Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/IDNIC/2/3137392e36352e3139322e302f31382d3234203d3e203435373030.roa
File:                     3137392e36352e3139322e302f31382d3234203d3e203435373030.roa (raw, json)
Hash identifier:          vQ5Ek57nvyv8QSxJkPzmegP9NNy53tUJ+4K3JUiqzFY=
Subject key identifier:   9A:27:FF:FD:E4:99:EE:D6:7F:E4:25:39:FF:A9:2F:AB:09:9E:F5:A6
Certificate issuer:       /CN=A91862140000/serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
Certificate serial:       33122E0ECED81A9B1F700F5C836FE4DE50A6C6A0
Authority key identifier: 06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/IDNIC/2/3137392e36352e3139322e302f31382d3234203d3e203435373030.roa
Signing time:             Thu 06 Aug 2026 03:15:38 +0000
ROA not before:           Thu 06 Aug 2026 03:10:38 +0000
ROA not after:            Thu 05 Aug 2027 03:15:38 +0000
asID:                     45700
IP address blocks:        179.65.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 03 Sep 2026 22:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:12:2e:0e:ce:d8:1a:9b:1f:70:0f:5c:83:6f:e4:de:50:a6:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000, serialNumber=06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB
        Validity
            Not Before: Aug  6 03:10:38 2026 GMT
            Not After : Aug  5 03:15:38 2027 GMT
        Subject: CN=9A27FFFDE499EED67FE42539FFA92FAB099EF5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:54:eb:f3:6b:0b:5d:b0:c6:30:b7:be:04:
                    9b:55:91:18:9c:95:39:fb:63:95:2c:b7:02:a6:20:
                    2c:4e:a5:a3:6f:7a:a7:aa:12:13:8d:6b:f9:bf:42:
                    4c:8d:35:01:75:6f:0a:a5:f4:38:e5:47:f8:51:32:
                    45:23:9e:81:48:d5:d3:b8:55:66:ce:91:bc:15:ed:
                    0e:ac:80:bb:c3:9e:8e:cf:24:9c:fc:61:f9:c3:46:
                    c3:d1:03:9e:92:fc:6c:1d:3a:42:5e:82:ac:df:e3:
                    b5:ac:05:d7:e5:61:b1:1e:bd:e3:f4:1c:15:98:c6:
                    c9:a3:c0:c4:40:9e:d7:4d:48:c0:24:6b:7f:c5:22:
                    1a:3d:e0:00:f4:ec:b1:61:94:7a:4e:14:b8:9f:a2:
                    d6:bd:45:4a:98:c6:79:3a:56:b1:42:3c:46:16:0b:
                    a3:25:0b:f1:28:e7:e4:5b:76:b9:91:32:f8:86:5f:
                    47:de:0f:73:68:28:2f:56:9c:1d:75:76:8f:d5:cb:
                    a2:8c:2c:f9:dd:38:3c:a9:a8:02:35:43:20:00:fe:
                    68:20:b6:b5:15:40:67:7b:2a:eb:b1:48:81:69:67:
                    c0:db:06:00:59:6d:65:7e:7c:a8:06:ec:99:5f:12:
                    26:cb:62:a1:55:31:0d:9e:8b:1f:19:35:a8:a4:61:
                    90:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:FF:FD:E4:99:EE:D6:7F:E4:25:39:FF:A9:2F:AB:09:9E:F5:A6
            X509v3 Authority Key Identifier:
                keyid:06:F4:B2:DB:84:B3:87:02:B5:F3:A9:2A:78:92:55:D9:CF:EF:3E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/06F4B2DB84B38702B5F3A92A789255D9CFEF3EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/BvSy24SzhwK186kqeJJV2c_vPus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/2/3137392e36352e3139322e302f31382d3234203d3e203435373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.65.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:eb:08:46:01:48:0b:3f:5d:40:42:1f:81:53:0d:c5:fc:2c:
         91:45:ce:f8:bb:fa:91:93:7c:cc:4d:1a:d0:89:94:6b:bf:d8:
         3f:78:5d:f9:dc:fe:de:6b:58:d2:7c:0d:da:76:5a:05:d2:16:
         d2:14:02:36:12:8f:4a:50:cb:0c:67:94:ea:93:7a:ff:d6:fd:
         cc:43:dd:6f:35:55:0b:d6:dc:9d:02:d5:68:55:8c:b4:a7:bf:
         47:0c:2c:43:0e:27:f1:6c:52:01:39:fb:fa:74:ad:0f:71:c2:
         49:c2:72:8e:14:a0:6e:ad:76:75:78:0d:a3:ce:d3:3c:b4:a0:
         07:3d:d6:92:f3:64:e3:36:8a:c4:94:77:1c:14:75:b4:29:59:
         63:8d:19:fe:36:69:9b:95:e4:2b:64:90:84:91:28:0d:15:1f:
         de:40:46:2f:f0:cb:fe:af:68:ae:b8:9d:6d:be:53:3f:7d:1e:
         c7:44:33:1c:ad:4f:64:4d:9e:7b:e8:13:4f:63:aa:26:24:cb:
         9d:2d:ab:ae:92:52:0b:a6:a1:bf:9d:8e:35:ec:79:f8:85:19:
         24:dd:dc:89:1f:6b:88:34:d9:7f:47:9d:3b:8f:07:4c:06:3a:
         78:44:4d:20:f6:cc:1b:91:69:e8:33:9a:a7:3c:68:31:a3:ee:
         b8:ae:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:09 2026 by rpki-client