8:10:ad:7a:76:
         8d:be:61:0a:14:da:77:db:73:c7:76:7e:7f:d3:bb:5c:65:70:
         f7:90:98:77:01:60:7e:f1:5e:1b:ff:c1:17:f4:22:e6:06:96:
         d8:f2:11:54:54:19:30:3d:74:5b:35:d8:03:55:f6:8b:e7:4c:
         e4:57:d9:60:01:cb:9d:5f:59:7a:26:b4:42:ce:ff:ef:f6:0e:
         ed:f3:64:29:ef:fa:48:0b:41:4b:df:4b:8a:14:a8:57:b2:06:
         9e:0c:82:36
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIlS9LBRWl5UZPkkXFHJwZo0SYoMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3NzhDNkI1QTgzQ0ZFMzQyODNCRDk0OTVCQkI0OEJF
M0Q1OTU2MzAeFw0yNjA1MDMwMjU2MjlaFw0yNzA1MDIwMzAxMjlaMDMxMTAvBgNV
BAMTKDUyMURDMTdFRTkwQkZCRDNENUNGQTEwMUI4QkZBRjZEMUQxRDNCMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I4KAIVxhjuSVGLbtGcM7v/ZG
PiHgOmw8FRc9I7n4M3mRGmAxiJ9/mUDEHRlCZRWVw+XGe0d9L1jIxxIfryJjNQ+r
7Zhr6ObG+9SWY4c4yGXfT6HN0QOd80aLubXwcr7hkALM6bx3VqnKd7qNduC6utVe
yG+hr8nEaWuDkBrtfM1fj9E1lQcDDbgFfiibrWJX587x9W/Gx5P0RGoHiqn8f8PW
x56UgWS+nBLw2w01XTG0aP/LL7EEj/UzP4+b4VdYWft+M0r+lIEeMwHb+mt3kbiR
EWJkm2WMCxU2HoExUukS6inuI4Ri5KV/64+ceF0H8Y9LZGdMTISXX7V7dpLDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUh3BfukL+9PVz6EBuL+vbR0dOwYwHwYDVR0j
BBgwFoAUXXeMa1qDz+NCg72Ulbu0i+PVlWMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YjYwNjcxOGYtZjRjNi00Nzc1LTg5NTctOTlkMmJkNjY2MzYzLzAvNUQ3NzhDNkI1
QTgzQ0ZFMzQyODNCRDk0OTVCQkI0OEJFM0Q1OTU2My5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS81RDc3OEM2QjVBODNDRkUzNDI4M0JEOTQ5NUJCQjQ4QkUzRDU5
NTYzLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvL2I2MDY3MThmLWY0YzYtNDc3NS04
OTU3LTk5ZDJiZDY2NjM2My8wLzMxMzEzMzJlMzUzOTJlMzIzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMyMzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHE76jANBgkqhkiG
9w0BAQsFAAOCAQEAQzBuH033AhiM31aqA+9XtqQeXgRlkkpn7LrcFJNlyFTSwS+g
6swA7ynzKD0o303Pz98dD21LMtlZX8mNfS9sRSX82owR1c/R1Cs9crdsswG1wKpQ
1r2bTjrvMuFZiOSxYugq6vcJIWTIfmGRyT90ryegD4pKyFerximjlqbtEThrMuAx
3LYmN7S0HbQAYHyHVPlsnz7A2LAofYfWFtgQrXp2jb5hChTad9tzx3Z+f9O7XGVw
95CYdwFgfvFeG//BF/Qi5gaW2PIRVFQZMD10WzXYA1X2i+dM5FfZYAHLnV9Zeia0
Qs7/7/YO7fNkKe/6SAtBS99LihSoV7IGngyCNg==
-----END CERTIFICATE-----
Generated at Thu May 7 03:12:22 2026 by rpki-client