Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233322e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          8q9FunYMiC4JUDNMrbMunq+kGGfV2MdAlwFbpWvTdhQ=
Subject key identifier:   0C:65:81:55:7F:16:84:9E:D0:47:84:F8:78:86:2F:B2:64:68:65:5F
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       4143DC332EB1FBF76DA4AC43E9CA77147A9BE72D
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa
Signing time:             Mon 30 Mar 2026 10:00:00 +0000
ROA not before:           Mon 30 Mar 2026 09:55:00 +0000
ROA not after:            Mon 29 Mar 2027 10:00:00 +0000
asID:                     45296
IP address blocks:        113.59.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:43:dc:33:2e:b1:fb:f7:6d:a4:ac:43:e9:ca:77:14:7a:9b:e7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Mar 30 09:55:00 2026 GMT
            Not After : Mar 29 10:00:00 2027 GMT
        Subject: CN=0C6581557F16849ED04784F878862FB26468655F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:4d:63:0b:8f:fa:87:96:bd:d1:4c:dc:02:
                    18:5c:50:db:5d:35:f1:6a:98:2a:47:f0:f2:a3:1a:
                    fb:52:f2:a8:06:ba:be:0f:2b:53:fa:f7:af:b5:fa:
                    85:1a:a7:ec:0e:90:30:f9:d9:c4:75:f0:35:01:b1:
                    73:11:97:84:fd:d7:00:4f:b9:f3:74:ba:66:38:a5:
                    aa:d7:2d:53:ed:18:51:f9:45:bb:b0:4e:87:4a:9b:
                    5d:1c:9f:b7:f1:28:c0:f8:5f:c9:fb:8d:69:c7:fc:
                    c8:1a:0b:ed:7a:1b:c7:6d:9f:2a:4a:b8:65:dd:2b:
                    b2:b2:7a:e1:46:df:73:fb:d6:4b:c9:b8:4a:f0:a5:
                    97:d0:f2:a3:0b:7d:27:c6:9f:3c:f1:aa:a0:03:a2:
                    13:10:c4:1a:9e:01:d0:a3:53:35:53:0a:d9:21:0d:
                    40:b5:f6:bc:d4:ba:9e:35:04:6a:65:ee:5d:8d:e8:
                    4f:88:d1:70:90:87:01:5e:05:b9:0a:4c:6f:50:94:
                    73:9d:80:53:17:60:ac:6c:bc:c1:e2:62:12:30:76:
                    b2:56:54:f1:fc:46:44:ba:9e:b7:bd:8a:19:de:e7:
                    a1:5c:4b:6f:77:62:2c:0e:c6:ab:a4:17:01:56:e7:
                    e3:af:fc:aa:7a:03:c2:09:f9:fe:e5:2c:b2:9e:50:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:65:81:55:7F:16:84:9E:D0:47:84:F8:78:86:2F:B2:64:68:65:5F
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233322e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:d8:bb:b8:9f:0a:88:cf:c9:6d:86:65:77:63:d8:58:17:
         6a:a1:7b:83:09:f7:5d:0d:d9:e3:07:c1:a9:9e:95:e2:1d:52:
         8e:c4:a2:5e:8d:3a:34:d9:2c:c6:12:bd:e7:91:12:93:c0:41:
         20:7c:6c:68:e3:b1:f4:51:2e:ba:e0:48:57:f1:f9:3f:3b:30:
         6d:ca:a7:33:61:4f:22:14:6e:ea:1f:9b:d5:e0:28:d2:fc:12:
         a7:d8:06:ca:47:72:45:c6:da:03:cb:14:72:30:88:26:cc:d6:
         b4:95:5c:53:57:9f:85:32:c8:1d:33:cb:ac:24:c4:12:1f:c2:
         ba:5f:36:49:d5:cd:60:41:d1:16:b9:65:b2:3c:11:d0:a7:23:
         e3:eb:0d:fa:9b:ea:fd:c9:39:59:c9:11:a7:f6:f5:4a:64:b9:
         2c:8e:a7:f9:cc:80:61:15:4b:c3:37:48:1b:6f:3d:05:23:30:
         06:4e:34:38:58:3c:c1:24:12:c2:34:b9:a8:60:f8:1e:1c:7e:
         6d:9d:3e:f2:ba:6e:a6:03:8d:62:19:1c:d7:4c:dd:15:a9:bb:
         4d:62:a6:a4:89:7d:97:a4:36:9f:b6:b8:79:ec:aa:16:9b:fe:
         26:5a:8c:b4:12:e8:24:39:85:46:e4:b6:ed:38:66:5d:af:aa:
         bf:bf:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:14:58 2026 by rpki-client