Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e38342e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          j0AOXgOV2uw1jUbSUluY3OxkY59Bwe1T699p35DomXw=
Subject key identifier:   C1:0D:3C:9A:C9:62:44:88:1D:14:11:4B:7D:1F:8D:FE:3E:59:02:8F
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       0AF80977F6ED6045A47893453C5E2C3AE133680E
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:52 +0000
ROA not before:           Sun 03 May 2026 02:13:52 +0000
ROA not after:            Sun 02 May 2027 02:18:52 +0000
asID:                     23679
IP address blocks:        110.232.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f8:09:77:f6:ed:60:45:a4:78:93:45:3c:5e:2c:3a:e1:33:68:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:52 2026 GMT
            Not After : May  2 02:18:52 2027 GMT
        Subject: CN=C10D3C9AC96244881D14114B7D1F8DFE3E59028F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:15:2a:49:f1:c1:16:8a:1a:07:a8:46:a2:
                    54:59:2b:1a:e7:c1:d2:70:50:f5:0e:d3:63:b3:ad:
                    5c:f3:b2:a8:1b:9d:3e:e2:26:d4:2f:0c:c0:ee:54:
                    0a:2f:b7:fb:8c:a9:15:ef:dd:bc:05:03:be:c6:9c:
                    fd:2a:a9:e2:2c:0d:3c:a6:c3:b2:77:ae:14:65:c8:
                    d5:80:24:59:78:ef:6f:38:3b:b9:9e:68:4d:92:01:
                    37:3b:ac:8b:1a:22:e5:4e:50:cc:9b:b4:08:d2:30:
                    67:42:e8:69:db:d3:80:f0:98:5f:89:fc:27:5b:94:
                    8a:50:69:2b:25:17:63:73:ca:a8:c8:c6:fe:5c:c5:
                    17:b9:f2:ff:81:c9:ea:72:83:d3:53:a2:7a:87:9c:
                    8e:d0:cf:28:22:ba:cb:b8:cb:9d:1f:f1:71:10:6f:
                    d7:74:2a:c7:76:04:e4:40:52:45:e4:dc:ea:01:34:
                    00:03:46:42:c8:27:83:31:a3:ab:ab:7d:a8:88:0f:
                    41:a1:82:72:e1:0d:f8:cf:ab:01:ec:08:e9:90:59:
                    30:2d:13:bd:d1:ba:e8:9e:af:54:46:a9:22:87:96:
                    3c:61:6f:54:13:0b:89:53:54:12:06:16:c5:71:d0:
                    da:f8:b1:04:86:88:12:60:2d:62:b8:c4:40:fd:1a:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0D:3C:9A:C9:62:44:88:1D:14:11:4B:7D:1F:8D:FE:3E:59:02:8F
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38342e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:08:d4:bf:e0:60:14:9b:53:5a:3e:11:a2:08:e6:53:89:
         a1:95:f8:36:8c:63:9d:03:37:43:3a:f9:d7:ad:ce:51:dc:05:
         df:86:d5:53:b9:9f:cb:72:2e:2e:8f:8a:ed:2a:2f:e4:81:43:
         6f:7f:ac:52:55:05:c2:ef:77:96:f2:0d:53:63:f1:86:13:22:
         ad:53:90:8b:f3:b7:3e:43:ec:93:99:78:f3:13:6f:33:49:c0:
         08:5a:de:37:8b:b9:da:1d:af:da:79:0b:55:76:bd:23:e8:e3:
         c7:74:43:55:e9:65:4e:4d:9a:93:e8:68:7c:62:1f:5a:36:7f:
         3b:dd:4f:c7:68:c1:8b:bf:b3:f5:00:a0:b1:15:35:35:d1:ab:
         46:9e:d2:18:12:3a:f9:c0:9c:c5:26:d4:96:54:23:ae:be:1c:
         86:54:aa:fe:b8:e1:45:a7:5c:82:f1:32:f0:69:56:48:80:dc:
         af:70:61:6c:4e:b1:fb:b7:f0:7d:a8:1f:e5:d2:82:b7:d7:32:
         e8:f3:e0:00:ce:b3:26:20:50:9b:d8:80:2d:5f:1b:a4:f1:35:
         57:b1:e1:98:ec:32:40:e2:b2:ef:c5:6d:5b:a7:a4:9a:fb:8c:
         fc:84:2e:1a:4d:f9:7f:ad:b5:5a:fd:b0:6f:5a:5b:df:32:60:
         ff:7a:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:14 2026 by rpki-client