Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa
File:                     3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa (raw, json)
Hash identifier:          4zfGerzzNtEj3O3bhQCbv0bW0h2eSLAF0XCEDzSSL3E=
Subject key identifier:   E2:9D:C4:17:38:30:EB:FD:2B:3A:8B:D8:A5:61:E2:D2:D0:53:BC:8D
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       2E187614B6873B07F02062A9A037CA4E42CF3DA3
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa
Signing time:             Sun 03 May 2026 02:38:47 +0000
ROA not before:           Sun 03 May 2026 02:33:47 +0000
ROA not after:            Sun 02 May 2027 02:38:47 +0000
asID:                     45147
IP address blocks:        119.110.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:18:76:14:b6:87:3b:07:f0:20:62:a9:a0:37:ca:4e:42:cf:3d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:47 2026 GMT
            Not After : May  2 02:38:47 2027 GMT
        Subject: CN=E29DC4173830EBFD2B3A8BD8A561E2D2D053BC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:50:1c:07:60:d6:17:c4:18:74:fb:f6:85:
                    a6:9d:ac:81:0b:90:ec:43:af:57:50:22:3d:c6:ce:
                    ca:a3:f4:e7:27:d9:78:f0:f3:65:0e:b4:53:38:8f:
                    89:c8:c0:04:c9:77:f9:50:26:3c:9f:9e:aa:1c:45:
                    06:c6:09:ed:8b:40:13:5c:10:83:f8:f8:92:9b:af:
                    fc:c2:61:8c:f9:0c:f9:5a:2b:db:63:9e:aa:22:da:
                    33:cb:ef:fb:47:04:38:ea:3b:78:27:65:d2:3e:c2:
                    e8:ae:56:1d:88:58:44:4a:64:01:ec:c9:27:c6:c9:
                    d6:7d:df:00:e2:0e:d9:c9:7d:f3:84:91:7c:c4:90:
                    96:59:76:d5:50:16:69:f6:8e:5b:c1:e4:5d:01:1b:
                    b6:5d:34:0a:d7:90:21:72:51:24:37:e7:a2:31:14:
                    f1:21:c2:b6:34:30:ef:77:cf:f3:38:31:ee:66:0c:
                    ff:4f:b9:2d:b4:57:37:ab:49:f1:b3:e6:13:f0:05:
                    cd:d2:de:68:04:de:19:83:1a:10:82:43:67:45:f3:
                    ac:29:fa:de:9c:2d:0a:3a:4a:15:59:e5:63:ee:f8:
                    c2:b4:9a:2b:cd:cd:94:45:2e:4e:a8:29:fa:59:52:
                    f1:1d:7b:59:c8:51:71:f5:5d:d7:36:f0:ac:11:02:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:C4:17:38:30:EB:FD:2B:3A:8B:D8:A5:61:E2:D2:D0:53:BC:8D
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32302d3230203d3e203435313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:2f:a6:fd:2b:e8:50:ff:bb:ab:f7:64:77:dd:e7:17:b3:
         94:61:d2:b7:04:fd:a7:45:3a:c7:31:e1:63:de:12:b6:61:79:
         c1:f8:82:ef:c5:6b:9c:c7:9e:5c:06:b3:1e:79:1d:e1:f6:fd:
         d5:32:d6:a7:07:0e:48:64:07:f0:d7:eb:2e:ef:97:e0:95:97:
         ae:2a:c5:90:4b:ed:ec:0a:b7:28:50:27:78:a3:7a:ca:2a:81:
         07:39:12:58:65:9a:ed:62:10:4f:54:36:7a:3d:80:00:01:c5:
         90:4d:cc:41:d7:7f:05:07:4a:5c:bc:60:b7:f2:27:dc:1e:a3:
         d2:10:05:3c:0c:6d:03:e6:8e:40:a2:aa:df:44:33:b4:55:99:
         3f:df:fa:10:19:e6:78:36:5c:b1:9d:eb:3e:db:cb:37:6a:81:
         31:ee:48:29:e8:c3:e0:26:4e:6f:65:79:c8:d9:9e:da:54:c3:
         ae:bb:5a:7c:20:a4:53:e4:3b:77:1b:c5:c3:eb:05:dc:5d:6c:
         ce:a5:50:0a:fb:f3:1f:2f:82:24:bd:66:dd:1f:03:aa:e3:43:
         ac:22:dc:2e:60:07:68:2b:4f:90:3e:2d:34:f5:2a:ba:41:4f:
         bd:bd:87:52:32:00:27:4d:cc:ad:9f:41:82:96:17:fe:08:eb:
         a3:c0:82:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:24 2026 by rpki-client