Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
File:                     3131362e302e302e302f32312d3234203d3e203539313339.roa (raw, json)
Hash identifier:          TIMEywbXIwauNjCbGb/ORw/d4bkyMc3kBF73pbq/vuI=
Subject key identifier:   92:7C:24:6D:7F:E3:8D:4C:01:1F:72:0E:07:46:BD:B4:11:9F:C0:66
Certificate issuer:       /CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Certificate serial:       415C9A6A752440A08381B9BB5651606D70D0CB1C
Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa
Signing time:             Thu 02 Apr 2026 06:02:43 +0000
ROA not before:           Thu 02 Apr 2026 05:57:43 +0000
ROA not after:            Thu 01 Apr 2027 06:02:43 +0000
asID:                     59139
IP address blocks:        116.0.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl
                          rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Apr 2026 13:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:5c:9a:6a:75:24:40:a0:83:81:b9:bb:56:51:60:6d:70:d0:cb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359
        Validity
            Not Before: Apr  2 05:57:43 2026 GMT
            Not After : Apr  1 06:02:43 2027 GMT
        Subject: CN=927C246D7FE38D4C011F720E0746BDB4119FC066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2d:c7:74:34:f5:ea:df:3c:2f:fa:32:32:fb:
                    01:d3:76:ab:97:43:1c:62:f9:cf:1d:39:44:ce:41:
                    28:a2:dd:19:1b:90:99:41:8b:bc:2d:20:fb:a2:fe:
                    dc:d8:38:8b:03:ab:fb:77:cf:42:b2:06:f9:5c:1e:
                    ab:c1:a6:fd:60:4d:50:2d:2b:09:69:ea:0b:57:d2:
                    17:73:81:f4:6f:11:44:15:2f:57:08:51:a7:2c:ab:
                    a5:77:8b:35:6c:8e:82:c7:53:00:d4:8d:f9:e4:56:
                    fc:8c:a9:61:b5:c2:93:f8:ec:32:4b:81:5f:9b:f4:
                    35:4b:99:bc:cf:e2:58:9e:2c:4e:ea:7e:ae:99:4a:
                    85:53:cb:13:c2:9a:d7:ec:93:15:1b:14:bb:b8:cb:
                    c9:c1:4e:11:86:1c:80:cf:7e:54:eb:32:36:c9:28:
                    84:c0:bf:47:f4:df:83:a5:cf:0d:b8:1c:52:f6:65:
                    2a:20:4e:d8:34:66:eb:90:65:f7:ef:6e:be:5b:c3:
                    2b:c4:50:a0:cc:e2:75:76:73:77:76:d0:9a:a8:42:
                    92:17:95:05:6d:d1:79:1c:7f:e1:0d:df:83:b8:2e:
                    1f:25:4a:7d:d8:aa:93:d9:72:49:18:19:2d:08:6a:
                    a0:fc:4a:b2:24:5f:73:30:17:77:16:27:23:c9:8f:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:24:6D:7F:E3:8D:4C:01:1F:72:0E:07:46:BD:B4:11:9F:C0:66
            X509v3 Authority Key Identifier:
                keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3131362e302e302e302f32312d3234203d3e203539313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.0.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:62:e3:08:7f:1f:70:f6:68:8f:bd:b5:58:c2:62:8d:2a:42:
         4a:5d:94:45:64:f6:f5:6f:37:4f:cb:9d:20:b9:ec:51:bd:b9:
         a0:8b:3f:80:f1:6b:54:d8:23:18:70:d3:83:91:73:e3:ed:3f:
         ce:7f:f7:96:ba:5a:c4:26:21:12:ee:e2:5e:b6:1d:c3:f4:1d:
         c0:b8:9a:af:a6:a7:42:92:fb:c8:95:a5:51:76:db:6b:cd:a7:
         bf:e9:78:28:3d:ea:9f:d5:cd:f6:e5:75:87:b7:b1:84:59:ef:
         99:d7:59:2a:7c:d5:6a:18:58:96:42:a2:51:1b:2f:00:d1:94:
         4c:00:a4:8a:1b:64:d3:4e:7f:64:be:2a:78:58:84:58:85:ee:
         b3:98:93:6d:5c:36:ca:3b:26:04:ad:96:94:ea:d7:15:cb:98:
         10:ea:40:3a:12:1c:7d:2f:71:81:ae:d4:a1:97:c9:f4:11:50:
         84:b7:88:0e:55:2c:3a:76:ef:2d:e4:e0:68:69:5d:ba:54:97:
         fa:8d:5a:c2:2f:5d:04:2a:3c:82:e5:73:f4:aa:f6:97:e2:09:
         2a:85:77:53:a5:0e:ee:50:87:29:13:9a:65:06:71:42:ca:ac:
         23:0d:9c:78:1a:cc:79:5a:0e:2b:19:a0:6a:73:74:6a:01:f6:
         ce:4f:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:49:37 2026 by rpki-client