Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e39302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          891+2zgmMt/EpVqbih24j08Ovqpt5uHCs8J7egVC5RU=
Subject key identifier:   82:3E:C3:1C:20:D7:67:3D:AC:38:89:B7:4A:E2:29:01:D3:23:7A:FE
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       7F4AD862503E4E38F436E0F4F4850DC97984012F
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:52 +0000
ROA not before:           Sun 03 May 2026 02:13:52 +0000
ROA not after:            Sun 02 May 2027 02:18:52 +0000
asID:                     23679
IP address blocks:        110.232.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4a:d8:62:50:3e:4e:38:f4:36:e0:f4:f4:85:0d:c9:79:84:01:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:52 2026 GMT
            Not After : May  2 02:18:52 2027 GMT
        Subject: CN=823EC31C20D7673DAC3889B74AE22901D3237AFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:c0:0b:bc:6c:35:f2:68:97:6d:95:5c:fd:
                    fc:40:45:a3:9f:c4:a2:4e:64:4b:fc:f7:95:df:f1:
                    28:93:9b:82:28:3e:9a:d7:a2:9b:e4:6a:13:8f:4f:
                    9f:6d:2b:e7:2d:e0:02:0f:7f:55:77:ca:c1:cf:df:
                    b3:30:5f:d9:4d:a3:b9:8d:da:3a:07:1f:9e:ce:a5:
                    7f:7f:64:e1:37:de:e1:fd:e4:a9:45:f4:91:5f:b4:
                    21:08:e9:d2:f0:1f:af:12:df:d4:28:81:3e:a5:67:
                    4f:90:5f:da:22:6c:66:7f:65:dc:14:e9:c1:63:8b:
                    cd:7c:51:24:6e:94:a4:73:6e:92:f1:17:71:cc:81:
                    d8:3c:54:3c:3c:21:a0:4f:de:0c:2f:23:70:e9:86:
                    cb:96:e9:93:9a:aa:c1:8f:2e:8a:af:29:15:83:a6:
                    b6:33:b2:f1:27:56:93:ce:dc:85:b8:40:a3:a6:3c:
                    42:10:bc:02:90:36:2f:c1:c3:e2:ce:8a:aa:e4:31:
                    1d:e2:42:99:e4:5c:01:66:8d:0e:b1:f5:18:8b:46:
                    3c:8e:f5:3c:53:64:4b:e8:fa:00:d5:4e:04:5b:56:
                    06:5b:90:8c:11:c6:a3:cf:50:5d:4f:5e:4e:bc:c9:
                    30:b8:99:ad:74:17:72:5b:05:db:b6:2d:db:e7:7f:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3E:C3:1C:20:D7:67:3D:AC:38:89:B7:4A:E2:29:01:D3:23:7A:FE
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39302e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:41:ad:21:8e:ff:03:20:f3:93:51:f0:9a:83:c0:42:22:66:
         fd:db:61:b8:fe:e2:38:54:9f:dd:f1:df:85:e7:6d:db:f7:8c:
         bf:5d:4a:bf:2b:39:c0:45:fc:77:6d:29:5f:12:c9:17:7d:34:
         50:5d:0e:fa:2e:83:0d:b9:b1:da:66:9e:19:06:43:15:0f:06:
         32:2a:d7:0d:81:08:08:66:35:8e:c1:b9:00:4e:a5:4e:b9:49:
         1e:31:b3:5f:24:7b:95:c9:5d:91:c9:75:74:7d:03:b7:d3:e0:
         bb:b2:41:47:6d:27:54:65:e8:b5:bb:3e:90:df:af:37:32:88:
         58:7e:bb:b3:10:ea:6a:95:55:f1:d0:ac:50:7c:9c:af:5a:fb:
         df:a6:9e:6c:49:ba:10:0a:27:27:fc:3e:06:bc:d2:a5:71:54:
         3c:bc:1a:b9:2f:5c:aa:d2:89:e3:8c:0b:f7:db:65:00:25:8c:
         d8:3a:f1:db:c2:4b:43:ac:24:d1:b6:42:a5:12:45:f8:d6:f1:
         34:a1:c4:92:9d:40:51:05:d4:dc:db:b5:6a:91:ef:6c:83:ec:
         b9:f6:63:a3:22:76:33:8b:5f:ed:08:fc:4c:db:fb:aa:53:d6:
         81:2a:b2:f8:e2:28:3d:31:66:4e:28:53:9c:89:91:ed:fa:d2:
         d4:e9:88:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:54:31 2026 by rpki-client