Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          S8Ek9RlB50nYWIYGV3GDgnzVz7pzb0Rv9NpPnpubFVA=
Subject key identifier:   13:66:76:A7:C2:E5:DE:43:A1:27:DE:CC:CB:24:5A:72:63:1A:C6:24
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       6EC29F42DF19FED7994A766AC75E92D8D96BD460
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:32 +0000
ROA not before:           Sun 03 May 2026 02:13:32 +0000
ROA not after:            Sun 02 May 2027 02:18:32 +0000
asID:                     46026
IP address blocks:        175.111.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c2:9f:42:df:19:fe:d7:99:4a:76:6a:c7:5e:92:d8:d9:6b:d4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:32 2026 GMT
            Not After : May  2 02:18:32 2027 GMT
        Subject: CN=136676A7C2E5DE43A127DECCCB245A72631AC624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:46:21:10:84:ff:d8:82:ff:c0:9b:54:d0:
                    32:ec:39:94:1f:98:1f:1e:b8:ea:76:e2:0d:c5:53:
                    c3:7e:7e:c8:5e:e9:f4:f0:80:89:2e:c5:37:41:fb:
                    44:7b:8e:f5:04:73:90:aa:c5:79:f1:8c:5d:6f:f4:
                    a9:98:91:ee:4b:14:21:6e:7a:28:ed:56:44:da:62:
                    9c:a3:73:d4:43:ee:57:92:0b:63:dc:de:b1:59:76:
                    58:17:3d:44:50:cf:18:25:a9:5f:11:9f:a5:fe:18:
                    80:af:1d:b4:74:ce:a8:b3:ea:e7:01:b1:2f:94:55:
                    c9:0d:65:37:f2:f9:d1:ed:d1:b4:44:3f:2c:79:a8:
                    b3:b3:29:84:bb:1a:66:e9:91:b6:d6:3b:e6:94:37:
                    1a:50:d2:34:b0:c0:da:7d:30:27:f2:e9:f5:ac:5c:
                    1a:19:42:ff:11:fd:e6:14:50:77:45:99:e2:0b:b9:
                    3d:a9:df:5d:ef:c4:c2:c5:0c:42:da:5a:ef:9d:c7:
                    a2:b1:98:86:7c:b8:fb:e5:a5:5a:97:27:2c:15:df:
                    bc:dc:83:f6:73:51:50:80:2a:08:8e:78:a6:b5:47:
                    7c:67:64:cf:f2:ee:d8:82:1d:5c:12:5a:9d:ac:2f:
                    92:9a:3a:3a:bf:15:fa:eb:31:0b:d5:30:51:7e:0f:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:66:76:A7:C2:E5:DE:43:A1:27:DE:CC:CB:24:5A:72:63:1A:C6:24
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:e1:c9:b4:b6:db:e2:4a:1f:41:5c:f9:7e:4f:74:aa:33:39:
         0e:b8:93:b2:6a:09:7c:bc:ef:d7:98:6e:39:12:42:33:26:b5:
         b4:c8:8c:f4:89:8a:81:b0:29:c4:71:f7:94:52:62:e3:bb:c5:
         46:6c:b4:23:c6:81:f9:62:ad:9d:2d:c9:f1:05:59:b4:17:88:
         f5:fb:b9:15:ea:aa:d3:e1:c4:0d:4d:3b:33:32:5c:a0:cd:af:
         13:5e:1a:4a:78:6e:bf:91:0b:75:d7:34:a3:16:2c:7a:2e:3f:
         5f:2c:66:f0:1d:fe:ca:56:f8:f6:e9:32:3b:eb:93:af:f8:07:
         80:f7:9d:13:10:77:56:5d:7d:0c:7d:11:69:c3:ef:5f:cb:61:
         df:e4:dc:9d:53:6a:92:67:9a:33:cd:bf:23:e1:f8:b4:95:72:
         89:4f:eb:90:4a:81:00:3c:72:c0:8c:3f:ee:55:cf:b7:fd:d3:
         a3:ca:7b:d3:45:a2:e1:38:f0:c3:c1:bf:c2:4f:10:61:5d:93:
         97:8a:ed:86:db:1c:c7:02:e8:d3:25:ab:85:b5:ff:b3:59:91:
         16:b8:a0:34:63:e4:a1:a7:9d:ba:3a:eb:a7:c5:96:23:73:5b:
         74:83:5e:66:35:31:e7:93:8a:a7:62:7f:f8:27:cc:fa:6c:f5:
         a8:76:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:03 2026 by rpki-client