Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          iYrGJJ9iIv+cRwIblIq+9q3Q7tv/1rCHNku1x0uMX3o=
Subject key identifier:   43:43:34:E8:90:FA:F2:07:E8:19:1D:CB:72:FF:CF:82:56:15:DC:40
Certificate issuer:       /CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
Certificate serial:       136C9842D4126AFD8525DB9F9703E452165245A9
Authority key identifier: A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa
Signing time:             Sun 03 May 2026 02:18:35 +0000
ROA not before:           Sun 03 May 2026 02:13:35 +0000
ROA not after:            Sun 02 May 2027 02:18:35 +0000
asID:                     46026
IP address blocks:        175.111.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl
                          rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:6c:98:42:d4:12:6a:fd:85:25:db:9f:97:03:e4:52:16:52:45:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A668BCDA89AD035D496B64CF27245A5F2E3B079C
        Validity
            Not Before: May  3 02:13:35 2026 GMT
            Not After : May  2 02:18:35 2027 GMT
        Subject: CN=434334E890FAF207E8191DCB72FFCF825615DC40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:c6:b0:57:c8:fa:25:25:e0:5e:5f:0f:82:
                    08:47:aa:36:4d:f3:ae:b1:c1:d0:c3:0b:d6:f3:8d:
                    f1:e8:ad:41:84:01:a4:2e:b5:0b:b3:9e:d4:20:a5:
                    9c:6b:aa:33:95:fd:9a:94:66:ea:de:a2:c7:82:51:
                    9b:da:92:8d:dc:c1:c9:2a:e8:9d:23:fc:0e:dd:15:
                    8f:cf:4c:3e:03:75:78:cc:7f:b2:4d:e7:e5:a0:a6:
                    d9:2d:77:38:c2:53:44:a8:15:8b:3c:6a:b8:16:9b:
                    1b:a8:07:ae:06:39:4c:22:db:7d:21:41:9b:e0:ba:
                    8d:b4:f2:ba:2c:84:45:d2:56:84:45:e6:f5:e7:af:
                    91:f1:72:a3:a6:a8:f0:d7:e7:fb:48:3a:96:06:43:
                    9f:ac:76:c0:9e:0e:57:63:02:69:67:19:d3:f4:5f:
                    f7:ee:e0:31:d2:0e:aa:58:92:55:6c:c0:22:88:45:
                    81:dc:15:93:9b:c3:34:73:d7:dd:fd:87:67:7d:eb:
                    c7:11:e0:46:e0:dd:f0:16:52:d1:7d:12:02:65:bc:
                    a6:14:39:99:71:c0:48:08:e5:c2:2e:9e:15:33:15:
                    c5:da:9b:5a:14:51:c4:f4:e7:cf:bc:a2:09:19:93:
                    26:c5:46:1c:fd:74:6d:43:c4:7a:df:af:b7:be:36:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:43:34:E8:90:FA:F2:07:E8:19:1D:CB:72:FF:CF:82:56:15:DC:40
            X509v3 Authority Key Identifier:
                keyid:A6:68:BC:DA:89:AD:03:5D:49:6B:64:CF:27:24:5A:5F:2E:3B:07:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/A668BCDA89AD035D496B64CF27245A5F2E3B079C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A668BCDA89AD035D496B64CF27245A5F2E3B079C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:3b:5b:0c:b2:1f:01:0a:26:65:b9:56:ff:ef:bc:6c:cd:
         c4:38:c3:47:31:39:89:35:8f:12:fc:8c:57:b3:e3:8e:3c:e2:
         50:69:c9:a4:f6:2b:a7:70:50:7a:46:5a:c9:cb:e6:ef:a1:1b:
         b7:58:46:5b:50:16:90:e1:15:55:e6:d4:23:28:0f:9c:a5:ed:
         88:16:2a:88:3b:66:1b:d0:33:a2:d0:dd:f7:7c:81:23:68:3d:
         0f:5d:04:3f:b2:61:9f:6b:72:fe:90:7e:41:3d:22:af:48:a0:
         72:cb:dc:28:ff:48:0f:a9:d4:58:23:84:bc:b2:36:e4:ac:50:
         9a:67:d2:cd:97:14:96:c0:a4:63:57:d3:5d:2f:98:54:f8:89:
         19:55:66:8c:f8:44:97:90:75:fd:4b:5a:86:9e:48:a5:2c:0e:
         60:b3:2d:6e:51:be:64:ea:1e:b4:aa:0f:9a:fe:5e:d9:bb:19:
         af:d9:54:e8:d0:26:4e:1a:63:e5:6a:b9:bb:4b:af:24:20:a3:
         64:b5:b6:c1:04:3d:41:46:c0:66:c6:55:96:cd:f8:5c:8b:75:
         a0:4d:5c:e9:93:47:84:c0:40:41:e5:89:52:0b:4c:f0:b9:b8:
         a1:5e:56:22:89:fd:95:7a:ba:d8:21:ba:75:07:cb:73:53:cc:
         08:d4:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:06 2026 by rpki-client