Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132312e302f32342d3234203d3e203435313437.roa
File:                     3131392e3131302e3132312e302f32342d3234203d3e203435313437.roa (raw, json)
Hash identifier:          0QIxbBZsvVgJNeV3b4djR15Z6BZtNbE87E1sKzCt0I4=
Subject key identifier:   14:EA:D4:74:65:8F:F4:BF:7A:C4:FB:0E:1F:41:D2:90:93:70:4C:1E
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       5C7535CFB9BBDC19D848A43286C3A1BB3A59ED47
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132312e302f32342d3234203d3e203435313437.roa
Signing time:             Sun 03 May 2026 02:38:43 +0000
ROA not before:           Sun 03 May 2026 02:33:43 +0000
ROA not after:            Sun 02 May 2027 02:38:43 +0000
asID:                     45147
IP address blocks:        119.110.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:75:35:cf:b9:bb:dc:19:d8:48:a4:32:86:c3:a1:bb:3a:59:ed:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:43 2026 GMT
            Not After : May  2 02:38:43 2027 GMT
        Subject: CN=14EAD474658FF4BF7AC4FB0E1F41D29093704C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:b7:e1:48:36:d3:cd:7a:80:0d:f0:b7:ad:
                    d4:82:13:8e:21:df:65:6c:1a:47:3c:72:87:cd:2b:
                    52:e3:2d:74:ff:0a:1c:2c:48:ff:98:a6:4a:9b:73:
                    61:a1:18:59:e5:2a:4f:c4:25:61:c8:c7:6c:52:14:
                    45:ee:24:d2:c2:fe:ab:99:58:ba:b2:bb:9d:3b:12:
                    0b:2b:73:a9:1c:2e:6d:4e:c9:94:43:c7:89:41:b5:
                    d1:f7:62:09:99:09:20:00:98:ca:4c:f1:f1:b9:9f:
                    01:71:17:14:66:5c:09:01:c9:db:2f:51:d9:b1:3a:
                    67:fe:fa:fe:83:35:6b:cb:c1:f8:e1:c7:e4:0d:aa:
                    19:16:3b:86:7b:ab:0a:e1:d2:ec:98:74:a5:97:55:
                    68:74:38:aa:25:bb:c2:11:76:32:c6:16:44:47:23:
                    d7:a0:d1:c1:71:2c:44:c5:ba:6e:1f:5a:2e:ab:bc:
                    e6:fa:7f:e3:7d:de:9f:6c:d6:85:a0:bc:c2:74:64:
                    c7:08:dd:62:15:96:87:97:0e:c2:c4:d4:af:2d:90:
                    38:cf:f5:c6:70:27:73:1f:26:90:d1:aa:37:4d:86:
                    50:61:12:7b:cf:fb:e5:ef:80:e2:d3:b8:83:0e:45:
                    8e:20:49:5a:aa:63:f3:46:83:63:1f:5e:cf:d4:e1:
                    01:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:D4:74:65:8F:F4:BF:7A:C4:FB:0E:1F:41:D2:90:93:70:4C:1E
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132312e302f32342d3234203d3e203435313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:52:72:54:e6:09:ca:36:a5:17:15:67:93:85:3d:9c:04:96:
         d5:dc:0c:8f:3b:41:0f:20:05:33:e2:59:e3:10:5d:b2:36:52:
         b3:a7:44:c9:62:d9:ee:c2:50:83:fe:87:ff:96:b4:9d:3e:23:
         33:37:24:11:90:40:9a:81:63:f9:9a:b2:6f:6a:15:da:32:a0:
         72:99:9a:76:03:b4:00:21:21:ec:fe:05:4c:a0:de:c4:65:92:
         15:37:37:89:0f:7e:87:ef:06:dd:fd:f6:9b:72:44:92:f5:9f:
         41:ca:b9:d0:b6:8d:d5:98:13:b7:32:e8:7c:00:44:be:b2:7b:
         65:18:b1:24:d9:2e:e1:94:33:2f:f5:19:da:0f:0e:dc:36:48:
         2a:b8:80:fb:cb:45:30:06:a2:3c:19:88:54:89:b8:8a:41:31:
         ee:f3:14:74:d8:dd:24:dc:83:a7:d3:00:65:e2:3c:15:0f:8c:
         ec:62:56:1a:6b:3c:a3:ef:72:b1:6e:b1:b9:39:85:45:64:0a:
         bd:e3:97:66:d6:32:70:2d:9f:d6:31:41:0a:fe:2b:8c:de:c0:
         18:94:20:b4:e9:be:c5:7d:ca:dc:b6:35:4c:87:99:54:b3:9c:
         fc:5d:89:d1:28:6c:63:63:b8:99:33:34:93:97:ae:1f:05:56:
         b7:ad:39:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXHU1z7m73BnYSKQyhsOhuzpZ7UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDNaFw0yNzA1MDIwMjM4NDNaMDMxMTAvBgNV
BAMTKDE0RUFENDc0NjU4RkY0QkY3QUM0RkIwRTFGNDFEMjkwOTM3MDRDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7rfhSDbTzXqADfC3rdSCE44h
32VsGkc8cofNK1LjLXT/ChwsSP+Ypkqbc2GhGFnlKk/EJWHIx2xSFEXuJNLC/quZ
WLqyu507Egsrc6kcLm1OyZRDx4lBtdH3YgmZCSAAmMpM8fG5nwFxFxRmXAkBydsv
UdmxOmf++v6DNWvLwfjhx+QNqhkWO4Z7qwrh0uyYdKWXVWh0OKolu8IRdjLGFkRH
I9eg0cFxLETFum4fWi6rvOb6f+N93p9s1oWgvMJ0ZMcI3WIVloeXDsLE1K8tkDjP
9cZwJ3MfJpDRqjdNhlBhEnvP++XvgOLTuIMORY4gSVqqY/NGg2MfXs/U4QGJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUFOrUdGWP9L96xPsOH0HSkJNwTB4wHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAd255MA0GCSqG
SIb3DQEBCwUAA4IBAQBmUnJU5gnKNqUXFWeThT2cBJbV3AyPO0EPIAUz4lnjEF2y
NlKzp0TJYtnuwlCD/of/lrSdPiMzNyQRkECagWP5mrJvahXaMqBymZp2A7QAISHs
/gVMoN7EZZIVNzeJD36H7wbd/fabckSS9Z9ByrnQto3VmBO3Muh8AES+sntlGLEk
2S7hlDMv9RnaDw7cNkgquID7y0UwBqI8GYhUibiKQTHu8xR02N0k3IOn0wBl4jwV
D4zsYlYaazyj73KxbrG5OYVFZAq945dm1jJwLZ/WMUEK/iuM3sAYlCC06b7Ffcrc
tjVMh5lUs5z8XYnRKGxjY7iZMzSTl64fBVa3rTlU
-----END CERTIFICATE-----
Generated at Thu May 7 03:12:24 2026 by rpki-client