Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa
File:                     3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa (raw, json)
Hash identifier:          DmoH8opGJbRaKyp4x9c9EP7+HF39t1DV3Qhv/2VdzFw=
Subject key identifier:   AA:02:BD:06:11:E0:A2:9B:D8:E1:18:3C:1F:30:3C:D0:41:21:6A:48
Certificate issuer:       /CN=E6B678AE8DC843399DF534610764D871D4D698D8
Certificate serial:       35C4E08EE1E76DEC129D843C269F132826AB91C1
Authority key identifier: E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa
Signing time:             Fri 14 Aug 2026 11:02:36 +0000
ROA not before:           Fri 14 Aug 2026 10:57:36 +0000
ROA not after:            Fri 13 Aug 2027 11:02:36 +0000
asID:                     213607
IP address blocks:        110.44.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl
                          rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 11:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c4:e0:8e:e1:e7:6d:ec:12:9d:84:3c:26:9f:13:28:26:ab:91:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6B678AE8DC843399DF534610764D871D4D698D8
        Validity
            Not Before: Aug 14 10:57:36 2026 GMT
            Not After : Aug 13 11:02:36 2027 GMT
        Subject: CN=AA02BD0611E0A29BD8E1183C1F303CD041216A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:21:81:5e:5f:a0:e9:25:cf:a0:69:8a:57:
                    9f:df:3b:68:a3:51:33:00:c0:e1:0f:d2:bc:fd:68:
                    7f:7a:e4:09:48:74:99:75:c3:c9:ec:fb:84:bd:59:
                    0f:47:8e:97:4a:a1:a6:c8:70:1b:db:77:47:f8:d9:
                    fe:42:52:04:1f:90:e9:77:75:ff:87:7b:dc:c6:29:
                    9d:8f:04:9e:62:5d:eb:f7:de:22:33:22:2b:24:81:
                    4e:97:e4:46:86:48:9d:0d:c3:93:40:57:03:bf:2e:
                    39:09:59:ef:3b:11:a8:cb:ba:ba:2c:c1:a1:42:ae:
                    59:fa:05:c5:c6:84:4a:b3:45:58:6a:eb:39:6f:34:
                    59:62:61:b4:bc:81:30:e1:d6:28:74:16:a8:88:73:
                    16:6d:3b:b4:67:18:8b:e9:b8:07:ef:46:cd:80:d9:
                    fe:1e:d3:94:87:dc:f4:e9:07:2c:be:a0:e8:0d:e7:
                    f0:61:aa:96:4a:ab:1c:a8:8f:d7:bc:f6:12:80:05:
                    70:48:bd:95:f8:15:71:75:59:69:eb:34:30:43:c2:
                    d8:7b:c3:24:68:c3:39:da:5c:d1:49:6d:de:07:12:
                    65:99:f2:6a:f5:7e:ee:11:26:55:29:cb:ad:27:39:
                    96:7c:52:95:6c:ff:ad:16:6c:08:c5:70:d5:20:df:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:02:BD:06:11:E0:A2:9B:D8:E1:18:3C:1F:30:3C:D0:41:21:6A:48
            X509v3 Authority Key Identifier:
                keyid:E6:B6:78:AE:8D:C8:43:39:9D:F5:34:61:07:64:D8:71:D4:D6:98:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/E6B678AE8DC843399DF534610764D871D4D698D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6B678AE8DC843399DF534610764D871D4D698D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3136382e302f32342d3234203d3e20323133363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e0:8c:51:ce:e9:ba:42:ae:68:e0:6e:34:3e:d7:ac:ac:ad:
         12:e1:d3:02:41:b8:85:c4:71:b0:10:76:e1:64:c1:ae:9a:82:
         e7:c5:d2:e4:ac:61:79:9e:67:34:98:7e:b0:23:ed:39:6b:34:
         ea:14:e0:71:6b:12:fb:0b:d0:c3:49:4d:21:19:9b:28:e3:64:
         78:3a:55:c0:fc:0f:b8:f3:89:90:b5:f1:12:f7:75:74:ac:08:
         1b:0d:0b:2d:de:d8:a6:d0:ca:f6:66:ff:71:37:cf:bb:53:b7:
         11:b0:4b:30:f7:9b:a3:ad:b4:90:37:39:c4:06:a0:82:d6:0a:
         42:85:1d:bf:e7:08:5d:df:ba:5c:f0:28:37:ec:c8:90:14:d4:
         f2:ac:cc:8d:89:cc:4c:ba:23:ea:f7:1c:64:17:48:76:4d:3c:
         c4:01:a0:98:b2:fc:fe:c6:28:90:f7:2c:83:df:1d:c7:51:d4:
         10:f9:32:c0:94:d3:1f:4d:47:17:5b:66:26:5f:5f:41:95:07:
         41:ac:5a:87:60:93:ee:70:42:55:b1:16:9a:06:8b:ad:f9:b5:
         4f:bd:94:da:8f:ba:23:9a:3a:6b:48:06:6c:3c:7b:1c:f6:3d:
         ee:6c:1b:ac:1d:eb:45:58:bf:d0:ad:5e:b3:bc:3c:cb:40:94:
         ca:fe:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:32:39 2026 by rpki-client