Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa
File:                     3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa (raw, json)
Hash identifier:          GcaMYE+0UTNF+YG5C/h6JAbM5Fw0ZnVJf5958O+5KfE=
Subject key identifier:   8B:AD:29:03:B2:34:3E:11:55:10:C1:DE:33:A5:B2:AD:F6:E8:08:4A
Certificate issuer:       /CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
Certificate serial:       10464B87A3FA07BFED55263944572289B4A6B804
Authority key identifier: EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa
Signing time:             Sun 03 May 2026 02:38:41 +0000
ROA not before:           Sun 03 May 2026 02:33:41 +0000
ROA not after:            Sun 02 May 2027 02:38:41 +0000
asID:                     149760
IP address blocks:        119.110.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl
                          rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 23:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:46:4b:87:a3:fa:07:bf:ed:55:26:39:44:57:22:89:b4:a6:b8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE158B3C84D30768CBC0D1D56034E26E704B5D0
        Validity
            Not Before: May  3 02:33:41 2026 GMT
            Not After : May  2 02:38:41 2027 GMT
        Subject: CN=8BAD2903B2343E115510C1DE33A5B2ADF6E8084A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:f3:eb:9c:5a:7a:cb:fb:60:6f:dd:e2:f6:
                    7e:fc:5b:21:8b:ad:de:a9:3e:69:32:e2:9b:8b:dd:
                    48:a6:8f:78:fe:75:42:f3:a0:95:06:e4:db:ff:a0:
                    91:21:2c:44:eb:d7:0e:ab:f8:2a:ec:15:fb:9a:59:
                    76:17:f3:bf:f2:ce:86:bf:ad:f8:61:92:e0:0a:27:
                    cc:85:63:0d:c5:c3:7f:85:8f:fb:a9:35:9e:83:c5:
                    01:d4:5b:56:46:30:5b:d1:98:84:bc:0a:f1:63:0e:
                    df:e4:07:27:71:36:fe:0f:a5:a8:63:fe:8c:54:5f:
                    30:f5:71:e3:6b:79:41:d3:ec:1d:88:7f:7e:66:52:
                    41:a0:da:1c:56:ce:38:fc:2d:2d:ed:52:d1:b6:76:
                    02:0e:53:86:59:ef:11:9f:e0:5a:3f:f0:d6:61:d1:
                    f1:77:ba:ef:dc:c3:46:2b:64:99:30:e4:d2:b5:fe:
                    35:cd:84:a4:fd:68:5d:7b:d2:38:18:09:83:c8:16:
                    b9:f7:7a:52:be:86:ec:88:40:09:e3:c7:fd:00:d2:
                    57:21:9e:84:8b:5f:3d:d1:e5:71:c5:bc:04:77:fd:
                    fd:85:ba:fc:ec:58:2c:6a:b6:dd:3f:ee:2d:76:51:
                    32:fa:b5:c0:68:80:ab:5d:30:2b:12:96:7a:8b:89:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:29:03:B2:34:3E:11:55:10:C1:DE:33:A5:B2:AD:F6:E8:08:4A
            X509v3 Authority Key Identifier:
                keyid:EA:E1:58:B3:C8:4D:30:76:8C:BC:0D:1D:56:03:4E:26:E7:04:B5:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/EAE158B3C84D30768CBC0D1D56034E26E704B5D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3131392e3131302e3132342e302f32342d3234203d3e20313439373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.110.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:03:c1:40:be:93:bb:2e:3c:10:93:6a:8f:66:26:29:24:dc:
         5a:94:25:8d:09:e0:7a:88:69:b3:88:73:e0:c6:6d:f8:d8:87:
         99:71:f1:9d:65:04:4b:bf:fb:62:bb:5a:94:a5:90:9f:5b:89:
         57:a3:ee:8a:da:12:ad:6f:e9:12:d3:c4:47:69:b1:91:cc:ef:
         cc:b6:80:1a:03:65:91:96:18:e6:f2:ea:a5:e1:0a:39:4a:03:
         0c:23:ec:27:d9:ec:34:c0:86:cc:f5:05:45:c9:64:e7:3d:90:
         4e:31:1a:3f:39:e1:1f:cc:00:1d:6c:26:63:22:05:fe:03:85:
         12:6e:8a:0b:ca:b6:fe:6b:56:ce:03:96:4c:05:2e:cc:38:a8:
         17:99:7d:1d:4d:11:5b:94:b1:01:f6:70:55:59:36:9c:aa:67:
         b3:18:6e:7a:83:41:3a:39:95:8a:b9:00:d5:95:74:b1:a0:e1:
         1c:97:7e:a2:c1:f9:94:3a:9a:30:16:e9:cf:4f:7d:e4:eb:92:
         c1:ea:ee:d8:86:f0:09:cd:0c:0c:4c:cf:60:52:09:76:26:39:
         59:04:87:55:3b:be:96:7b:ac:bd:30:bc:4a:06:f1:35:e2:c4:
         05:40:c4:a3:28:f7:29:89:d1:da:29:c9:9b:9a:80:03:a6:93:
         93:3e:e2:d7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEEZLh6P6B7/tVSY5RFciibSmuAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFFMTU4QjNDODREMzA3NjhDQkMwRDFENTYwMzRFMjZF
NzA0QjVEMDAeFw0yNjA1MDMwMjMzNDFaFw0yNzA1MDIwMjM4NDFaMDMxMTAvBgNV
BAMTKDhCQUQyOTAzQjIzNDNFMTE1NTEwQzFERTMzQTVCMkFERjZFODA4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTRvPrnFp6y/tgb93i9n78WyGL
rd6pPmky4puL3Uimj3j+dULzoJUG5Nv/oJEhLETr1w6r+CrsFfuaWXYX87/yzoa/
rfhhkuAKJ8yFYw3Fw3+Fj/upNZ6DxQHUW1ZGMFvRmIS8CvFjDt/kBydxNv4Ppahj
/oxUXzD1ceNreUHT7B2If35mUkGg2hxWzjj8LS3tUtG2dgIOU4ZZ7xGf4Fo/8NZh
0fF3uu/cw0YrZJkw5NK1/jXNhKT9aF170jgYCYPIFrn3elK+huyIQAnjx/0A0lch
noSLXz3R5XHFvAR3/f2FuvzsWCxqtt0/7i12UTL6tcBogKtdMCsSlnqLiR39AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUi60pA7I0PhFVEMHeM6WyrfboCEowHwYDVR0j
BBgwFoAU6uFYs8hNMHaMvA0dVgNOJucEtdAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NjM1ZjdhMmYtNzI1ZS00Mzk5LTg2OWEtNGIxZmNmMmM2YTBjLzAvRUFFMTU4QjND
ODREMzA3NjhDQkMwRDFENTYwMzRFMjZFNzA0QjVEMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9FQUUxNThCM0M4NEQzMDc2OENCQzBEMUQ1NjAzNEUyNkU3MDRC
NUQwLmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzYzNWY3YTJmLTcyNWUtNDM5OS04
NjlhLTRiMWZjZjJjNmEwYy8wLzMxMzEzOTJlMzEzMTMwMmUzMTMyMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzNzM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB3bnwwDQYJ
KoZIhvcNAQELBQADggEBABwDwUC+k7suPBCTao9mJikk3FqUJY0J4HqIabOIc+DG
bfjYh5lx8Z1lBEu/+2K7WpSlkJ9biVej7oraEq1v6RLTxEdpsZHM78y2gBoDZZGW
GOby6qXhCjlKAwwj7CfZ7DTAhsz1BUXJZOc9kE4xGj854R/MAB1sJmMiBf4DhRJu
igvKtv5rVs4DlkwFLsw4qBeZfR1NEVuUsQH2cFVZNpyqZ7MYbnqDQTo5lYq5ANWV
dLGg4RyXfqLB+ZQ6mjAW6c9PfeTrksHq7tiG8AnNDAxMz2BSCXYmOVkEh1U7vpZ7
rL0wvEoG8TXixAVAxKMo9ymJ0dopyZuagAOmk5M+4tc=
-----END CERTIFICATE-----
Generated at Thu May 7 04:29:18 2026 by rpki-client