Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137332e302f32342d3234203d3e203233363731.roa
File:                     3131312e39322e3137332e302f32342d3234203d3e203233363731.roa (raw, json)
Hash identifier:          JzeyrcIWczG07/iu68N92WBW54nszZcMxGHdpqBVFgo=
Subject key identifier:   75:F8:3B:CE:9B:32:3C:58:D0:CC:47:CA:C6:D3:36:B0:92:5E:3E:EC
Certificate issuer:       /CN=A9BFA348A050E46482F4E00C605FF9961247FC64
Certificate serial:       132C94D9CA14DB87C4CA60CC966FA63B1A81F3DF
Authority key identifier: A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137332e302f32342d3234203d3e203233363731.roa
Signing time:             Wed 21 Oct 2026 02:56:55 +0000
ROA not before:           Wed 21 Oct 2026 02:51:55 +0000
ROA not after:            Wed 20 Oct 2027 02:56:55 +0000
asID:                     23671
IP address blocks:        111.92.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl
                          rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 17:39:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:94:d9:ca:14:db:87:c4:ca:60:cc:96:6f:a6:3b:1a:81:f3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9BFA348A050E46482F4E00C605FF9961247FC64
        Validity
            Not Before: Oct 21 02:51:55 2026 GMT
            Not After : Oct 20 02:56:55 2027 GMT
        Subject: CN=75F83BCE9B323C58D0CC47CAC6D336B0925E3EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fb:25:0c:1d:6d:d7:39:75:f9:94:9d:5e:30:
                    2d:2d:a6:ea:5c:cd:bb:20:8c:28:97:8d:61:92:a6:
                    7b:cf:55:2b:80:ed:b6:21:43:f0:1e:59:3c:fb:d8:
                    fe:ae:ce:44:6c:3d:71:ac:8a:04:8e:8d:75:cd:ee:
                    7e:c7:be:7e:f2:e2:84:e7:6d:0c:c7:32:52:b4:c0:
                    18:be:44:59:d8:c4:7d:77:09:5d:2b:46:4b:3b:55:
                    ae:90:6f:71:5d:ac:c9:0b:07:6d:d8:d0:16:9d:d1:
                    72:0c:bc:32:9a:c1:b0:07:29:b9:5c:b9:1d:61:3e:
                    aa:81:99:dd:e5:d8:24:0d:80:3e:bb:6f:fe:40:ff:
                    40:32:20:75:9f:75:5b:aa:2e:d6:da:7c:2e:a5:d2:
                    9d:c6:64:39:c1:23:5d:ee:4c:f7:0a:89:43:42:c5:
                    aa:b4:fb:8f:7f:67:68:e1:16:1a:7b:dc:9a:b5:fc:
                    84:8f:4c:73:ba:39:d5:59:13:4f:18:64:f7:e7:39:
                    cd:2e:09:6a:3a:5d:10:73:18:a6:4d:e1:6b:99:69:
                    e7:03:c9:a2:6c:7d:ef:ee:b0:cf:73:70:1a:a0:be:
                    1b:d5:5b:3c:b2:c1:f3:ef:d6:3d:48:15:f8:f6:3c:
                    e6:13:2a:8d:21:87:d6:dc:7f:1b:ae:97:c5:81:4e:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:3B:CE:9B:32:3C:58:D0:CC:47:CA:C6:D3:36:B0:92:5E:3E:EC
            X509v3 Authority Key Identifier:
                keyid:A9:BF:A3:48:A0:50:E4:64:82:F4:E0:0C:60:5F:F9:96:12:47:FC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/A9BFA348A050E46482F4E00C605FF9961247FC64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A9BFA348A050E46482F4E00C605FF9961247FC64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3131312e39322e3137332e302f32342d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.92.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:38:d1:65:7c:ff:0d:56:94:4a:aa:20:10:48:03:fc:22:66:
         e1:4f:b4:44:38:e7:0a:4b:f4:2a:39:94:b4:81:03:b4:8c:b0:
         b1:76:a8:9e:09:25:cb:a1:37:b6:0a:a0:37:51:c2:ef:d8:a2:
         b1:3c:00:f4:45:fd:c9:0e:39:32:8e:68:fa:85:22:a5:fb:c4:
         8f:97:23:c8:1a:ef:26:b9:66:87:30:58:77:9e:f9:e0:f7:a1:
         e7:b3:ef:ea:09:c7:b3:8e:ed:ab:a9:09:18:70:52:9a:36:d3:
         a4:45:fe:48:d9:c1:8e:8d:df:df:bf:b1:b4:e0:f3:60:1c:1f:
         24:5f:ad:11:16:b3:20:f1:a7:2a:1b:f2:b7:c2:cf:7f:61:a4:
         a7:43:ba:63:2b:b1:f9:80:61:0c:8c:24:96:fc:95:df:a7:a2:
         98:ff:3b:3b:fb:a6:25:13:1e:00:7e:2b:20:02:99:44:bb:a8:
         e6:64:87:58:d8:e4:0e:d1:6a:9f:78:02:eb:ed:34:bd:ab:3d:
         dc:23:03:03:99:ab:6d:75:88:05:72:56:73:6e:05:db:52:1d:
         db:54:00:0d:3b:bb:36:35:3e:80:31:78:41:cc:0f:34:2e:d2:
         96:8f:a2:20:65:ab:59:81:1d:f5:e0:92:33:5c:ae:13:fe:ec:
         33:23:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:30:59 2026 by rpki-client