Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
File:                     3131302e33352e38302e302f32312d3231203d3e203137373237.roa (raw, json)
Hash identifier:          yPzwOUXPzy3wSA63+j+GHhPdQ01L8rvYQqxEflJ8w+M=
Subject key identifier:   D1:9D:3B:11:28:01:35:5A:A2:58:17:BE:B0:4C:EF:D5:B2:82:8E:AF
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       6CEF3A7E141246BD20813FC45F63461D441A90CA
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:33 +0000
ROA not before:           Sun 03 May 2026 02:33:33 +0000
ROA not after:            Sun 02 May 2027 02:38:33 +0000
asID:                     17727
IP address blocks:        110.35.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ef:3a:7e:14:12:46:bd:20:81:3f:c4:5f:63:46:1d:44:1a:90:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:33 2026 GMT
            Not After : May  2 02:38:33 2027 GMT
        Subject: CN=D19D3B112801355AA25817BEB04CEFD5B2828EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:92:a4:bf:d0:6c:d2:c4:02:50:78:ae:31:
                    4e:8f:2c:11:0a:cf:51:6f:6f:f7:9c:f4:83:cf:37:
                    91:75:2a:68:88:05:04:90:bd:e4:ef:a6:b5:e9:3f:
                    ad:70:29:1a:59:20:5a:5d:ec:4c:c8:17:5c:2a:d6:
                    77:38:ae:fa:49:e7:9b:ac:4f:68:89:2f:75:2b:ec:
                    05:df:3e:81:31:11:66:fa:d1:21:77:ce:2e:5d:05:
                    0f:69:f8:a9:e0:40:4e:a3:bd:e2:3b:5f:04:cd:a5:
                    79:49:88:42:6e:21:a3:e8:b2:5c:bb:a0:a5:77:bf:
                    08:de:44:40:4b:23:6e:75:df:a5:65:b8:32:af:8f:
                    7c:4b:07:c3:6f:18:ee:ea:38:34:90:ba:a7:46:0d:
                    1f:77:ff:63:4f:26:f3:98:07:54:03:60:61:27:f1:
                    c7:04:38:7b:e1:4d:93:c9:e0:1d:0c:69:30:b8:96:
                    44:c6:7b:13:f5:fd:05:00:1a:f0:6b:53:89:48:07:
                    cb:01:0f:27:70:f1:b7:2f:fa:b3:81:32:a1:62:a7:
                    b3:e1:e0:e5:b6:26:a4:8c:ea:f8:d6:e2:18:7d:81:
                    a0:b9:53:1a:8a:05:58:dc:50:ce:71:83:2d:24:d1:
                    e9:da:a1:d9:ae:fc:4c:f9:c7:28:26:ea:7e:ae:e3:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:3B:11:28:01:35:5A:A2:58:17:BE:B0:4C:EF:D5:B2:82:8E:AF
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38302e302f32312d3231203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         51:1d:e9:91:62:de:93:1c:ff:19:3c:e1:fa:cb:8e:15:0b:90:
         01:c3:0e:4a:eb:14:fa:0b:b5:62:92:1a:aa:96:91:0a:d2:74:
         97:8e:12:70:53:b4:5a:db:28:b1:c1:39:68:91:6b:b1:71:1b:
         8b:54:d0:20:0b:36:08:d9:4d:aa:f5:02:14:ea:85:b5:9e:a8:
         db:39:e4:02:c6:da:62:df:26:e9:a3:eb:00:ed:d7:12:54:7c:
         ea:db:26:19:ae:6b:09:ba:30:e7:08:76:02:76:bb:66:70:1e:
         22:f7:85:93:3c:cc:0f:32:10:ed:60:ca:4c:ef:96:7c:a9:cf:
         13:94:83:06:7c:3f:c0:67:48:f0:81:e2:1a:95:9f:2d:af:58:
         db:1f:d8:5e:51:f1:ae:4e:85:50:c1:62:75:74:c7:2c:51:20:
         37:f6:d3:01:b8:92:c3:8c:3f:f9:a7:75:36:01:d8:4a:95:2d:
         be:8a:5e:5a:16:1b:80:77:7b:25:2c:ce:06:07:c9:cb:60:35:
         ac:a1:d0:67:a6:7f:e7:62:22:fc:fa:78:c2:d9:0f:4e:f4:69:
         05:af:a3:08:4b:00:ba:50:85:cc:1e:68:54:a6:5d:19:e7:71:
         24:0d:73:a2:2d:5a:f0:c7:2a:7d:c3:05:db:bf:1f:4b:f1:9a:
         5e:ec:61:2a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbO86fhQSRr0ggT/EX2NGHUQakMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzMzNaFw0yNzA1MDIwMjM4MzNaMDMxMTAvBgNV
BAMTKEQxOUQzQjExMjgwMTM1NUFBMjU4MTdCRUIwNENFRkQ1QjI4MjhFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyGZKkv9Bs0sQCUHiuMU6PLBEK
z1Fvb/ec9IPPN5F1KmiIBQSQveTvprXpP61wKRpZIFpd7EzIF1wq1nc4rvpJ55us
T2iJL3Ur7AXfPoExEWb60SF3zi5dBQ9p+KngQE6jveI7XwTNpXlJiEJuIaPosly7
oKV3vwjeREBLI25136VluDKvj3xLB8NvGO7qODSQuqdGDR93/2NPJvOYB1QDYGEn
8ccEOHvhTZPJ4B0MaTC4lkTGexP1/QUAGvBrU4lIB8sBDydw8bcv+rOBMqFip7Ph
4OW2JqSM6vjW4hh9gaC5UxqKBVjcUM5xgy0k0enaodmu/Ez5xygm6n6u48/NAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU0Z07ESgBNVqiWBe+sEzv1bKCjq8wHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzMDJlMzMzNTJlMzgzMDJlMzAyZjMyMzEy
ZDMyMzEyMDNkM2UyMDMxMzczNzMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANuI1AwDQYJKoZIhvcN
AQELBQADggEBAFEd6ZFi3pMc/xk84frLjhULkAHDDkrrFPoLtWKSGqqWkQrSdJeO
EnBTtFrbKLHBOWiRa7FxG4tU0CALNgjZTar1AhTqhbWeqNs55ALG2mLfJumj6wDt
1xJUfOrbJhmuawm6MOcIdgJ2u2ZwHiL3hZM8zA8yEO1gykzvlnypzxOUgwZ8P8Bn
SPCB4hqVny2vWNsf2F5R8a5OhVDBYnV0xyxRIDf20wG4ksOMP/mndTYB2EqVLb6K
XloWG4B3eyUszgYHyctgNayh0Gemf+diIvz6eMLZD070aQWvowhLALpQhcweaFSm
XRnncSQNc6ItWvDHKn3DBdu/H0vxml7sYSo=
-----END CERTIFICATE-----
Generated at Thu May 7 04:29:14 2026 by rpki-client