Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa
File:                     3130362e302e34382e302f32322d3234203d3e2039343232.roa (raw, json)
Hash identifier:          8uSlgnTbxGAzWNgbE1BKBFBhMHsG7F+ZnW0oGHCnk8w=
Subject key identifier:   B8:CF:A1:3D:8D:91:4A:31:73:91:9C:B2:29:E9:34:51:46:14:5B:84
Certificate issuer:       /CN=1661480FF274E46E5E74274531EDCB741CA1C734
Certificate serial:       2D78E687A9776229BE6AB503599EC2A2ADC2028F
Authority key identifier: 16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa
Signing time:             Sun 03 May 2026 02:16:23 +0000
ROA not before:           Sun 03 May 2026 02:11:23 +0000
ROA not after:            Sun 02 May 2027 02:16:23 +0000
asID:                     9422
IP address blocks:        106.0.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl
                          rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 16:31:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:e6:87:a9:77:62:29:be:6a:b5:03:59:9e:c2:a2:ad:c2:02:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1661480FF274E46E5E74274531EDCB741CA1C734
        Validity
            Not Before: May  3 02:11:23 2026 GMT
            Not After : May  2 02:16:23 2027 GMT
        Subject: CN=B8CFA13D8D914A3173919CB229E9345146145B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:bd:c3:70:11:46:89:7b:65:b8:36:70:d8:
                    e3:b4:c1:04:53:54:45:cd:0e:c7:06:79:e5:3d:0a:
                    68:5c:73:93:d7:ba:44:1d:97:ad:5c:4f:25:a7:a3:
                    4c:fd:5c:7b:df:60:1d:5b:c5:12:21:db:d3:ad:38:
                    ee:c2:08:d7:5c:2f:41:92:b3:4b:94:61:b6:38:50:
                    4c:d1:82:3f:dd:ad:55:df:59:9a:d5:05:cd:d1:c8:
                    82:ec:d7:e2:57:26:3f:84:57:e6:26:81:60:8a:4f:
                    e7:1c:18:6c:5f:fc:c6:fe:35:df:11:18:34:b4:70:
                    e6:26:80:c5:06:fe:fb:d2:5d:d8:91:3b:2c:91:1b:
                    5b:e2:ae:9d:83:20:22:fc:b0:50:ea:9a:ff:dc:95:
                    93:bf:6c:6f:df:c2:40:0d:52:a6:67:15:9c:a2:8f:
                    e4:e8:d1:94:28:f8:81:15:9e:69:91:69:9c:cf:9e:
                    02:54:c8:de:95:37:45:e8:8d:96:14:eb:54:cb:d3:
                    97:27:a8:50:46:db:87:76:7b:cd:bb:01:4c:c0:3d:
                    8c:c8:23:e6:cb:55:c6:54:2d:78:65:1a:57:8f:a6:
                    cc:1c:49:a3:5f:71:d2:bc:ea:67:84:21:08:09:c7:
                    19:45:92:d2:9f:aa:4e:b2:f8:b2:63:e9:d7:68:a9:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CF:A1:3D:8D:91:4A:31:73:91:9C:B2:29:E9:34:51:46:14:5B:84
            X509v3 Authority Key Identifier:
                keyid:16:61:48:0F:F2:74:E4:6E:5E:74:27:45:31:ED:CB:74:1C:A1:C7:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/1661480FF274E46E5E74274531EDCB741CA1C734.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1661480FF274E46E5E74274531EDCB741CA1C734.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130362e302e34382e302f32322d3234203d3e2039343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.0.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:04:f4:2a:d2:51:9b:b0:3f:f5:13:a2:4d:b3:f3:59:43:8b:
         08:a4:cd:f4:77:18:23:cb:f5:1b:3d:b6:ee:f9:f4:bd:27:ed:
         0f:a0:57:d6:95:2f:4c:2c:83:1a:4c:38:c7:17:45:33:03:0d:
         d7:ad:03:fe:2b:1f:35:0e:ae:5c:2b:af:57:a5:d0:7a:f6:4b:
         fb:f3:3f:38:2f:fb:61:f8:5e:32:34:3c:60:47:21:13:c3:f3:
         84:0a:32:b6:5e:ae:52:7d:6f:a1:29:cd:2b:46:a5:d6:e6:b9:
         32:a1:08:b4:fe:35:15:b7:fb:cb:a5:54:99:29:b7:6c:d5:65:
         05:1e:5d:85:41:25:9c:91:32:37:ca:0e:0c:5d:de:61:46:52:
         66:ed:6a:83:88:0f:53:82:88:d9:e5:38:b9:1a:b8:6e:81:10:
         ae:f1:34:8e:ef:4b:61:0c:4b:2d:50:62:7d:a0:07:16:99:e0:
         9c:76:68:97:44:61:28:42:64:02:f9:41:c5:1a:75:55:81:89:
         1e:03:0e:b6:f7:aa:4a:fe:84:39:5c:3a:c1:c7:bf:2d:0a:8a:
         8f:c8:a7:04:d1:57:15:5d:5c:06:9f:a4:fb:47:0d:df:33:3d:
         36:d7:df:2b:9a:5a:0b:68:0b:ac:79:4e:bc:9e:02:fd:ad:42:
         be:3e:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 20:05:40 2026 by rpki-client