Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa
File:                     3131332e35392e3233322e302f32332d3234203d3e203435323936.roa (raw, json)
Hash identifier:          vBsCZpSLsG8TyyHzBprL3UJo7rlFoPAmHEwc5gmedk8=
Subject key identifier:   43:71:DB:99:3A:D6:9D:7A:B1:65:EE:0C:DA:70:0E:29:45:20:E4:EB
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       3AF81D530AF06EFD2DD372554DB51AD42498EA47
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa
Signing time:             Mon 30 Mar 2026 10:00:00 +0000
ROA not before:           Mon 30 Mar 2026 09:55:00 +0000
ROA not after:            Mon 29 Mar 2027 10:00:00 +0000
asID:                     45296
IP address blocks:        113.59.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f8:1d:53:0a:f0:6e:fd:2d:d3:72:55:4d:b5:1a:d4:24:98:ea:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Mar 30 09:55:00 2026 GMT
            Not After : Mar 29 10:00:00 2027 GMT
        Subject: CN=4371DB993AD69D7AB165EE0CDA700E294520E4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:00:71:06:98:31:45:a9:0e:ce:21:48:17:6e:
                    65:ca:54:56:dd:64:da:49:df:e0:aa:4e:ce:e0:af:
                    7a:19:47:41:ba:29:a0:a1:34:9c:a3:aa:f6:f6:6d:
                    37:ad:5c:ae:40:de:9f:67:0f:be:92:df:ea:67:56:
                    dd:84:64:bb:42:fb:22:e2:d7:cb:17:06:62:59:4a:
                    71:8d:71:3b:52:c0:99:a6:15:33:c8:db:31:ae:d2:
                    00:5c:d6:9e:19:58:56:ae:f3:f3:4f:05:e6:fe:5d:
                    20:04:c7:d3:79:15:18:2b:74:3c:b1:0c:fd:3d:bd:
                    2c:05:15:a4:4e:2a:1f:27:f4:9b:35:22:9b:bb:c4:
                    04:48:1e:33:88:86:4b:4a:e1:2a:24:72:ad:9a:69:
                    0b:00:17:95:d5:67:2e:a8:9c:d2:36:29:76:cd:60:
                    ca:da:1a:70:3a:1d:df:cb:a5:e8:8d:46:10:61:4e:
                    f1:91:3a:fa:c5:5b:8f:6f:0f:d4:89:68:9c:74:fc:
                    7a:a1:65:af:85:a3:d7:37:bb:cd:f6:a2:2c:a0:e0:
                    2f:e5:dd:6e:f9:f1:87:73:a0:e5:1e:1a:53:9f:dd:
                    5b:99:54:c8:42:84:b0:b3:00:20:e1:ed:0a:a6:34:
                    31:6c:b3:57:33:90:8d:a4:84:95:ff:5a:2f:a9:a4:
                    f2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:DB:99:3A:D6:9D:7A:B1:65:EE:0C:DA:70:0E:29:45:20:E4:EB
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32332d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:4b:bb:17:cb:fb:e9:1c:07:ba:c3:5b:a3:ca:a6:1e:d5:
         59:eb:83:d9:a0:89:66:37:30:2a:e1:a1:40:1c:98:84:5e:11:
         f7:33:a6:d6:80:6d:03:ba:be:d1:cc:ce:2b:6c:e8:b3:23:83:
         a0:4a:ab:2f:58:c3:e8:50:72:5a:2b:98:24:64:ed:60:95:45:
         2e:ae:25:a7:e6:78:fe:87:8c:1f:c0:fb:de:c0:10:32:76:20:
         df:1e:8e:0a:da:33:0c:be:ec:dd:14:9e:14:e0:cd:4b:a8:08:
         4a:50:a5:0e:1e:b3:8f:d9:19:a3:a4:e1:6d:e3:b9:70:ca:fe:
         f3:bc:89:5c:d1:2d:5f:ea:5d:43:00:63:f5:28:ff:f3:ae:8c:
         3b:e7:6f:79:42:b7:70:c2:2e:dd:ed:a8:ff:32:ef:9d:f3:dc:
         c5:51:a8:f1:1a:c5:c1:61:17:4f:52:39:bc:f4:f5:ef:4a:f2:
         4c:3c:b8:d4:59:b5:c6:24:cf:f7:77:20:51:e8:d8:bd:cf:a9:
         20:ff:b3:08:e4:4f:41:f8:0b:74:94:67:65:ec:91:2a:f6:46:
         01:0a:74:1b:4f:82:e6:47:a8:59:7b:ef:71:c8:48:21:f4:46:
         f2:72:c8:29:8f:36:d2:a2:09:fc:d5:bf:d9:c6:1b:d1:eb:57:
         ad:0a:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:05 2026 by rpki-client