Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38322e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          VTtK4QaixHdAdJFpSbtuyXzEEmgly3e+Pt5LeHmlxi4=
Subject key identifier:   5F:DE:D3:30:F3:6A:19:7B:7D:6A:BC:68:97:0C:B5:56:87:58:9D:83
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       1CC44984B4CD4044825FD8BD0ECE4F22F25FEC15
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:49 +0000
ROA not before:           Sun 03 May 2026 02:33:49 +0000
ROA not after:            Sun 02 May 2027 02:38:49 +0000
asID:                     17727
IP address blocks:        110.35.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c4:49:84:b4:cd:40:44:82:5f:d8:bd:0e:ce:4f:22:f2:5f:ec:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:49 2026 GMT
            Not After : May  2 02:38:49 2027 GMT
        Subject: CN=5FDED330F36A197B7D6ABC68970CB55687589D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:d9:4f:cc:00:f6:b0:5d:65:ff:2e:5d:94:
                    7e:0c:c4:74:10:30:fb:29:65:06:0b:eb:62:7c:19:
                    ed:df:04:7d:01:15:16:a2:d3:00:a7:47:d8:c1:0e:
                    7f:cc:be:a6:29:48:77:30:24:37:f5:63:f1:52:14:
                    d3:5c:bb:b7:1f:a5:e1:f9:31:86:e8:46:c1:a6:d5:
                    26:79:8f:a0:8c:10:b1:9f:bd:15:72:b7:20:07:15:
                    f7:6c:e3:86:71:aa:48:1a:2e:49:c4:04:d6:96:99:
                    f2:51:ed:b1:f5:9b:4b:6d:1e:38:af:a4:a9:a8:de:
                    96:16:96:c3:d7:dd:bb:fc:0d:c3:4a:4e:ca:99:32:
                    4f:2c:f5:54:39:b8:cc:27:22:e2:81:0f:52:12:4c:
                    a2:69:4b:0a:4b:40:ff:27:1c:14:dd:45:c2:10:5f:
                    f4:4d:57:79:71:19:56:b7:10:17:df:8f:18:a6:8d:
                    56:fb:0a:c7:5f:35:f6:6e:e9:9c:01:d2:d3:4a:e0:
                    48:79:0f:80:54:d3:87:b3:7a:fd:f2:c2:33:d5:0c:
                    52:2c:b9:58:8e:50:6b:45:d2:28:a5:db:f1:ec:fb:
                    b7:03:58:7a:4e:c6:7c:99:9b:47:ec:64:6e:44:73:
                    24:44:24:ae:1c:f7:d3:74:70:a8:ab:fa:89:e3:a1:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:D3:30:F3:6A:19:7B:7D:6A:BC:68:97:0C:B5:56:87:58:9D:83
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38322e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:c4:c2:0a:6e:4e:2a:75:8a:e2:76:0a:0d:27:40:5a:27:fa:
         e7:5e:6b:dc:64:30:8f:3c:d3:50:24:ee:49:96:70:9e:6c:cb:
         26:65:9b:39:7d:bc:b2:a8:64:6f:93:4e:6f:a0:c3:c9:99:a6:
         df:7c:61:21:42:1b:70:60:c8:04:59:28:92:58:6d:30:68:2c:
         1f:e7:e2:97:de:9b:26:6f:88:6b:ca:12:9a:39:50:75:eb:d3:
         6a:44:b3:47:61:c0:90:20:ee:66:e7:8b:ca:3b:14:3d:22:a6:
         ec:c5:fd:9c:54:3c:32:4a:a3:08:15:59:4d:4c:ce:87:6c:0e:
         20:c0:11:bf:53:2c:54:fe:9f:4d:16:1f:37:e1:06:13:df:ec:
         f0:6a:4f:c2:31:69:4a:57:f9:a1:e2:5d:df:a9:95:15:39:0d:
         1a:0e:c7:5e:07:27:a5:82:d0:da:8b:8c:28:b7:fd:74:80:63:
         69:32:0c:cc:c2:bd:76:3c:41:44:28:29:93:1e:a5:0b:5c:e0:
         96:51:19:5c:9c:34:2d:d3:62:58:8f:92:4b:47:43:f6:6f:2a:
         51:a3:48:44:f9:66:2a:98:19:67:24:82:0e:bb:14:eb:69:45:
         9e:21:4f:28:9f:d9:8a:81:af:6f:29:f6:ce:31:bf:1b:8b:b7:
         76:44:d1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:40 2026 by rpki-client