Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
File:                     3131302e3233322e38362e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier:          P6mqRCOHnrSNGEgykO4qGjHwKpU66Sa9GlMa04q2dNo=
Subject key identifier:   E7:5E:E1:4C:9A:4C:59:E7:B2:E9:59:9B:F7:FC:EE:B1:23:95:34:90
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       69EE282BF375D726BB9D96F24353A6B333DBD7E6
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:48 +0000
ROA not before:           Sun 03 May 2026 02:13:48 +0000
ROA not after:            Sun 02 May 2027 02:18:48 +0000
asID:                     23679
IP address blocks:        110.232.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ee:28:2b:f3:75:d7:26:bb:9d:96:f2:43:53:a6:b3:33:db:d7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:48 2026 GMT
            Not After : May  2 02:18:48 2027 GMT
        Subject: CN=E75EE14C9A4C59E7B2E9599BF7FCEEB123953490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:32:28:58:7d:cd:df:c8:62:b4:57:82:16:f3:
                    ce:23:75:b8:b3:0e:83:5f:f9:b4:8a:19:a6:61:73:
                    a1:a6:37:b7:eb:f5:5d:0e:f5:22:0f:ff:0a:d1:1d:
                    f2:cb:30:68:ca:2b:ae:96:b4:11:d8:51:98:43:82:
                    b3:25:c7:f7:6d:67:f2:7d:8f:20:7a:5f:3c:d9:49:
                    d2:3f:dc:ff:13:09:86:0b:8c:bc:63:e1:41:dd:b6:
                    3d:b7:9a:1f:39:d7:39:ac:91:b4:54:bf:e9:24:68:
                    56:22:8e:26:5e:8d:d7:4c:d2:aa:91:33:91:ca:00:
                    5a:3f:61:b1:31:54:23:b2:01:5b:31:9b:e0:f9:43:
                    90:39:93:f2:c7:38:19:06:a1:5c:f5:44:a4:81:22:
                    1f:64:70:53:4b:d4:89:0b:45:1e:64:58:95:0d:be:
                    32:60:47:9c:fb:89:c0:0a:92:c1:02:72:1c:52:e5:
                    1d:ac:ff:59:fa:8c:16:73:5e:cd:8b:4b:bf:0c:da:
                    5e:5d:2c:22:5e:6d:b0:d6:19:62:a6:33:2a:6a:23:
                    a5:d3:0b:64:91:67:2d:27:de:6f:23:d7:a0:56:ff:
                    e1:de:64:50:a5:56:bc:b4:5e:c7:26:bc:1f:fc:8d:
                    45:3e:6d:c0:24:22:e2:88:64:61:5d:04:7b:b4:e2:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5E:E1:4C:9A:4C:59:E7:B2:E9:59:9B:F7:FC:EE:B1:23:95:34:90
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e38362e302f32332d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:49:f2:d9:77:e1:ef:96:f9:df:42:5f:7d:0f:35:fb:c7:
         db:08:79:30:09:d2:be:cd:ca:dc:9a:d3:98:24:97:9c:44:e5:
         73:72:77:13:a5:d0:5e:9c:a8:52:7c:1e:63:91:7d:41:b8:53:
         1e:48:e7:1e:ef:65:b6:21:e7:a1:b3:bf:aa:3e:34:a8:0a:9a:
         3d:d8:7c:16:b1:e5:b3:a0:bc:bb:dc:48:33:19:b8:45:09:68:
         1a:d5:86:18:66:3f:43:2c:ad:8d:6c:0a:58:3a:f0:2c:41:83:
         01:40:97:e6:5c:48:72:33:f0:b1:98:b1:3a:df:48:a6:41:4f:
         9b:d1:37:44:6a:31:94:2e:b4:63:38:32:9f:98:b9:43:11:70:
         5d:45:7c:c7:1d:35:bc:a4:d7:e2:bf:d0:b7:55:4e:4b:96:6d:
         03:4d:ce:df:17:4f:3a:bc:7e:8a:32:f0:d8:63:a0:22:78:20:
         f8:f0:c5:20:d3:9b:ae:dd:79:40:74:03:04:eb:50:28:9b:9c:
         b2:1a:b1:46:f9:49:31:ed:91:ca:05:03:48:a4:b6:07:a7:5c:
         34:13:2b:ed:1c:33:72:42:66:d9:2d:b2:66:d6:f7:3d:81:ee:
         b4:a3:f9:58:09:58:a8:91:f5:96:5f:d8:cd:26:fb:8f:0a:c8:
         9e:9f:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:17 2026 by rpki-client