Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e37312e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          z049aMXB3IhGVJStLTDmaIGIZggOlyz/4mUtkG+HcL8=
Subject key identifier:   AE:2C:CD:57:2A:13:B2:32:03:0E:D0:6A:A3:01:2C:6D:F6:55:1F:9F
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       08FD13A13A7720F241338D3C813FE918C785368D
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:55 +0000
ROA not before:           Sun 03 May 2026 02:13:55 +0000
ROA not after:            Sun 02 May 2027 02:18:55 +0000
asID:                     23679
IP address blocks:        110.232.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fd:13:a1:3a:77:20:f2:41:33:8d:3c:81:3f:e9:18:c7:85:36:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:55 2026 GMT
            Not After : May  2 02:18:55 2027 GMT
        Subject: CN=AE2CCD572A13B232030ED06AA3012C6DF6551F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:65:4d:bb:20:17:e8:ac:9e:44:1f:96:68:
                    bf:00:ae:f5:73:aa:88:a4:9e:86:71:1f:8d:e7:21:
                    cc:b6:fe:92:f5:19:65:35:d2:a6:2f:6b:f7:a1:ab:
                    1e:cc:85:2f:0a:66:ee:56:03:e8:03:5c:b6:ff:71:
                    8a:8c:b9:42:50:59:b6:71:8c:d4:32:7c:2a:19:d4:
                    96:31:7c:6d:87:fc:23:ce:ff:68:ff:91:1d:44:91:
                    c6:dc:df:bf:45:3e:5f:a5:3d:49:5d:ab:d2:42:20:
                    83:a1:1a:4c:00:49:1f:28:13:64:fa:ae:79:a5:04:
                    c4:48:45:50:e3:6d:f1:46:bf:8a:cf:b7:7b:90:37:
                    a9:07:fe:23:0a:97:2f:b2:f8:f4:51:9b:14:82:a3:
                    eb:7d:e5:da:75:fd:d5:b6:9a:c3:e5:0a:05:dc:b2:
                    9e:c8:23:b8:03:2e:f1:7e:f2:63:f7:31:76:32:2e:
                    5f:98:f4:3d:a1:44:9e:f2:b1:f4:3d:ce:d3:bc:dc:
                    2e:04:ab:a7:dc:98:13:ee:c9:d2:b4:e9:ac:8d:f4:
                    13:03:a7:ed:87:8c:5d:66:91:7d:d5:dd:0c:d3:6f:
                    78:c0:23:27:96:94:a0:38:ad:5c:07:02:f8:9a:84:
                    62:f5:d2:49:d3:1a:ff:40:fc:9f:55:9d:20:4d:d2:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2C:CD:57:2A:13:B2:32:03:0E:D0:6A:A3:01:2C:6D:F6:55:1F:9F
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37312e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:2b:1e:05:89:6f:ce:ff:a6:40:8f:06:22:3b:4c:49:d9:
         62:cc:57:57:33:eb:af:49:4f:1a:5d:a7:06:ce:56:79:52:55:
         5a:65:ae:b5:28:f2:40:58:88:f6:8e:b6:f4:98:cd:29:22:58:
         c2:64:96:0c:df:7a:1d:76:db:36:49:7c:98:60:eb:b4:48:64:
         1a:52:dd:13:df:3b:10:35:2e:2a:e3:4a:21:e1:af:89:57:bc:
         1e:82:9c:2b:8e:60:3a:b4:d8:01:d3:39:2f:4c:b0:15:b6:fb:
         d8:c6:0b:29:85:38:ed:7a:5f:6c:7c:3f:d3:39:88:37:bb:81:
         0c:fb:11:4a:5c:99:9a:1b:16:fb:c7:01:bf:cd:cd:57:9b:80:
         3b:c8:94:ea:14:1f:22:0d:51:ce:07:88:01:af:62:e5:1d:12:
         9f:57:de:56:c8:2c:bf:53:61:e4:02:6a:d2:de:b1:63:ab:3f:
         97:46:81:c2:87:66:dc:0c:b7:b8:04:7f:01:0a:17:63:ea:48:
         ba:5c:3d:4a:f0:3a:d9:53:dc:4c:e4:f8:f3:31:89:33:fc:b5:
         34:54:30:77:87:3a:14:8f:cf:0a:c3:07:2e:33:28:41:f5:57:
         b2:6b:aa:22:b8:d1:bc:2c:e0:2b:85:63:38:cf:2e:75:01:f3:
         be:fa:88:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:17 2026 by rpki-client