Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa
File:                     3131332e35392e3233342e302f32342d3234203d3e203435323936.roa (raw, json)
Hash identifier:          mNmdnMu5oYSkMpGBbuVRpLEZatNmYnyhrSrV5OzZZhM=
Subject key identifier:   9A:B8:86:A7:B2:A8:AF:9A:A8:DD:91:27:6D:14:4A:EC:6A:88:9D:58
Certificate issuer:       /CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
Certificate serial:       1D23D1C7B109C698FC6D450CF9B54736A9CF2BE6
Authority key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa
Signing time:             Mon 30 Mar 2026 09:00:00 +0000
ROA not before:           Mon 30 Mar 2026 08:55:00 +0000
ROA not after:            Mon 29 Mar 2027 09:00:00 +0000
asID:                     45296
IP address blocks:        113.59.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl
                          rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 15:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:23:d1:c7:b1:09:c6:98:fc:6d:45:0c:f9:b5:47:36:a9:cf:2b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7
        Validity
            Not Before: Mar 30 08:55:00 2026 GMT
            Not After : Mar 29 09:00:00 2027 GMT
        Subject: CN=9AB886A7B2A8AF9AA8DD91276D144AEC6A889D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:16:47:31:b7:6a:2d:13:e9:96:ec:08:e3:
                    28:57:d6:10:ba:36:1a:4a:49:37:9f:31:65:b3:14:
                    33:90:fb:bf:c3:98:53:45:24:3f:7b:16:60:d6:02:
                    4a:b2:de:21:e0:e9:84:a8:74:89:1e:a8:31:9f:31:
                    93:fb:91:d3:7c:93:cd:8d:c6:fe:dd:85:0a:08:41:
                    cd:46:0d:5b:08:2f:5c:d0:6f:b7:aa:b9:7a:a4:1e:
                    55:4a:cd:44:3d:46:75:78:11:be:8d:43:46:23:b6:
                    d2:b4:9e:18:b3:a0:b9:da:36:40:f7:ed:65:4a:33:
                    f0:4a:93:a2:ee:f7:98:75:67:ba:9a:a5:fb:bc:39:
                    ee:07:b9:aa:24:f5:c7:31:46:77:ef:db:30:09:11:
                    6b:b0:53:c3:09:ae:b9:90:36:5c:e2:b2:aa:bf:b8:
                    00:a2:13:b4:63:20:70:83:d6:2d:bd:bc:1b:9b:75:
                    41:a1:59:fb:cf:61:d9:de:da:4d:5d:c2:97:34:7a:
                    75:ba:4c:f6:57:73:5d:b8:c1:d5:b6:06:7e:1d:55:
                    08:41:a2:26:79:30:6d:13:4b:7c:dc:a7:a2:e0:4b:
                    21:96:bd:74:df:28:1d:a3:4e:5f:a4:93:f8:4d:7d:
                    1f:2e:12:18:19:25:92:6e:bb:a9:ed:8e:6f:2d:a4:
                    1f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B8:86:A7:B2:A8:AF:9A:A8:DD:91:27:6D:14:4A:EC:6A:88:9D:58
            X509v3 Authority Key Identifier:
                keyid:9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/3131332e35392e3233342e302f32342d3234203d3e203435323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.59.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:86:47:3d:e2:a2:f2:f5:93:27:b4:c4:c2:e6:98:74:fb:2c:
         d2:91:13:a0:1c:8d:57:a0:fb:f6:59:c3:7b:fe:53:e4:43:98:
         4c:fd:d2:4c:d9:15:e6:05:89:77:a9:6c:24:eb:d4:b2:e5:21:
         47:90:5b:fd:f2:2d:fc:0a:0c:e3:1d:04:1a:12:41:08:50:ab:
         25:29:47:ec:0f:1a:3b:49:13:d0:5c:68:9d:48:68:92:c2:09:
         56:60:bc:b8:18:cb:66:5a:ae:f1:e6:96:58:90:63:3e:9d:9d:
         20:09:6f:84:ce:8b:59:36:bf:b3:74:55:17:32:96:9d:13:cb:
         43:8b:68:69:4e:8f:71:c5:31:a4:a1:69:8b:73:10:1a:ba:a3:
         20:28:44:5a:4c:e2:03:d8:b8:54:2a:85:4c:45:bc:27:92:39:
         75:c3:ed:f1:f4:e2:97:ef:56:4d:8f:f9:55:57:91:c0:52:97:
         54:f0:64:fc:be:e0:2d:13:f5:60:c4:fa:ea:70:40:25:0e:dd:
         29:aa:3b:35:37:d4:af:42:35:f3:ba:72:f5:96:8a:1b:b7:6f:
         f5:9c:7f:cd:e5:57:01:c8:d0:df:ce:44:9d:5c:f9:72:f3:a6:
         f3:c1:b6:38:09:13:24:4e:71:e9:6f:8b:73:25:6a:dd:ab:ca:
         27:0f:ff:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:13:02 2026 by rpki-client