Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa
File:                     3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa (raw, json)
Hash identifier:          E5GJM5fG4lo4/aeXiAEkn7iP6iI8MxHDqnacpsNib0E=
Subject key identifier:   45:C0:DE:D5:95:37:32:2F:84:FF:00:2B:4D:93:18:FB:3D:71:BE:67
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       48F6BCEB0340E554880357E07D9F5654F418B361
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa
Signing time:             Sun 03 May 2026 02:38:25 +0000
ROA not before:           Sun 03 May 2026 02:33:25 +0000
ROA not after:            Sun 02 May 2027 02:38:25 +0000
asID:                     55818
IP address blocks:        119.110.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f6:bc:eb:03:40:e5:54:88:03:57:e0:7d:9f:56:54:f4:18:b3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:25 2026 GMT
            Not After : May  2 02:38:25 2027 GMT
        Subject: CN=45C0DED59537322F84FF002B4D9318FB3D71BE67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:8f:49:85:38:4c:e7:ed:93:a6:73:3d:bc:
                    f7:04:c4:03:1a:4e:bf:4d:e2:cd:0a:b8:1b:35:a2:
                    51:b2:6b:6b:37:1a:6f:ca:0f:30:6c:f5:ed:2b:ee:
                    63:80:7e:5c:62:53:a8:90:aa:fd:b6:86:f6:14:b4:
                    3a:22:b4:f6:5c:39:36:09:88:c1:17:57:54:3a:44:
                    47:8d:c7:24:82:3a:6c:a9:6e:b4:70:e3:c7:ff:e2:
                    a1:0e:f7:c3:54:db:7c:1f:0c:63:ed:67:4a:b3:a1:
                    4b:40:bd:28:fd:e6:04:1d:85:8e:d1:6f:43:c3:c9:
                    dd:81:ad:13:88:79:01:9c:23:e8:43:2c:68:2c:74:
                    ea:16:75:15:52:b7:44:49:11:86:89:4a:37:81:49:
                    fb:de:21:c2:44:4a:2e:8a:bf:2e:8e:cf:65:58:29:
                    c3:cf:db:a0:be:87:77:53:61:5a:32:7e:fa:4b:20:
                    2c:df:73:0c:e5:f7:9e:01:e4:6d:17:40:29:15:7c:
                    90:07:8a:60:22:60:61:36:27:cc:68:44:44:4a:68:
                    d8:e1:ef:0e:21:f1:65:05:dd:26:2c:72:73:59:dc:
                    6f:21:69:97:f9:44:9e:8b:dc:24:87:8e:3a:f9:14:
                    d4:52:32:61:2b:81:9a:74:9d:c5:e9:65:7d:2d:0f:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C0:DE:D5:95:37:32:2F:84:FF:00:2B:4D:93:18:FB:3D:71:BE:67
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3131362e302f32332d3233203d3e203535383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:5e:89:5e:f2:b9:ab:b2:23:a0:d4:96:c5:fe:a5:c8:01:89:
         1f:97:c5:d7:18:22:08:8a:f6:a1:80:d4:03:ea:1e:bc:85:ea:
         a6:80:19:8d:7f:7c:bb:46:5c:91:ff:37:64:44:eb:8f:14:c0:
         53:ff:4d:2e:aa:ed:e4:df:6e:fe:28:bd:24:49:a1:44:36:a7:
         45:a1:2c:98:fc:11:bc:0f:21:7c:37:e2:4d:be:51:bb:8a:c7:
         54:e9:63:90:e6:a3:47:10:29:8e:9f:47:33:7e:dc:5e:79:f5:
         60:d5:15:84:19:61:c6:79:3e:b1:83:cf:72:82:9f:ef:49:36:
         64:7a:9a:89:a5:9e:d1:f0:d6:76:48:10:1d:d5:fa:f9:36:33:
         98:95:23:34:8f:e1:b3:70:69:54:38:93:4d:62:6b:5c:3a:23:
         1f:24:24:04:69:d4:6b:3a:c6:bf:cc:89:ab:27:63:67:71:ac:
         d3:b3:6b:d4:71:6a:21:10:47:37:e4:5c:c8:65:e2:8c:e1:31:
         85:cb:ce:57:f1:7e:72:cb:8e:cf:c0:87:7b:3e:46:d0:ca:ea:
         6e:77:f3:4b:5f:1a:bd:a4:eb:b9:b5:a5:a6:a9:12:1c:03:df:
         ee:16:bb:47:4e:e9:e0:c9:0e:f3:f0:0f:20:d0:b5:09:4e:a7:
         6e:52:5e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:29:40 2026 by rpki-client