Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          cBuCEcM59m7bokueA5utqjCb5MDgTJH77vwBhsI0byM=
Subject key identifier:   6B:28:A7:F8:4D:1B:09:FC:1D:7E:72:65:76:BA:08:80:A2:43:D7:F8
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       29178156DAD9E8B6C99E9F94F694C5C936821998
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:36 +0000
ROA not before:           Sun 03 May 2026 02:13:36 +0000
ROA not after:            Sun 02 May 2027 02:18:36 +0000
asID:                     46026
IP address blocks:        175.111.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:17:81:56:da:d9:e8:b6:c9:9e:9f:94:f6:94:c5:c9:36:82:19:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:36 2026 GMT
            Not After : May  2 02:18:36 2027 GMT
        Subject: CN=6B28A7F84D1B09FC1D7E726576BA0880A243D7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:88:ee:06:a1:68:f7:ac:e1:a6:de:5a:5b:
                    03:90:9c:3f:7f:70:41:1d:e5:6e:4d:cb:40:f0:88:
                    19:d5:a0:a0:bb:29:52:11:61:4c:73:71:8d:c3:cd:
                    77:11:42:df:07:79:c8:3b:5f:93:05:54:7f:d6:3a:
                    41:fb:d0:ad:cd:df:60:e2:53:5e:f8:c2:b9:86:55:
                    2a:56:22:25:27:ec:27:df:ef:95:f2:c1:f5:30:81:
                    f1:39:23:3c:da:34:64:7a:a8:06:00:22:7e:a1:e6:
                    0b:b3:f1:a4:70:66:97:f8:fe:72:c1:fd:33:0b:ee:
                    30:63:2f:df:19:8e:b6:97:f9:1e:0a:44:a6:1e:62:
                    c4:cf:25:83:7f:18:e3:f1:bf:ff:54:6b:34:a2:7b:
                    0d:ff:50:05:5d:f5:0c:5f:16:92:b0:93:b4:45:a4:
                    42:40:ee:60:6c:e8:9a:ed:93:36:dd:02:8a:b5:85:
                    8f:06:ce:29:3f:49:3b:c9:28:51:b8:34:11:d7:d5:
                    94:30:89:46:c5:9d:0a:cb:fd:e8:99:a2:f5:c7:2b:
                    3a:4e:4a:8a:14:45:64:89:f2:ab:ed:e0:1e:b2:29:
                    73:88:cf:de:84:4f:ad:fa:4a:fa:45:ea:91:a8:50:
                    d3:29:71:fb:f9:2b:3f:d0:48:e2:ce:d9:d1:dd:e4:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:28:A7:F8:4D:1B:09:FC:1D:7E:72:65:76:BA:08:80:A2:43:D7:F8
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:83:8b:9c:6a:7a:51:fb:06:f8:38:44:1d:a3:18:01:6f:
         e6:50:75:ed:53:7d:44:b3:0c:6f:15:b8:75:62:92:f2:2d:16:
         fe:ad:4f:84:fc:96:2e:d2:8e:7b:d5:27:5f:10:e7:62:e8:5a:
         7c:b5:20:77:e0:30:69:d0:4f:e7:34:41:f5:21:79:7f:8c:44:
         67:70:09:ed:9f:3a:65:c4:d1:cd:40:15:07:f1:9a:bb:e2:f9:
         e6:9c:94:08:9a:19:d8:14:94:49:a6:1d:40:da:ae:bb:33:93:
         da:4f:82:de:95:33:d7:b8:70:87:06:a0:71:e2:06:7b:2c:f6:
         28:bb:fb:99:a7:c9:f9:49:87:39:9f:52:e3:e3:78:6c:18:13:
         ea:b3:80:91:86:85:01:53:9d:18:07:0c:9f:a8:16:34:a9:50:
         18:28:90:21:b6:7f:5c:12:66:bf:b8:30:9d:3b:c3:e8:10:19:
         65:47:5f:75:a8:c0:b5:d5:af:9e:f2:eb:74:56:63:51:73:7c:
         55:45:04:c5:6d:8f:20:f9:0a:14:07:57:2d:7d:81:85:8a:03:
         f1:83:6c:7f:30:32:75:d0:3f:87:a7:83:9d:eb:5f:22:4f:c5:
         ac:3b:57:70:90:6f:ff:5e:54:55:8d:70:7c:50:0d:db:7c:36:
         ce:c1:fb:15
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKReBVtrZ6LbJnp+U9pTFyTaCGZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY2OEJDREE4OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYy
RTNCMDc5QzAeFw0yNjA1MDMwMjEzMzZaFw0yNzA1MDIwMjE4MzZaMDMxMTAvBgNV
BAMTKDZCMjhBN0Y4NEQxQjA5RkMxRDdFNzI2NTc2QkEwODgwQTI0M0Q3RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxG4juBqFo96zhpt5aWwOQnD9/
cEEd5W5Ny0DwiBnVoKC7KVIRYUxzcY3DzXcRQt8Hecg7X5MFVH/WOkH70K3N32Di
U174wrmGVSpWIiUn7Cff75XywfUwgfE5IzzaNGR6qAYAIn6h5guz8aRwZpf4/nLB
/TML7jBjL98ZjraX+R4KRKYeYsTPJYN/GOPxv/9UazSiew3/UAVd9QxfFpKwk7RF
pEJA7mBs6JrtkzbdAoq1hY8Gzik/STvJKFG4NBHX1ZQwiUbFnQrL/eiZovXHKzpO
SooURWSJ8qvt4B6yKXOIz96ET636SvpF6pGoUNMpcfv5Kz/QSOLO2dHd5GrNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUayin+E0bCfwdfnJldroIgKJD1/gwHwYDVR0j
BBgwFoAUpmi82omtA11Ja2TPJyRaXy47B5wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWZmNGViY2QtMjljZi00ZWVjLWE5MmEtZDExMzZmNWY5OTM2LzAvQTY2OEJDREE4
OUFEMDM1RDQ5NkI2NENGMjcyNDVBNUYyRTNCMDc5Qy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9BNjY4QkNEQTg5QUQwMzVENDk2QjY0Q0YyNzI0NUE1RjJFM0Iw
NzlDLmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNkLTI5Y2YtNGVlYy1h
OTJhLWQxMTM2ZjVmOTkzNi8wLzMxMzczNTJlMzEzMTMxMmUzMTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAr292MA0GCSqG
SIb3DQEBCwUAA4IBAQBvZIOLnGp6UfsG+DhEHaMYAW/mUHXtU31EswxvFbh1YpLy
LRb+rU+E/JYu0o571SdfEOdi6Fp8tSB34DBp0E/nNEH1IXl/jERncAntnzplxNHN
QBUH8Zq74vnmnJQImhnYFJRJph1A2q67M5PaT4LelTPXuHCHBqBx4gZ7LPYou/uZ
p8n5SYc5n1Lj43hsGBPqs4CRhoUBU50YBwyfqBY0qVAYKJAhtn9cEma/uDCdO8Po
EBllR191qMC11a+e8ut0VmNRc3xVRQTFbY8g+QoUB1ctfYGFigPxg2x/MDJ10D+H
p4Od618iT8WsO1dwkG//XlRVjXB8UA3bfDbOwfsV
-----END CERTIFICATE-----
Generated at Wed May 13 00:31:07 2026 by rpki-client