Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38342e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38342e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          2oQRsPriLvc++mZJ1XdRbuPhQMXHQ9C5/Y0Qp8c0nnE=
Subject key identifier:   3A:08:5A:65:8A:36:CD:CB:4A:0D:DE:3A:50:FA:94:96:B9:43:AA:29
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       6EE4C942AF772D8A93D7E73B1C0217AF4A354426
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38342e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:45 +0000
ROA not before:           Sun 03 May 2026 02:33:45 +0000
ROA not after:            Sun 02 May 2027 02:38:45 +0000
asID:                     17727
IP address blocks:        110.35.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:e4:c9:42:af:77:2d:8a:93:d7:e7:3b:1c:02:17:af:4a:35:44:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:45 2026 GMT
            Not After : May  2 02:38:45 2027 GMT
        Subject: CN=3A085A658A36CDCB4A0DDE3A50FA9496B943AA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:86:1f:d1:63:0c:ed:18:ab:a0:2b:75:32:
                    b1:8d:ed:df:98:b1:70:86:56:be:3a:e1:a4:21:eb:
                    54:64:2c:e4:c0:ee:60:71:5a:65:21:ca:b1:fe:99:
                    f1:80:d9:07:3d:d9:8f:46:40:53:83:b9:fa:1a:5b:
                    9c:eb:97:6c:05:dc:08:3c:d3:74:8e:44:b3:8d:34:
                    c3:7a:30:a5:ff:2d:7d:b7:0c:0b:5f:ac:c9:ef:dd:
                    9e:0e:c2:9d:48:1b:4b:04:9e:45:46:bd:41:e7:77:
                    a6:51:46:b1:7b:14:d4:53:b7:f7:5c:e2:e4:6d:86:
                    dd:a1:bb:1f:5f:56:ac:16:4a:87:7f:2e:4c:77:6d:
                    12:38:32:27:ba:e2:5d:1f:2d:21:36:88:ee:d7:2d:
                    d4:3e:bb:15:35:62:36:f9:f2:5b:f7:96:ce:b1:46:
                    a1:63:e2:db:fc:73:9a:87:6d:04:a2:80:06:e4:dd:
                    46:7f:ae:51:d1:0e:ae:eb:8a:53:9d:83:3c:16:ad:
                    07:27:62:7c:7a:b0:76:1e:21:b1:ce:10:bc:f9:ec:
                    7c:44:6d:e8:d0:07:d6:c4:5b:6e:0f:54:d3:4d:98:
                    85:3a:be:51:c6:91:ee:f3:58:da:c8:18:a8:4e:19:
                    7c:04:8c:d3:b7:9e:a3:79:e2:a4:9d:86:f3:40:5c:
                    81:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:5A:65:8A:36:CD:CB:4A:0D:DE:3A:50:FA:94:96:B9:43:AA:29
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38342e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:28:81:75:46:66:45:0d:12:14:94:35:43:5f:d4:4a:27:c0:
         a6:0f:4f:4d:92:08:0d:28:e7:78:72:0e:30:02:fa:a2:eb:33:
         d9:2a:8b:4b:63:d2:d2:54:f1:34:ec:84:8f:46:b2:22:ff:97:
         5f:ee:c0:e7:b2:b3:0f:89:79:70:12:1e:7d:34:37:6e:65:69:
         47:36:2d:dc:cf:a9:a6:2d:2c:7d:5e:f2:ec:a1:2e:32:37:67:
         df:65:83:51:78:9a:ea:b1:4b:fd:8f:14:6f:ea:af:76:61:e0:
         f2:72:4b:59:42:97:a2:75:21:dc:c6:1f:92:da:ec:2b:0a:82:
         0b:75:8e:a1:bf:6d:15:76:9a:5b:cc:11:18:e0:67:31:e1:cf:
         1b:a1:d7:a0:83:f5:3b:41:a1:b3:7c:7d:3d:3f:26:90:2e:c8:
         43:27:38:c2:e3:bd:be:7a:88:ac:a3:52:0b:7e:24:b5:50:32:
         2a:8a:22:75:8b:2c:21:02:4c:30:bb:f0:ea:26:09:ae:66:75:
         30:98:53:d3:73:0e:fb:dd:68:2d:f5:b8:aa:5c:44:f3:ea:f6:
         16:3a:40:f6:aa:79:a3:18:97:15:24:c4:82:a4:52:42:a1:26:
         1d:59:a1:90:6c:17:a3:63:b7:cf:cb:0f:05:00:84:5f:d8:c3:
         e3:a6:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:34 2026 by rpki-client