Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e36342e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          3IN/PTtU+C0W77CMhoBipBTjoP09yMq6uzP39QujlYU=
Subject key identifier:   28:A2:28:3F:D0:CB:D0:6D:FD:24:C4:49:B5:A1:1A:8C:50:34:CD:96
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       805040F178BB91FE2259A17B4A1B47722B2992
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:19:01 +0000
ROA not before:           Sun 03 May 2026 02:14:01 +0000
ROA not after:            Sun 02 May 2027 02:19:01 +0000
asID:                     23679
IP address blocks:        110.232.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            80:50:40:f1:78:bb:91:fe:22:59:a1:7b:4a:1b:47:72:2b:29:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:14:01 2026 GMT
            Not After : May  2 02:19:01 2027 GMT
        Subject: CN=28A2283FD0CBD06DFD24C449B5A11A8C5034CD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:be:3e:c4:fb:c2:9f:28:60:1f:fb:c3:3e:
                    3b:6f:18:15:ee:f4:0b:c4:ac:8e:b9:47:af:a1:3e:
                    7d:3d:d1:b6:1a:63:ce:f8:95:a2:bf:21:ad:64:fe:
                    46:18:51:26:b3:c1:4e:1a:ed:d5:91:cf:e1:e8:ec:
                    d3:b7:1a:0c:69:f9:94:60:f9:3b:fa:ba:e4:0f:11:
                    02:78:0a:67:b6:f7:80:bd:7f:ba:23:cc:60:b4:8e:
                    cc:f0:0f:7d:e1:81:69:66:89:82:1a:0e:1d:a6:16:
                    ff:19:5c:70:75:f2:49:d3:df:b1:9c:63:c1:e7:d6:
                    c2:4c:fb:a7:d9:bc:7c:cd:ce:37:d4:20:63:8b:43:
                    58:30:71:53:e0:7c:7d:bd:9e:56:2f:fa:ff:64:36:
                    68:c3:ba:fb:07:54:61:2a:56:e1:3c:b0:db:30:8f:
                    ea:88:fd:2a:cc:29:fc:46:67:5f:ab:a4:e1:fe:93:
                    08:db:fa:8f:ef:bb:98:47:c3:4f:61:83:2c:e9:a1:
                    2b:df:dc:9a:11:77:e8:0b:5d:0e:3c:e6:44:3d:ea:
                    97:90:99:2f:ca:51:fe:53:f8:00:55:31:74:30:4e:
                    88:f9:38:31:0c:3a:50:33:1b:6f:68:ab:d3:60:1b:
                    3f:22:e8:2b:fc:b1:9e:73:5d:3b:ad:80:26:b7:94:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A2:28:3F:D0:CB:D0:6D:FD:24:C4:49:B5:A1:1A:8C:50:34:CD:96
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e36342e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:8b:18:51:2a:8f:dc:f0:e7:c2:2c:60:87:57:59:83:3f:09:
         da:8a:8b:b2:8a:7f:c0:fb:2d:00:c4:d4:67:03:82:b9:08:39:
         e3:4a:4d:5e:2b:87:5a:e7:9f:04:ea:44:8c:5e:f4:b1:b6:9b:
         fc:87:41:28:6c:69:6f:eb:63:18:1d:76:c6:c6:a3:75:ce:fa:
         d9:86:4a:6a:2e:cc:b7:89:5f:41:bc:ed:67:44:b0:54:cc:e8:
         f4:d1:cc:c3:3a:e5:b5:2f:2c:19:68:73:88:05:11:ab:21:13:
         aa:54:64:c9:b9:c7:6f:8b:03:08:8d:ad:6b:5b:40:71:08:e7:
         13:b1:24:ed:70:72:e1:41:8f:29:9d:35:90:14:f7:ec:43:e7:
         73:8e:6e:66:66:9d:d5:4d:d8:3b:e4:2a:69:73:b7:e7:e1:63:
         43:bd:c3:20:f3:e9:8c:26:f9:36:aa:8b:e1:af:7d:d0:2d:40:
         6a:45:8e:85:b5:07:fd:72:e2:2d:32:5f:6d:9e:4e:e9:ec:0f:
         c7:c8:0f:68:a6:88:cb:0a:15:d0:2c:fa:82:84:9e:d9:0e:70:
         f4:db:cd:6c:d0:01:c3:67:e9:13:b7:b0:2e:c0:36:f0:d2:de:
         99:72:7c:75:cf:2d:09:c9:f5:ae:4c:36:98:ad:bf:4b:2e:00:
         6f:e3:fd:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:24:58 2026 by rpki-client