Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
File:                     3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa (raw, json)
Hash identifier:          RTqIYaelO6aB36vPeQIFThhqYxOmpKvZg/ovlEXwyL8=
Subject key identifier:   D6:F1:69:EE:27:83:13:79:4C:3F:EC:EC:8F:D7:11:3D:3D:50:30:E0
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       63CBB657EA94F09328BAF46D817A96780C855025
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa
Signing time:             Sun 03 May 2026 02:18:45 +0000
ROA not before:           Sun 03 May 2026 02:13:45 +0000
ROA not after:            Sun 02 May 2027 02:18:45 +0000
asID:                     138841
IP address blocks:        110.232.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:cb:b6:57:ea:94:f0:93:28:ba:f4:6d:81:7a:96:78:0c:85:50:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:45 2026 GMT
            Not After : May  2 02:18:45 2027 GMT
        Subject: CN=D6F169EE278313794C3FECEC8FD7113D3D5030E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:11:16:89:34:2f:1d:7d:cb:2c:6e:1c:a1:7f:
                    e7:13:93:7b:4f:00:d3:90:37:8a:c7:ee:55:ab:3a:
                    19:7f:2c:65:d5:0b:94:d4:5a:3e:42:4a:95:06:8c:
                    17:7b:9e:13:b3:61:76:df:76:0f:47:e5:fb:81:39:
                    fe:6a:a6:47:4f:46:cc:9d:49:e7:a0:0c:91:9a:cb:
                    51:4f:5a:34:bb:c9:61:be:94:db:bc:f2:33:08:9c:
                    9b:01:dc:54:09:9d:e6:2c:b8:ea:11:0f:12:18:9e:
                    a8:8d:e6:f2:1f:0c:8d:24:70:8b:d6:5b:8d:32:14:
                    28:06:77:c3:74:a0:95:c4:af:6d:46:da:1f:22:58:
                    81:52:60:87:0c:d8:23:cc:95:8c:96:9b:f1:93:31:
                    4c:f2:59:66:45:b9:d5:97:00:8f:bc:fb:8a:cb:5f:
                    8e:30:06:e0:b1:83:92:c1:6b:39:da:30:36:28:e9:
                    9b:c1:2c:78:33:3c:ad:fd:76:0e:cd:b9:b7:04:c7:
                    f2:da:b0:b6:c6:f5:0b:5b:d7:a7:a1:2f:33:96:1f:
                    86:4f:6d:e7:0a:75:d2:a1:0b:fd:e8:c9:d4:03:96:
                    f4:37:af:d4:3d:fe:8a:7b:63:f7:33:f0:88:80:c3:
                    c7:52:1a:e6:f9:06:e3:cb:56:08:15:78:36:2a:6f:
                    c5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F1:69:EE:27:83:13:79:4C:3F:EC:EC:8F:D7:11:3D:3D:50:30:E0
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e37332e302f32342d3234203d3e20313338383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:8c:2f:aa:b3:b9:ce:d2:d0:69:47:13:cf:71:db:11:13:e7:
         52:00:76:6a:6b:05:27:e9:4a:02:fc:ed:8a:d1:9e:81:02:65:
         4d:02:da:07:ec:ec:7a:57:3a:9a:65:67:e2:a5:a8:12:37:c2:
         73:33:29:f8:a3:70:28:5e:43:76:97:14:47:d1:51:c2:64:e7:
         c5:c9:55:f0:b8:8f:4d:a8:75:8b:00:3e:97:7b:07:7b:e0:56:
         07:6a:fb:fb:f6:b1:09:02:43:4a:5f:b7:e1:8d:29:7d:95:59:
         ec:9e:2c:1b:78:cb:0c:d0:4d:5f:fd:b9:57:7b:2b:e9:ea:35:
         bc:fd:5c:34:4b:17:a9:ae:63:78:2c:54:35:bc:37:7a:42:7a:
         4f:81:d2:a7:26:01:11:20:e4:f1:6d:6e:c4:6b:3a:c7:ba:06:
         0f:08:80:63:74:e9:53:66:c0:40:c7:63:c3:61:48:ab:df:23:
         dc:0d:dc:47:db:f2:5a:2c:81:c0:c5:25:21:55:fc:15:08:7f:
         03:dc:c4:b7:75:5c:c9:6a:25:2f:63:63:74:d4:a2:c3:75:e8:
         25:d3:ff:0f:f5:ca:b9:4b:cd:50:1d:21:51:94:ed:e9:d0:8d:
         2c:bf:f4:b8:b5:1a:9d:d4:59:09:8c:6f:bf:92:18:5c:80:31:
         4e:9f:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:21 2026 by rpki-client