Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa
File:                     3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa (raw, json)
Hash identifier:          I+f1hEcXubKghJiAk5sPPJ7r6Vl2/TcWF4/gljUsK2A=
Subject key identifier:   46:B7:12:7D:F2:A3:FB:5E:21:53:13:1B:7C:4F:D1:AC:D5:A9:4F:3F
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       51EF9E52FE353251F8E0259B196AA38EA61800BD
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa
Signing time:             Sun 03 May 2026 02:38:47 +0000
ROA not before:           Sun 03 May 2026 02:33:47 +0000
ROA not after:            Sun 02 May 2027 02:38:47 +0000
asID:                     55818
IP address blocks:        119.110.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ef:9e:52:fe:35:32:51:f8:e0:25:9b:19:6a:a3:8e:a6:18:00:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:47 2026 GMT
            Not After : May  2 02:38:47 2027 GMT
        Subject: CN=46B7127DF2A3FB5E2153131B7C4FD1ACD5A94F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:33:2e:32:0b:81:23:e0:88:0f:8b:a2:89:
                    2b:89:85:ae:7a:1d:2b:08:c9:70:b3:ce:ea:e7:a7:
                    ac:14:6b:19:71:1a:98:85:8e:02:31:ca:a0:e6:ac:
                    59:19:ab:f8:e5:d2:81:5c:2a:58:b7:a6:b0:e4:a5:
                    21:7b:f7:80:74:f0:ba:e2:00:b4:f5:93:72:5e:d8:
                    c8:cc:21:4d:f1:76:1b:6c:29:4e:7f:9a:21:6f:e9:
                    13:96:e2:20:9e:6e:91:5f:dc:17:00:6a:24:bb:24:
                    8d:b4:6b:ee:6b:6e:fa:c5:11:15:97:e2:0a:5e:b5:
                    2b:0c:c3:d3:25:83:c3:85:6d:cf:cb:56:b2:33:d7:
                    60:e6:d2:70:65:99:a7:85:bb:e1:2c:8c:b4:9c:15:
                    fa:eb:e9:3d:26:38:26:c3:8a:05:da:cb:3b:9c:9f:
                    99:83:67:52:e3:cd:8f:ec:07:ce:28:ab:64:ff:3f:
                    e9:20:f5:c1:fc:db:81:d6:cf:d0:66:66:14:2f:53:
                    bd:3f:4a:2d:a2:2c:ca:b1:4f:4d:6d:e0:36:0f:80:
                    14:61:02:29:7c:8b:5d:b6:f0:32:aa:32:f8:9a:29:
                    fd:5d:4d:24:16:26:cb:bd:1c:b1:ca:b4:65:68:fe:
                    9b:fc:6d:f4:d6:bf:b1:e4:59:92:99:a5:50:69:78:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B7:12:7D:F2:A3:FB:5E:21:53:13:1B:7C:4F:D1:AC:D5:A9:4F:3F
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131352e302f32342d3234203d3e203535383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:19:40:9a:97:f6:ce:5e:c0:63:20:f5:e1:d6:ee:6d:c0:3a:
         c5:13:eb:46:56:27:77:b5:80:c0:77:fe:97:a1:c6:17:4b:a9:
         fb:e6:c3:aa:27:f3:b9:3f:bf:9c:a3:5a:30:61:e6:9a:8c:39:
         b3:12:4f:12:cb:6f:6b:65:d9:44:57:d9:62:82:99:84:e5:47:
         89:a9:42:47:3b:c7:dc:44:fb:22:af:e1:bf:7b:d4:73:a3:56:
         91:5d:4b:b8:21:4f:c9:d8:30:27:ef:b6:17:e5:90:56:75:20:
         01:3d:30:f4:2e:dd:99:dc:12:4b:35:bb:59:56:e3:76:da:cc:
         6d:e8:e1:8f:65:93:49:dc:27:c3:48:8f:fe:80:f3:f6:30:26:
         f4:2c:37:4e:4c:24:d8:89:e1:d2:a7:42:33:c4:d2:47:98:5e:
         d5:e7:04:e2:bb:16:50:85:52:62:df:4a:df:d6:d8:de:ca:03:
         3f:9b:bf:69:aa:7a:25:6a:22:11:98:b0:c0:a0:32:77:be:58:
         c8:a1:66:b8:0c:fb:fa:3a:5b:e0:16:9f:bb:8d:af:2b:12:19:
         6b:88:3c:7b:c3:b5:68:27:84:9a:70:03:46:12:dd:84:a5:cb:
         76:71:1c:5e:16:e2:19:6b:a4:ac:ff:48:32:e1:33:e7:96:ef:
         22:12:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:30:50 2026 by rpki-client