Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa
File:                     3131302e3233322e39322e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          xs4faT3yfa3kOER9DqJqQV7lwZT+OYKRCQ1Nqe3yiUI=
Subject key identifier:   B4:A7:83:8F:30:55:2D:BB:E2:AE:60:AB:FC:9A:6B:1C:BD:39:1F:5B
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       75F6C76DA9BC63A1A757D116EC6DFCE8FCCDD938
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa
Signing time:             Sun 03 May 2026 02:18:59 +0000
ROA not before:           Sun 03 May 2026 02:13:59 +0000
ROA not after:            Sun 02 May 2027 02:18:59 +0000
asID:                     23679
IP address blocks:        110.232.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f6:c7:6d:a9:bc:63:a1:a7:57:d1:16:ec:6d:fc:e8:fc:cd:d9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:59 2026 GMT
            Not After : May  2 02:18:59 2027 GMT
        Subject: CN=B4A7838F30552DBBE2AE60ABFC9A6B1CBD391F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:42:9f:d1:d2:33:70:a8:ce:9d:96:fd:7e:
                    02:63:ec:47:93:5c:26:72:bb:a2:42:b9:03:ac:e7:
                    5e:09:39:1e:0b:83:7f:7c:2f:e9:e0:81:09:50:79:
                    70:08:f5:19:4c:50:20:67:16:ce:93:1e:74:d1:d1:
                    bf:ad:14:30:40:6a:5e:2e:ba:28:fa:fd:39:cb:d8:
                    df:f6:8a:2b:24:7a:62:af:da:db:e8:ce:82:8a:16:
                    49:36:7b:78:7c:2d:be:e5:6b:97:79:57:d0:5f:92:
                    b7:1b:37:46:1e:3a:bf:5f:bf:b4:32:26:8f:d6:8b:
                    6f:a9:17:a9:c8:ab:1b:e7:e4:56:07:c5:d6:6d:3a:
                    dc:30:1c:5e:e3:04:cf:69:b9:92:50:ac:7d:12:04:
                    52:d5:28:64:06:18:c0:33:bc:98:46:da:34:21:7b:
                    10:39:5e:93:52:58:09:3d:c2:85:91:29:2c:69:17:
                    0d:8c:a1:70:80:2f:a8:e4:6b:3c:ce:9e:fc:dd:58:
                    db:57:c3:70:c1:ec:e0:9c:fa:4c:7a:45:c1:0a:65:
                    70:ed:67:a7:75:6e:b5:06:37:ad:36:c1:c6:de:e7:
                    cf:45:31:a1:a3:e4:19:49:b0:ea:35:46:6a:ed:2a:
                    9a:31:e3:85:bd:18:6b:2e:fc:29:df:15:d6:19:0f:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A7:83:8F:30:55:2D:BB:E2:AE:60:AB:FC:9A:6B:1C:BD:39:1F:5B
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39322e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:14:e9:2a:4b:32:86:84:44:29:81:ca:fb:53:0f:7c:78:cf:
         d9:2c:5c:cb:2a:f7:4d:59:2f:06:a7:db:b6:3a:2c:ad:34:14:
         cc:f5:12:fc:e4:43:88:7a:92:2b:7b:11:2a:ae:26:19:e0:87:
         cc:31:2a:7a:32:75:ab:27:7f:f1:24:c8:1c:d1:e6:e3:1c:e9:
         c0:ab:00:fb:7f:1f:d2:e1:b1:87:93:43:9f:bc:79:03:f6:32:
         77:eb:ee:53:2d:de:a3:76:e9:cb:72:90:1e:2f:ba:0e:9e:fd:
         20:c3:11:a6:24:a6:6c:cc:de:94:0b:7e:80:f7:99:1c:60:50:
         c0:8d:cb:1b:ac:b3:bb:35:99:5b:a7:e3:0c:f4:c7:fa:64:70:
         8e:71:5c:b0:17:29:6b:a3:0d:86:cb:3d:6c:97:2d:fa:4d:18:
         97:be:4c:42:9e:27:fc:e0:82:92:2a:27:e1:63:e5:cb:d2:00:
         c4:cb:66:cf:f4:e1:4a:10:f8:02:da:38:9a:f8:18:b6:3c:35:
         85:39:43:37:80:1c:af:eb:5b:47:e6:47:bb:ed:c4:23:71:e3:
         fd:15:13:43:14:0e:82:8f:b7:db:6a:20:a4:3a:6e:98:69:56:
         40:67:95:b3:8b:87:94:1a:04:3b:2b:4d:8f:7d:d6:40:ee:27:
         16:9c:2e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:37 2026 by rpki-client