Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa
File:                     3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa (raw, json)
Hash identifier:          t/8pHpfgqlNMI7Mh8ZlLXpqhndWA47bVCbCU2K25nW0=
Subject key identifier:   71:92:6F:0D:83:FD:DB:D5:18:AB:DC:DE:AD:03:7F:46:35:5B:04:CF
Certificate issuer:       /CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
Certificate serial:       6C583C68657248671EC29F1DED1FAA771D663FF6
Authority key identifier: D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa
Signing time:             Sun 03 May 2026 02:18:43 +0000
ROA not before:           Sun 03 May 2026 02:13:43 +0000
ROA not after:            Sun 02 May 2027 02:18:43 +0000
asID:                     152780
IP address blocks:        110.232.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl
                          rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:58:3c:68:65:72:48:67:1e:c2:9f:1d:ed:1f:aa:77:1d:66:3f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D09EA95FF10C0166C2954C997A8A4989BD890A87
        Validity
            Not Before: May  3 02:13:43 2026 GMT
            Not After : May  2 02:18:43 2027 GMT
        Subject: CN=71926F0D83FDDBD518ABDCDEAD037F46355B04CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a5:25:cd:d9:55:f2:75:e0:b9:22:61:c0:53:
                    46:ec:57:cc:9b:ed:02:56:72:ff:99:49:fa:9f:c2:
                    04:d5:a8:f7:1f:ff:e8:e0:05:3e:3c:33:d2:87:6d:
                    63:0f:2b:a3:0b:12:82:80:98:ea:34:ca:e8:d9:07:
                    82:b6:90:ab:92:25:18:31:2a:c9:4c:80:02:2a:db:
                    fe:db:a1:e4:7e:dc:65:be:d6:9e:6e:26:c0:fe:f8:
                    6d:30:c8:fb:2d:d9:b9:0e:7f:a8:1c:e2:d0:86:1b:
                    5d:85:df:e3:12:1f:a5:36:e1:2a:fb:3b:ff:c0:aa:
                    3f:da:72:ae:02:d0:0c:91:35:45:16:fa:92:3c:63:
                    7a:db:97:21:2d:fd:a1:11:f0:40:ab:19:11:17:96:
                    be:53:7b:e3:59:54:28:75:8c:db:d3:fd:d2:bc:07:
                    0f:cc:4f:7c:e7:4c:38:6c:ee:85:f5:36:fd:3c:67:
                    4f:52:96:00:89:65:1e:89:9b:62:dc:68:56:5d:83:
                    10:99:2f:16:ef:a5:cb:7d:e4:cb:91:3f:0f:eb:14:
                    22:5d:9c:c3:5e:c7:b2:aa:e5:1f:81:18:3c:84:4f:
                    e6:50:bd:61:42:68:35:c6:ec:ca:60:ba:dc:f2:6a:
                    47:f2:93:c0:33:87:63:ca:63:33:ac:bb:19:49:7c:
                    98:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:92:6F:0D:83:FD:DB:D5:18:AB:DC:DE:AD:03:7F:46:35:5B:04:CF
            X509v3 Authority Key Identifier:
                keyid:D0:9E:A9:5F:F1:0C:01:66:C2:95:4C:99:7A:8A:49:89:BD:89:0A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/D09EA95FF10C0166C2954C997A8A4989BD890A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D09EA95FF10C0166C2954C997A8A4989BD890A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3131302e3233322e39352e302f32342d3234203d3e20313532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:10:c8:6c:7e:c9:f4:3b:78:e1:35:e3:0b:bf:13:7a:73:
         f8:bc:79:df:77:a8:a0:ec:9a:1d:7a:16:6d:ce:04:8f:c8:06:
         d2:f2:31:d1:4a:ab:aa:fa:f9:bf:10:36:77:43:c4:63:f4:20:
         52:d9:dc:6c:e3:2e:45:f9:d7:52:08:72:9a:38:81:df:48:99:
         d0:c7:ba:6a:c4:9f:44:61:55:3a:76:ef:9d:74:62:ab:5e:41:
         05:16:ad:5e:32:d6:0a:ae:aa:68:cd:04:94:a4:8e:d3:02:e5:
         28:44:5d:6d:31:17:71:30:4f:b5:81:4a:87:fa:c2:a2:1a:6a:
         9a:eb:3a:c6:02:3f:ef:b3:0d:3b:3b:06:e6:3b:7d:f4:88:03:
         55:cc:b3:d6:d0:d6:3e:43:e1:2b:7e:d9:ca:db:63:40:cb:2e:
         14:73:f4:23:e0:3a:d8:9a:b3:a6:eb:53:1c:bc:83:41:82:2d:
         41:50:45:8e:55:93:4d:3a:a5:8a:fe:cb:b1:2d:ba:e0:64:ce:
         58:c9:3f:8a:c9:e2:d0:f0:9a:4f:8b:62:5d:11:90:b4:00:64:
         28:00:39:f3:b2:82:3f:2b:a8:4b:0d:47:69:4e:ee:05:5a:13:
         ff:ea:f5:70:89:64:0d:5d:9a:d4:c5:46:cb:2a:dc:9f:29:53:
         8c:e6:9d:41
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbFg8aGVySGcewp8d7R+qdx1mP/YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5RUE5NUZGMTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlC
RDg5MEE4NzAeFw0yNjA1MDMwMjEzNDNaFw0yNzA1MDIwMjE4NDNaMDMxMTAvBgNV
BAMTKDcxOTI2RjBEODNGRERCRDUxOEFCRENERUFEMDM3RjQ2MzU1QjA0Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4pSXN2VXydeC5ImHAU0bsV8yb
7QJWcv+ZSfqfwgTVqPcf/+jgBT48M9KHbWMPK6MLEoKAmOo0yujZB4K2kKuSJRgx
KslMgAIq2/7boeR+3GW+1p5uJsD++G0wyPst2bkOf6gc4tCGG12F3+MSH6U24Sr7
O//Aqj/acq4C0AyRNUUW+pI8Y3rblyEt/aER8ECrGREXlr5Te+NZVCh1jNvT/dK8
Bw/MT3znTDhs7oX1Nv08Z09SlgCJZR6Jm2LcaFZdgxCZLxbvpct95MuRPw/rFCJd
nMNex7Kq5R+BGDyET+ZQvWFCaDXG7Mpgutzyakfyk8Azh2PKYzOsuxlJfJh3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcZJvDYP929UYq9zerQN/RjVbBM8wHwYDVR0j
BBgwFoAU0J6pX/EMAWbClUyZeopJib2JCocwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjAxNDMyY2MtM2JjOS00ODU4LWI1MDYtMjE4YWFiMGIwODljLzAvRDA5RUE5NUZG
MTBDMDE2NkMyOTU0Qzk5N0E4QTQ5ODlCRDg5MEE4Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EMDlFQTk1RkYxMEMwMTY2QzI5NTRDOTk3QThBNDk4OUJEODkw
QTg3LmNlcjCBpQYIKwYBBQUHAQsEgZgwgZUwgZIGCCsGAQUFBzALhoGFcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzIwMTQzMmNjLTNiYzktNDg1OC1i
NTA2LTIxOGFhYjBiMDg5Yy8wLzMxMzEzMDJlMzIzMzMyMmUzOTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMyMzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbuhfMA0GCSqG
SIb3DQEBCwUAA4IBAQA5HBDIbH7J9Dt44TXjC78TenP4vHnfd6ig7JodehZtzgSP
yAbS8jHRSquq+vm/EDZ3Q8Rj9CBS2dxs4y5F+ddSCHKaOIHfSJnQx7pqxJ9EYVU6
du+ddGKrXkEFFq1eMtYKrqpozQSUpI7TAuUoRF1tMRdxME+1gUqH+sKiGmqa6zrG
Aj/vsw07OwbmO330iANVzLPW0NY+Q+ErftnK22NAyy4Uc/Qj4DrYmrOm61McvINB
gi1BUEWOVZNNOqWK/suxLbrgZM5YyT+KyeLQ8JpPi2JdEZC0AGQoADnzsoI/K6hL
DUdpTu4FWhP/6vVwiWQNXZrUxUbLKtyfKVOM5p1B
-----END CERTIFICATE-----
Generated at Wed May 13 05:07:38 2026 by rpki-client