Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa
File:                     3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier:          LnDcLVYNIslp+XHFRA9jgwKm4SbVfKMj79VOkrxy8zE=
Subject key identifier:   D7:9D:7F:BF:5B:FF:81:B6:35:FA:49:F9:96:A5:F8:CE:40:10:DC:81
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       0AA86B846C3440866B4C1E783BA382CAAB44E3BD
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa
Signing time:             Sun 03 May 2026 02:38:29 +0000
ROA not before:           Sun 03 May 2026 02:33:29 +0000
ROA not after:            Sun 02 May 2027 02:38:29 +0000
asID:                     45147
IP address blocks:        119.110.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a8:6b:84:6c:34:40:86:6b:4c:1e:78:3b:a3:82:ca:ab:44:e3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:29 2026 GMT
            Not After : May  2 02:38:29 2027 GMT
        Subject: CN=D79D7FBF5BFF81B635FA49F996A5F8CE4010DC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:7a:9e:c2:e5:fb:92:22:6e:f7:63:b6:b3:
                    c1:b0:05:82:ea:f3:cb:ff:d0:c0:cd:ad:19:59:85:
                    a9:f3:c9:59:95:73:32:cb:f7:44:ec:06:2c:bf:dd:
                    d8:b6:b1:83:b9:91:e6:42:64:32:5e:29:4e:a3:e7:
                    df:7d:04:c0:10:63:9e:f9:56:a3:71:f6:8d:52:e1:
                    8a:16:ea:98:7d:77:0e:80:c0:5c:f6:36:da:76:6d:
                    ce:95:bb:0e:50:09:86:c9:f1:b1:ee:b6:ca:2f:c9:
                    31:ab:d9:13:b9:ab:85:10:27:7d:2d:8e:62:56:1b:
                    76:39:29:cf:4b:c4:bc:d3:13:c2:89:ce:4d:dc:5b:
                    cb:b0:fb:e2:27:8e:a1:1d:f7:fb:46:92:6e:3a:69:
                    c8:50:16:69:2d:da:ef:60:ff:42:34:45:6c:69:d7:
                    90:e7:73:9f:ec:9e:ff:eb:f2:c5:46:a4:a1:ed:53:
                    95:70:cc:57:68:0e:7b:49:6f:32:22:af:d6:db:68:
                    be:ea:a2:4e:47:d5:f9:d7:93:73:49:f2:82:c4:55:
                    03:4f:d5:2d:40:69:66:8d:80:ac:cd:56:0b:b6:86:
                    c3:ca:6f:5f:52:06:85:5e:da:fd:5a:77:58:a6:e0:
                    65:a6:b7:4a:e7:9d:ec:85:01:82:97:bd:60:dc:7f:
                    9b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9D:7F:BF:5B:FF:81:B6:35:FA:49:F9:96:A5:F8:CE:40:10:DC:81
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131322e302f32342d3234203d3e203435313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:ff:9c:f3:ac:00:43:b4:66:fc:6d:74:20:44:42:85:c5:
         e0:bb:50:64:6b:ff:83:87:dd:10:33:b9:b7:44:42:80:2b:bf:
         ac:5a:44:4e:68:76:53:86:2c:53:ac:64:f0:ec:4f:c8:67:be:
         18:27:13:9e:01:e6:4d:da:5e:07:f5:48:9f:32:f7:d3:63:2d:
         92:2e:fb:21:17:98:85:bf:0c:f9:b0:c8:77:2d:dc:04:8c:2b:
         5d:63:61:16:a0:21:44:3b:a5:63:9b:06:5d:a2:c9:7f:9e:40:
         3f:25:d6:ad:eb:d1:ba:10:b1:fc:b6:11:bf:79:10:31:41:17:
         d0:9f:65:4e:6a:8f:07:09:84:56:65:db:53:01:82:9e:72:bc:
         e3:a9:63:d1:5d:e1:0e:2e:d5:87:5a:86:47:26:e4:f5:41:35:
         71:fd:f1:b5:6a:bb:16:ef:bf:59:29:d6:15:1a:1c:5b:4a:67:
         f8:02:e9:5a:74:e2:d4:a8:00:ab:d6:52:e0:a2:55:22:10:ba:
         54:2a:7e:f8:2f:02:79:b1:be:c6:cb:d7:e9:e8:37:50:26:0c:
         22:11:8f:d7:66:5f:ce:14:ad:ca:20:cb:d6:47:6f:65:0c:fd:
         3c:df:7d:cb:9e:16:0d:31:6d:a6:bd:05:ec:35:9b:b4:93:6d:
         a7:1a:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:23 2026 by rpki-client