Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
File:                     3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier:          8BsqaUsVWmDtdqulgKNyzirBroIcxCzYdEjokj/ja+s=
Subject key identifier:   DA:C6:B3:A1:0F:9A:66:E9:AB:77:14:12:20:CF:4A:64:F8:B1:68:8B
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       7A4672DC53E6DBC7F67B0C406E377FA48A9169E9
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa
Signing time:             Sun 03 May 2026 02:38:40 +0000
ROA not before:           Sun 03 May 2026 02:33:40 +0000
ROA not after:            Sun 02 May 2027 02:38:40 +0000
asID:                     45147
IP address blocks:        119.110.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:46:72:dc:53:e6:db:c7:f6:7b:0c:40:6e:37:7f:a4:8a:91:69:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:40 2026 GMT
            Not After : May  2 02:38:40 2027 GMT
        Subject: CN=DAC6B3A10F9A66E9AB77141220CF4A64F8B1688B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:56:22:3e:0a:30:69:af:53:a3:54:59:8a:15:
                    a8:2e:9f:81:d5:5d:12:58:8b:29:17:69:f5:a0:fe:
                    d9:83:8b:07:f3:27:68:57:54:9b:f0:70:30:88:28:
                    f4:52:d1:ef:69:b6:be:04:1b:22:17:4c:ca:af:c3:
                    a9:90:3e:aa:0e:1d:51:06:ff:81:8e:44:ac:44:44:
                    fc:97:b1:71:2f:b0:ba:4a:a2:bd:25:b9:41:67:8d:
                    e8:82:c6:bc:63:b8:b7:06:3f:09:17:29:b1:62:e4:
                    cb:4e:d4:1b:1c:69:4f:f0:ca:27:ec:ff:1a:bd:c8:
                    37:b9:4e:e8:c5:b2:a2:93:db:5c:80:41:11:c9:54:
                    35:be:12:17:e6:f9:a6:ed:57:f2:75:f9:2f:81:8a:
                    27:d4:ed:71:5d:3e:6f:72:59:43:57:c6:73:a9:70:
                    c6:f0:4f:8d:e3:b9:3b:ec:d5:59:eb:35:a2:73:d9:
                    01:5e:69:ea:df:ef:e6:3f:70:e0:9a:44:8d:74:c2:
                    38:e1:88:fd:33:8a:a9:d1:a3:bd:a7:83:df:75:b1:
                    e0:cd:9f:b7:ba:b6:57:5c:e6:2d:9d:bc:b2:13:44:
                    04:80:1f:13:d0:83:35:62:75:e0:d1:2a:99:da:a6:
                    1f:6c:a2:e7:5f:5e:93:9b:9b:d9:74:4c:da:b2:64:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C6:B3:A1:0F:9A:66:E9:AB:77:14:12:20:CF:4A:64:F8:B1:68:8B
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131332e302f32342d3234203d3e203435313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:41:6c:18:2f:1a:09:d5:00:28:b4:d0:05:52:f2:ba:64:ad:
         c2:f2:4a:75:4a:ed:4a:9a:45:5f:33:2b:0d:36:73:0f:58:b2:
         00:e5:10:ee:70:16:6d:e3:72:eb:81:0e:9e:11:e6:be:cf:dd:
         0d:35:50:fd:9f:94:32:e1:22:7b:40:1a:bf:41:7a:6a:a3:fb:
         9a:76:5a:56:e9:c9:92:09:4f:49:10:3a:66:de:24:5b:05:7a:
         87:fb:6b:46:cf:12:1a:2c:78:c7:94:84:0b:dc:c9:e5:92:08:
         a3:7d:da:2a:c5:fb:be:b3:77:dc:79:cd:ac:9e:4d:7c:85:b3:
         86:8b:e1:f4:c2:a7:6c:c7:86:8c:18:fe:95:d1:2e:ef:d6:df:
         dd:9d:43:1d:20:87:15:6a:b6:8b:bc:48:ab:90:f8:03:06:ba:
         a1:7d:11:64:a8:83:b4:01:76:7e:89:9d:c4:b1:de:52:90:02:
         42:36:6b:f5:18:99:5d:68:d1:6a:4c:22:4a:1c:3e:c8:ad:fe:
         a9:92:78:d6:af:a6:db:84:54:9f:86:e7:d5:67:9b:5d:ed:da:
         94:70:1b:4e:80:0f:98:ed:3d:dd:19:53:d8:9e:a1:d8:24:39:
         65:89:f3:a0:bc:96:c4:68:0c:e9:24:48:27:39:97:f3:bf:d1:
         2b:23:2e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:23 2026 by rpki-client