Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa
File:                     3131302e33352e38352e302f32342d3234203d3e203137373237.roa (raw, json)
Hash identifier:          fTadIFZHs0zcgCAwURXBDM67gBAq34E0Pvh8xhsqfPk=
Subject key identifier:   CA:23:B6:1A:E4:D2:87:B8:E2:6D:BE:B0:10:7F:B2:49:70:9A:40:CE
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       7948FED237A9BEF2A3AA050E09BC5C1735E0571F
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa
Signing time:             Sun 03 May 2026 02:38:35 +0000
ROA not before:           Sun 03 May 2026 02:33:35 +0000
ROA not after:            Sun 02 May 2027 02:38:35 +0000
asID:                     17727
IP address blocks:        110.35.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:48:fe:d2:37:a9:be:f2:a3:aa:05:0e:09:bc:5c:17:35:e0:57:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:35 2026 GMT
            Not After : May  2 02:38:35 2027 GMT
        Subject: CN=CA23B61AE4D287B8E26DBEB0107FB249709A40CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f3:19:02:6a:bc:3b:59:d6:02:76:1b:af:6a:
                    2c:7d:4d:7b:f4:29:55:44:1d:b9:00:00:81:56:82:
                    59:9f:d5:ac:cd:a4:06:44:a2:d4:48:2d:20:33:5e:
                    68:a9:aa:28:16:a1:de:dc:0e:2a:09:ef:ed:4d:4e:
                    37:c3:37:2d:2b:88:55:8c:f2:84:a6:b0:9e:1d:05:
                    5a:50:ff:83:fb:6e:ba:50:ff:cb:c1:fd:c2:78:f3:
                    a2:14:cc:14:7d:fa:9f:c2:86:77:18:b3:17:cc:f9:
                    dd:b7:d8:66:86:89:4c:bd:a5:26:a1:8f:2e:5e:2a:
                    34:96:31:5f:37:9c:8f:1d:57:aa:86:7b:44:6a:bd:
                    42:de:b2:cd:cb:bc:23:b0:5d:06:e6:31:bd:dd:b1:
                    0d:91:d6:0d:b1:7f:f1:0e:cf:1d:cb:fc:be:f4:d1:
                    95:74:23:f5:08:f9:02:26:2f:73:b2:0b:d6:c6:7e:
                    49:b2:80:10:16:88:37:ff:8b:d4:5a:4a:11:15:63:
                    b4:da:66:fc:c7:a3:08:77:8a:62:e6:ed:84:b9:dd:
                    43:83:98:12:4d:80:6d:c0:d3:c7:85:32:9c:97:ed:
                    dc:5f:8e:1e:08:7c:0e:61:78:b4:5e:09:57:d1:f1:
                    13:9c:ad:fe:ec:00:cc:f4:5e:8e:03:33:ee:96:74:
                    c1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:23:B6:1A:E4:D2:87:B8:E2:6D:BE:B0:10:7F:B2:49:70:9A:40:CE
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131302e33352e38352e302f32342d3234203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.35.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:19:b3:bc:e8:3b:f0:07:71:81:3f:77:be:08:32:e0:b8:
         96:a1:46:0d:7a:6d:38:5c:34:d2:1f:cb:af:e7:59:0b:c6:a4:
         7b:1f:7a:fb:f8:62:6d:97:0b:a2:4d:3c:f1:e9:06:eb:73:9a:
         a3:30:b8:47:64:39:be:bd:7b:b5:25:47:e7:b5:ba:2d:fe:6d:
         29:37:66:e6:67:e4:04:15:1a:ee:28:5c:23:2c:e3:41:a8:88:
         5f:31:e7:1e:38:fc:f9:02:ac:22:dc:53:25:e3:b8:d5:a0:4b:
         33:89:40:ec:da:1c:58:15:c3:89:9c:f3:c4:b0:e1:13:c7:ae:
         e7:28:ee:b2:d1:a3:51:82:81:bc:8c:22:23:dc:df:54:c5:9d:
         71:14:ca:1e:d1:66:9b:6a:95:83:9b:d8:e3:76:3f:09:7a:17:
         6d:d7:b9:6c:d9:4f:38:f5:ad:9a:9e:9c:5e:14:14:27:21:d3:
         59:66:9f:69:fb:52:46:01:a9:fb:ad:b2:02:6e:7e:45:a9:b8:
         4f:99:4b:52:e1:1a:bc:d8:52:c2:92:0e:0d:74:cd:a1:97:77:
         c8:06:46:cf:72:d6:20:7e:0d:0f:34:ff:c4:a4:11:88:b3:59:
         8e:47:cc:a0:46:6e:47:68:d1:24:bd:e9:51:19:1a:86:3d:34:
         85:2b:d9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:13 2026 by rpki-client