Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133302e302f32342d3234203d3e203435333036.roa
File:                     3131392e31352e3133302e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          9qfFoBhiNHzp+LreK9FNs3OMOxGnSUcOBWmf2OnEzeE=
Subject key identifier:   A8:B9:0A:E4:2F:F5:4D:68:08:EA:37:05:74:B6:EB:C7:ED:AB:6E:4A
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       215348D7AEB11A3BAF835D27B28B2EE38D5970FA
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133302e302f32342d3234203d3e203435333036.roa
Signing time:             Sun 03 May 2026 02:21:35 +0000
ROA not before:           Sun 03 May 2026 02:16:35 +0000
ROA not after:            Sun 02 May 2027 02:21:35 +0000
asID:                     45306
IP address blocks:        119.15.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:48:d7:ae:b1:1a:3b:af:83:5d:27:b2:8b:2e:e3:8d:59:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: May  3 02:16:35 2026 GMT
            Not After : May  2 02:21:35 2027 GMT
        Subject: CN=A8B90AE42FF54D6808EA370574B6EBC7EDAB6E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:cf:4b:1d:cf:1f:cf:9c:91:bd:72:8c:b7:
                    cc:5e:e7:ad:a9:54:ca:ad:11:0f:21:39:c2:28:54:
                    fa:da:b4:7e:91:b1:44:41:20:cc:9d:41:af:eb:e7:
                    68:f1:a5:2d:93:9f:7a:fb:64:db:d9:5d:e3:38:80:
                    f3:33:81:4e:f4:8c:7f:e8:d1:ca:07:b5:84:25:02:
                    c9:98:8d:19:e5:fd:3c:33:85:7d:29:79:da:46:88:
                    97:55:23:d1:c0:4e:e1:19:6b:36:a0:66:a2:44:d9:
                    64:bb:74:c1:27:07:ae:df:60:48:37:b1:b7:cd:f0:
                    47:a7:8c:b5:50:8a:f6:fc:3b:f3:6c:32:84:28:de:
                    87:e5:0d:56:df:4b:80:3f:f8:5c:63:52:f7:47:2d:
                    f2:da:6c:ea:3e:17:47:46:8b:95:f4:e9:9f:18:45:
                    4d:4f:e3:34:fa:3b:d0:54:05:a7:f4:b3:af:5b:a0:
                    ad:be:47:e2:23:e6:25:c7:d9:81:9b:8e:8e:d4:44:
                    70:73:e0:15:34:31:4d:a1:07:d1:2a:36:1a:b4:c4:
                    ff:4d:5c:33:ed:0d:e0:9a:72:b7:87:8e:a0:ea:e7:
                    63:98:3f:42:3e:e1:59:bb:95:f6:76:95:fe:54:61:
                    3f:57:97:98:23:02:9f:ae:79:5c:c8:b7:cb:6a:12:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B9:0A:E4:2F:F5:4D:68:08:EA:37:05:74:B6:EB:C7:ED:AB:6E:4A
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133302e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:bd:fe:b1:28:76:a5:12:b0:fb:4d:05:51:b5:3d:21:1b:03:
         43:3c:69:8d:11:7e:c8:15:56:76:b6:5b:55:c0:97:09:b0:9f:
         58:60:f5:dc:cf:24:49:98:d6:f1:ee:7a:21:c3:10:09:6d:95:
         49:7a:6a:7e:8c:2c:77:8c:d2:13:71:a0:b5:7e:70:02:d7:31:
         7a:49:29:4e:ef:d3:8d:98:80:1b:85:67:20:27:34:2f:06:8c:
         94:ce:c5:ff:3e:56:3f:7d:7d:c7:74:90:f4:c0:84:f4:4a:4a:
         6f:4b:5e:ac:63:23:70:8d:c7:05:1a:82:bc:bf:6e:87:9b:eb:
         b5:c7:71:c7:ce:d3:eb:f7:99:aa:83:c9:04:51:1a:7e:ae:7d:
         99:65:42:1f:9e:7d:64:18:24:75:65:b9:74:57:09:a0:9b:1b:
         d7:79:41:c7:b3:1a:a2:da:51:f1:a2:ec:f8:18:d3:5b:28:f8:
         e8:3a:a5:7e:df:e4:56:0e:0d:3f:fb:d8:5b:d2:3c:c8:33:d2:
         ef:78:af:75:c0:fc:e7:84:f9:29:76:46:93:f9:cc:42:ee:3c:
         53:29:51:86:c8:99:93:6e:b5:86:62:1f:7b:c5:09:dd:38:dc:
         f0:2a:8b:06:88:8f:ed:43:c6:86:3c:69:f9:8e:e7:82:80:49:
         ba:72:2c:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIVNI166xGjuvg10nsosu441ZcPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyOURGRTJFMEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZD
MENFQUUwNzAeFw0yNjA1MDMwMjE2MzVaFw0yNzA1MDIwMjIxMzVaMDMxMTAvBgNV
BAMTKEE4QjkwQUU0MkZGNTRENjgwOEVBMzcwNTc0QjZFQkM3RURBQjZFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKM9LHc8fz5yRvXKMt8xe562p
VMqtEQ8hOcIoVPratH6RsURBIMydQa/r52jxpS2Tn3r7ZNvZXeM4gPMzgU70jH/o
0coHtYQlAsmYjRnl/TwzhX0pedpGiJdVI9HATuEZazagZqJE2WS7dMEnB67fYEg3
sbfN8EenjLVQivb8O/NsMoQo3oflDVbfS4A/+FxjUvdHLfLabOo+F0dGi5X06Z8Y
RU1P4zT6O9BUBaf0s69boK2+R+Ij5iXH2YGbjo7URHBz4BU0MU2hB9EqNhq0xP9N
XDPtDeCacreHjqDq52OYP0I+4Vm7lfZ2lf5UYT9Xl5gjAp+ueVzIt8tqEvhpAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqLkK5C/1TWgI6jcFdLbrx+2rbkowHwYDVR0j
BBgwFoAUcinf4uCjpXCpNSFgHrGmH8DOrgcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjlhYjYwYjEtYTI0NC00YTc4LWIzMWItZmVjYTNkMTRlZDlmLzAvNzIyOURGRTJF
MEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZDMENFQUUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjI5REZFMkUwQTNBNTcwQTkzNTIxNjAxRUIxQTYxRkMwQ0VB
RTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPgjANBgkqhkiG
9w0BAQsFAAOCAQEAVr3+sSh2pRKw+00FUbU9IRsDQzxpjRF+yBVWdrZbVcCXCbCf
WGD13M8kSZjW8e56IcMQCW2VSXpqfowsd4zSE3GgtX5wAtcxekkpTu/TjZiAG4Vn
ICc0LwaMlM7F/z5WP319x3SQ9MCE9EpKb0terGMjcI3HBRqCvL9uh5vrtcdxx87T
6/eZqoPJBFEafq59mWVCH559ZBgkdWW5dFcJoJsb13lBx7MaotpR8aLs+BjTWyj4
6Dqlft/kVg4NP/vYW9I8yDPS73ivdcD854T5KXZGk/nMQu48UylRhsiZk261hmIf
e8UJ3Tjc8CqLBoiP7UPGhjxp+Y7ngoBJunIstw==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:46 2026 by rpki-client