Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          mLD+GhO1xXk2PTbUDcTfshDEYKPNXgJniWHXGxp+RlI=
Subject key identifier:   30:52:3D:5C:FE:67:A2:AF:91:F3:CC:90:8C:F8:E9:A2:AA:5C:A8:F7
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       33B5E3FDC636C6367944C1D32DC0980363796BE9
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:32 +0000
ROA not before:           Sun 03 May 2026 02:13:32 +0000
ROA not after:            Sun 02 May 2027 02:18:32 +0000
asID:                     46026
IP address blocks:        175.111.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b5:e3:fd:c6:36:c6:36:79:44:c1:d3:2d:c0:98:03:63:79:6b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:32 2026 GMT
            Not After : May  2 02:18:32 2027 GMT
        Subject: CN=30523D5CFE67A2AF91F3CC908CF8E9A2AA5CA8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:c3:bd:cd:df:04:c7:fc:d7:ac:99:bc:19:
                    fb:4c:e5:85:f9:ed:d3:6d:18:7d:d7:57:38:6c:09:
                    eb:85:6e:e4:d6:96:ba:43:68:56:e9:4c:4d:dc:0a:
                    36:e0:91:84:ca:5c:3c:86:a4:69:90:d0:6c:10:e7:
                    a4:bf:54:2b:6e:7a:2b:66:c2:4c:c2:75:7a:60:6d:
                    4a:e4:09:35:b9:17:61:1b:73:42:1b:ba:cc:23:32:
                    17:60:bc:f2:62:ac:08:cf:b9:33:da:27:ac:a7:ef:
                    d8:5b:0b:11:9c:fe:c2:3a:73:86:17:ca:0a:20:bb:
                    46:6e:3c:52:51:ac:ec:0c:2e:02:c3:d9:30:8f:8d:
                    fa:23:62:70:c6:f6:41:11:a2:1f:50:12:e6:2e:5e:
                    33:b6:c9:e6:81:de:d4:1f:13:1d:8a:44:b9:f6:03:
                    87:72:38:d1:5b:00:2b:ba:91:15:a5:3a:10:db:92:
                    5a:25:80:d6:9e:96:0e:84:d1:43:a7:f9:86:57:74:
                    50:7a:ef:42:a4:87:78:af:a3:28:a8:24:57:0c:39:
                    21:3e:22:df:14:f6:c4:60:78:8e:6f:2e:73:8b:06:
                    aa:53:b0:dc:9f:29:3c:0a:d3:7d:15:4f:6b:eb:d3:
                    f3:46:5f:db:d3:32:68:c7:a9:c0:a9:3a:7c:01:f8:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:52:3D:5C:FE:67:A2:AF:91:F3:CC:90:8C:F8:E9:A2:AA:5C:A8:F7
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:fb:4a:4d:d1:cb:47:6c:cb:5c:f9:71:bb:97:2c:a3:6c:
         3b:f5:4c:c2:85:fa:f5:80:af:fd:fe:2e:90:3b:d1:56:96:70:
         36:63:3d:38:60:ea:8c:97:77:40:49:ab:45:3e:c5:60:ad:ee:
         c4:38:fa:90:fa:0c:cb:cf:ad:1d:e0:db:0c:97:79:13:c3:1b:
         3e:d6:5a:07:07:62:78:c6:e4:27:6e:f9:25:41:5c:05:a8:38:
         ef:40:75:5d:b1:4c:c3:53:ed:42:6d:1b:bf:9c:e7:f2:43:8b:
         20:87:f3:9b:9e:11:f8:dd:65:46:4f:55:bf:da:fe:e8:7b:da:
         af:16:46:61:b8:56:bc:70:43:76:f6:f1:70:9a:88:ee:ea:28:
         d9:44:f2:0a:e6:30:f7:07:4f:b5:a8:b4:dd:4e:45:55:48:7b:
         bd:40:f5:f3:bc:c4:1b:d3:96:33:ac:8a:b0:5e:de:f2:f9:7f:
         07:25:12:1e:0b:8f:1d:0c:21:d4:ff:de:d4:18:64:86:c2:f0:
         55:eb:a1:27:a4:e5:99:0e:b1:e9:a9:82:ad:b0:13:8d:c4:6c:
         7c:d9:e8:8f:f7:3e:a5:c3:02:b8:bb:1c:5b:25:e0:bb:0b:18:
         12:7b:f2:46:ea:95:37:6e:c2:c3:c2:3a:ca:3f:c8:ac:90:88:
         fd:f4:c8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:14:42 2026 by rpki-client