Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233332e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          hjm0LUhYDn2I8CxksukPnoNnaeAZf+/VHTSQqPF6sIo=
Subject key identifier:   D2:75:3B:27:50:02:2A:E4:40:2C:83:8C:2A:FC:85:26:2B:3C:69:BE
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       709D55AB67CC40E0EB7DA62197C0E450E53BAA39
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa
Signing time:             Mon 30 Mar 2026 09:00:00 +0000
ROA not before:           Mon 30 Mar 2026 08:55:00 +0000
ROA not after:            Mon 29 Mar 2027 09:00:00 +0000
asID:                     45296
IP address blocks:        113.59.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9d:55:ab:67:cc:40:e0:eb:7d:a6:21:97:c0:e4:50:e5:3b:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Mar 30 08:55:00 2026 GMT
            Not After : Mar 29 09:00:00 2027 GMT
        Subject: CN=D2753B2750022AE4402C838C2AFC85262B3C69BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:5c:d3:4d:4e:1e:a0:fb:7c:25:77:08:2b:
                    7d:fe:c9:37:0c:88:94:02:f5:a9:b7:cf:3a:42:20:
                    6d:30:c3:bd:f3:b2:d0:1e:9e:4d:22:ad:b2:c2:f0:
                    4b:fc:f6:8f:9c:cf:ce:65:ff:b5:62:f2:5e:c6:90:
                    f8:fd:bb:49:bc:ae:ba:73:61:29:d8:7a:43:3a:77:
                    30:e1:07:ab:41:b3:58:49:36:b7:60:e2:9f:0b:b1:
                    11:bc:4b:ca:32:04:a6:c8:b5:53:bb:a4:b4:ca:bc:
                    55:fa:3e:dd:74:41:05:61:f5:81:0a:00:6a:0f:81:
                    0f:d6:a7:a9:e1:37:8d:78:54:3f:6e:0e:99:81:13:
                    3d:99:00:92:6a:57:a7:ad:2f:99:e5:d7:f2:48:3b:
                    75:58:36:be:dd:a9:ac:5f:bb:bf:d7:14:6a:2f:81:
                    13:f4:08:cc:f5:21:e6:e8:c0:d3:df:f0:64:3d:88:
                    5b:d4:f5:88:46:11:1d:0d:34:26:e5:08:43:18:fd:
                    c4:a2:1e:cf:d7:38:58:46:d8:26:b5:e3:6f:fa:b1:
                    6e:dd:a1:59:e8:9a:c1:04:c0:b0:7c:96:62:7a:f1:
                    7b:3d:c7:40:9c:f6:88:bc:d5:35:8b:99:00:61:b8:
                    53:2e:be:e4:7b:21:08:c0:49:6e:32:d4:f7:77:81:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:75:3B:27:50:02:2A:E4:40:2C:83:8C:2A:FC:85:26:2B:3C:69:BE
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233332e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:cf:26:75:55:1a:f9:38:95:bc:b7:a5:6e:2c:4e:45:68:c0:
         92:77:76:b3:a8:da:b6:b9:6c:a4:c6:e7:e3:fa:b0:0b:3d:f6:
         26:1b:2f:2d:a5:53:6d:bb:c1:e0:20:69:ec:e6:f9:91:94:be:
         1b:9a:6e:8c:24:7e:e1:6d:b0:05:35:6f:37:21:74:c3:15:85:
         7e:94:c0:6f:2e:fc:e2:1c:56:77:37:6d:04:66:4b:c9:d2:3e:
         80:7d:e3:ef:21:f9:bf:fe:44:12:07:de:da:34:da:1a:19:65:
         e8:15:f7:cb:9c:b3:5f:bd:a6:6a:13:10:0d:37:55:7a:72:80:
         a2:82:7b:a3:48:8c:29:8c:e3:78:2f:8c:96:ac:91:5e:a7:12:
         d0:53:71:e6:64:25:da:4b:9f:4a:ec:39:e8:46:8a:7e:ca:54:
         ca:2c:5c:3b:e4:4c:b6:5e:e4:56:d1:61:1c:84:16:77:44:04:
         96:5c:c8:53:04:1f:14:56:bf:6a:e2:59:4f:0a:83:0f:1d:59:
         ec:c3:d0:52:4f:85:5e:e0:b7:ac:79:98:66:70:08:76:bf:53:
         3b:f6:94:34:36:cf:f3:42:46:47:fe:08:58:4e:8b:c3:4a:47:
         94:84:dd:02:99:d4:1e:44:d4:0d:34:96:42:86:f1:51:91:57:
         fd:9f:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:15:22 2026 by rpki-client