Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3137372e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          HA8oysbBANlVY/UvbExuOyGu423Ies7m420JK3DCo1o=
Subject key identifier:   3B:9F:2F:2E:3C:AC:AD:BE:0B:09:FC:E0:D5:4E:3E:A6:BF:A2:64:48
Certificate issuer:       /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial:       5A73E03C978F9AB7337826018CAB433F92D0D37E
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa
Signing time:             Sun 03 May 2026 02:10:46 +0000
ROA not before:           Sun 03 May 2026 02:05:46 +0000
ROA not after:            Sun 02 May 2027 02:10:46 +0000
asID:                     24530
IP address blocks:        119.10.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
                          rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:73:e0:3c:97:8f:9a:b7:33:78:26:01:8c:ab:43:3f:92:d0:d3:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
        Validity
            Not Before: May  3 02:05:46 2026 GMT
            Not After : May  2 02:10:46 2027 GMT
        Subject: CN=3B9F2F2E3CACADBE0B09FCE0D54E3EA6BFA26448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:c0:50:47:65:3a:3f:5e:5a:cf:c4:04:94:
                    20:8e:19:0a:8c:86:6f:23:2d:65:e6:bd:6b:20:a9:
                    24:e1:65:7a:6a:af:b5:a5:46:73:1c:cc:b8:5b:a6:
                    b1:9e:97:db:47:1b:f2:56:82:76:6f:9d:8c:17:64:
                    7a:a1:53:d2:b8:9e:6c:85:93:bf:d7:f6:65:20:e5:
                    f2:7d:5a:b2:f3:02:9e:1d:28:e6:6a:0a:2d:04:e0:
                    d4:d4:92:21:a4:68:b7:62:4c:df:6f:93:1f:e4:dd:
                    b3:a2:73:1b:44:19:82:22:52:d4:b4:0a:d7:02:4c:
                    46:63:85:cb:9f:82:e9:c1:d2:78:3d:d4:22:83:fc:
                    42:8c:7d:7e:71:f0:09:f1:79:e8:31:3e:84:fb:ee:
                    b5:0b:81:93:78:5a:57:cb:50:f8:81:cc:c2:eb:ab:
                    cd:12:a7:6b:92:9b:ed:a3:1b:52:99:3a:6c:5f:2f:
                    2b:df:ab:27:68:db:32:69:1a:2d:b5:08:2d:3e:54:
                    75:d5:55:34:2b:34:bd:16:6d:4e:77:e9:1c:d7:30:
                    b2:7a:0e:b9:72:10:6c:44:f2:7c:73:b1:f1:dd:a1:
                    e1:b6:9b:10:9d:1e:bc:32:ae:5b:6a:3b:b7:17:ab:
                    53:66:60:19:97:49:13:f4:ac:54:d6:6f:60:ea:8e:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9F:2F:2E:3C:AC:AD:BE:0B:09:FC:E0:D5:4E:3E:A6:BF:A2:64:48
            X509v3 Authority Key Identifier:
                keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3137372e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2a:0e:7e:c4:ae:28:d8:11:ff:69:51:9b:71:91:aa:7c:bf:
         af:d2:ee:98:d8:0e:26:fd:b2:76:8b:93:13:81:f6:25:13:61:
         02:ff:12:0b:f5:35:d2:9c:f5:0e:ce:75:d1:16:85:f5:6d:da:
         2f:49:c8:43:4d:dc:1d:f0:73:f6:6b:e5:23:35:7f:85:67:c5:
         76:ce:38:85:24:66:aa:72:b1:95:86:68:01:62:2a:79:de:48:
         0f:e3:f2:6b:fd:ea:e2:4b:6b:c1:fa:8d:a5:dc:32:9d:d9:64:
         ff:29:3d:f8:f5:b6:56:66:9c:ea:9a:f6:18:7b:97:69:ee:e0:
         ba:ec:9b:b6:77:9c:81:01:aa:a5:2c:b2:f2:da:99:56:54:d8:
         7c:9e:fb:6e:43:fe:bf:7e:de:86:00:06:52:f8:71:08:73:25:
         db:1c:c1:82:92:92:f8:18:f7:32:cb:b8:be:4b:97:7d:a7:c7:
         1a:c2:e5:1b:f7:e9:bb:5c:6f:4c:70:cf:7b:4d:05:03:51:12:
         6c:e2:53:fd:ed:4a:03:c4:02:65:7b:5f:73:41:35:58:42:70:
         cd:0a:ec:33:ea:80:9f:df:7b:f2:d3:b6:c1:57:a0:ac:1d:17:
         a4:c7:12:d0:86:d2:28:30:79:d1:20:ac:a0:85:a7:ba:c3:b6:
         a6:73:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:53:10 2026 by rpki-client