Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa
File:                     3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          t97u2GqJ2jtckgSGR6Sjz6Jn9nKSQHkBxpLPsPLvaYM=
Subject key identifier:   7F:C9:F4:0D:B6:47:40:90:E2:30:67:D1:20:5B:83:8A:8C:14:BE:FD
Certificate issuer:       /CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
Certificate serial:       74C10BD605A3226F8B7854D79F76C35E7902C50A
Authority key identifier: 5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa
Signing time:             Sun 03 May 2026 02:23:06 +0000
ROA not before:           Sun 03 May 2026 02:18:06 +0000
ROA not after:            Sun 02 May 2027 02:23:06 +0000
asID:                     396982
IP address blocks:        115.166.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl
                          rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 05:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c1:0b:d6:05:a3:22:6f:8b:78:54:d7:9f:76:c3:5e:79:02:c5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FF85953C6850E359467A581C3FE1AC78E529F2F
        Validity
            Not Before: May  3 02:18:06 2026 GMT
            Not After : May  2 02:23:06 2027 GMT
        Subject: CN=7FC9F40DB6474090E23067D1205B838A8C14BEFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:33:5b:ec:66:23:36:56:35:7e:ca:02:4e:
                    ec:d8:5a:76:c4:b3:4e:b0:20:ab:bf:14:a7:a9:0e:
                    2f:82:22:62:45:bd:f1:76:45:6c:8e:1d:cb:c8:21:
                    58:52:13:41:80:bb:dd:f9:be:3b:9e:fc:49:74:d1:
                    18:94:dd:8e:ef:5f:18:a9:18:b2:2a:05:2c:a2:61:
                    5d:13:68:3a:51:3c:56:ad:32:2e:f9:28:9a:d3:aa:
                    f7:41:a8:e8:8c:4f:16:a6:11:e1:71:e2:0d:58:a9:
                    6a:20:89:27:c8:66:14:aa:52:76:6e:1a:77:f7:31:
                    2f:0b:14:33:3c:d9:47:dc:f2:e3:6b:60:b9:1c:fc:
                    9b:f1:1e:f8:61:31:89:37:82:ef:68:f3:6c:34:37:
                    9c:95:ab:a8:b2:12:8a:81:0c:20:38:1b:82:0c:ed:
                    dd:af:15:ef:cf:82:86:f8:45:13:06:46:c9:9f:fc:
                    27:93:8c:36:3c:c6:c0:b1:28:1f:17:cd:8f:3d:3e:
                    32:be:ce:5d:3b:9a:71:68:e0:09:7f:97:91:7c:eb:
                    62:f3:92:70:a5:f6:35:a9:53:31:ad:18:6a:81:de:
                    1c:e3:ff:ba:68:7c:43:b7:cc:e0:a5:b0:c3:b2:f9:
                    83:df:c3:76:c4:5d:69:f5:7b:28:bd:5e:b9:a5:ef:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:F4:0D:B6:47:40:90:E2:30:67:D1:20:5B:83:8A:8C:14:BE:FD
            X509v3 Authority Key Identifier:
                keyid:5F:F8:59:53:C6:85:0E:35:94:67:A5:81:C3:FE:1A:C7:8E:52:9F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/5FF85953C6850E359467A581C3FE1AC78E529F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5FF85953C6850E359467A581C3FE1AC78E529F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/3131352e3136362e3131312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:68:00:26:5f:f6:85:9b:2b:a8:79:fd:92:ac:23:e6:a7:ff:
         f4:07:8e:29:38:82:2d:48:95:03:bf:79:27:3f:df:bd:ce:30:
         b4:3b:b5:03:fe:c7:aa:4d:67:c8:c4:e4:b1:b2:e1:b7:2e:60:
         20:bf:e6:64:d6:66:0d:50:5b:30:30:f5:90:14:d0:42:99:49:
         f0:73:15:86:3a:dd:89:28:73:21:4b:4c:b0:ad:f6:e3:6f:89:
         1e:ac:9d:90:9c:12:65:6c:99:fe:1e:bf:06:05:b8:50:68:81:
         f9:a3:3a:cc:f4:e7:d2:2f:25:61:31:78:42:1b:bb:88:d7:ae:
         40:44:c7:05:53:ad:e4:f5:94:2e:55:8d:b2:f3:bc:f1:66:0b:
         3d:f0:72:66:b7:09:de:30:8d:50:6a:1f:84:33:cd:8d:54:fa:
         b3:2d:94:96:f5:1b:4b:39:2b:12:8f:54:92:0d:fa:41:5f:d2:
         45:23:34:4c:aa:d6:d9:13:0d:61:67:36:c6:4c:cd:60:b5:05:
         6f:55:1d:da:e5:12:b6:72:54:a1:c3:eb:04:41:27:de:ba:40:
         62:2b:34:0a:ca:fb:85:d3:7d:30:92:41:d1:e1:f7:fa:de:c8:
         31:ce:4f:a1:83:a4:15:12:8f:56:0e:b4:7e:5f:dc:d4:92:b7:
         9e:d9:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:11:01 2026 by rpki-client