Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa
File:                     3131392e31302e3138302e302f32342d3234203d3e203234353330.roa (raw, json)
Hash identifier:          0ou1MA6qNBtVm99WbTegwqF+NpmPqc1Ktrk0OHI11U4=
Subject key identifier:   E2:69:0C:D1:C7:E3:D0:38:E7:53:95:76:3F:4D:60:1E:AB:D4:6D:7A
Certificate issuer:       /CN=108BD2ED0D3114613C2725256398C38B9DBAD520
Certificate serial:       72C8B6ECB22FFE357942667AA9294FE406CE7B43
Authority key identifier: 10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa
Signing time:             Sun 03 May 2026 02:10:42 +0000
ROA not before:           Sun 03 May 2026 02:05:42 +0000
ROA not after:            Sun 02 May 2027 02:10:42 +0000
asID:                     24530
IP address blocks:        119.10.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl
                          rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c8:b6:ec:b2:2f:fe:35:79:42:66:7a:a9:29:4f:e4:06:ce:7b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108BD2ED0D3114613C2725256398C38B9DBAD520
        Validity
            Not Before: May  3 02:05:42 2026 GMT
            Not After : May  2 02:10:42 2027 GMT
        Subject: CN=E2690CD1C7E3D038E75395763F4D601EABD46D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:63:29:0c:5b:2b:8c:49:e1:af:a3:1f:39:
                    09:5c:8d:75:55:da:59:b3:d3:2b:0f:20:1f:43:f1:
                    90:a2:6b:1d:8f:f5:db:57:df:23:7d:bf:5f:2f:88:
                    04:80:91:04:76:b9:bb:20:09:fa:dd:91:bd:b4:9c:
                    8f:50:94:1d:3b:2a:d5:db:2f:13:87:34:8b:17:93:
                    26:79:bc:0c:cf:55:00:59:61:15:61:40:c1:51:87:
                    88:b3:21:de:0b:02:41:86:76:51:6a:99:be:79:1d:
                    10:7b:d6:68:8c:65:49:10:51:80:5c:53:3b:21:2b:
                    f2:4f:1c:33:e9:f3:43:a9:22:1a:56:9b:ba:5e:76:
                    04:4e:ab:04:f1:a0:5d:c8:8a:65:a8:36:89:78:ce:
                    e6:a8:d3:7f:c1:ff:99:33:cc:36:d7:5d:49:9a:1c:
                    11:e8:28:68:b9:b3:57:39:3e:a9:b0:d1:21:d5:92:
                    f4:96:07:0a:b1:e8:40:46:36:6a:5f:03:61:d4:7f:
                    60:2c:53:a9:b2:60:1b:eb:02:b4:e0:cb:9a:55:82:
                    5b:79:65:e4:cc:e3:93:df:e8:fd:43:1f:4f:c8:3f:
                    c3:ce:e3:aa:ea:42:af:a6:28:51:49:89:39:77:b5:
                    07:24:f4:2d:c5:d6:05:68:71:38:c3:cd:fa:f0:5a:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:69:0C:D1:C7:E3:D0:38:E7:53:95:76:3F:4D:60:1E:AB:D4:6D:7A
            X509v3 Authority Key Identifier:
                keyid:10:8B:D2:ED:0D:31:14:61:3C:27:25:25:63:98:C3:8B:9D:BA:D5:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/108BD2ED0D3114613C2725256398C38B9DBAD520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/108BD2ED0D3114613C2725256398C38B9DBAD520.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/042344be-f9fb-4634-92d6-894dd538cadf/0/3131392e31302e3138302e302f32342d3234203d3e203234353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:14:09:48:0a:66:0e:08:7c:c2:fc:ea:ac:ec:f1:2a:2c:
         40:15:e8:27:a9:06:df:b0:92:be:43:42:ad:bd:73:1c:61:06:
         e3:cf:17:96:67:90:5e:78:cb:fd:51:46:90:c5:43:7a:f3:64:
         95:db:75:3c:88:66:40:de:af:c8:90:fb:58:2c:6d:a2:29:ee:
         05:91:0e:fa:ed:17:49:f0:47:8a:f1:81:32:f9:1a:49:23:64:
         ae:d5:d4:c6:d8:78:24:3c:4c:c6:c4:f0:fe:b2:11:c1:1a:78:
         39:a1:3f:06:02:92:f8:0e:2d:7b:fc:f1:ab:7b:81:87:db:ba:
         60:23:99:5f:54:f2:78:8c:a6:b7:6c:37:24:94:e8:71:ac:b1:
         ab:8c:b9:f0:88:51:c0:e6:12:04:be:9c:fc:1f:50:01:aa:7e:
         35:bf:77:9b:19:ac:7e:0d:26:d6:6f:e5:36:45:28:37:41:fc:
         16:01:89:31:94:32:9e:42:2a:14:ba:f3:fd:93:c9:53:7e:24:
         ff:72:4d:2f:a9:2f:df:c0:28:cb:46:1b:37:4f:cf:09:35:34:
         e7:c0:d9:94:c6:f4:8c:b5:b9:ea:33:5a:55:70:7b:59:d5:28:
         38:1c:53:8e:46:b2:ac:96:a8:e5:a5:72:bd:bf:c3:57:d4:26:
         81:68:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:01 2026 by rpki-client