Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa
File:                     3131392e31352e3133312e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          lnZUd67/u+q68sxl1PDDYAeJMb51iAPVqKyYmLq4L8A=
Subject key identifier:   55:4B:B7:CD:CF:1C:AE:C4:C4:6C:C5:B5:D6:69:77:4B:3B:CD:9F:EF
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       3D89829588DB8AA80A3491FB90F62620A384DD44
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa
Signing time:             Sun 03 May 2026 02:21:34 +0000
ROA not before:           Sun 03 May 2026 02:16:34 +0000
ROA not after:            Sun 02 May 2027 02:21:34 +0000
asID:                     45306
IP address blocks:        119.15.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:89:82:95:88:db:8a:a8:0a:34:91:fb:90:f6:26:20:a3:84:dd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: May  3 02:16:34 2026 GMT
            Not After : May  2 02:21:34 2027 GMT
        Subject: CN=554BB7CDCF1CAEC4C46CC5B5D669774B3BCD9FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:51:1d:df:a2:a3:c6:2b:ad:5a:68:f4:0d:
                    31:8d:2f:62:ad:72:eb:0e:b6:a9:4d:9b:5d:d4:af:
                    2c:ba:af:a8:38:e3:44:b7:cf:8c:00:3b:00:c0:0d:
                    ab:ba:72:9c:e7:b1:cf:40:d9:af:e8:fe:2d:93:dc:
                    b1:d9:fc:5c:dc:3e:e9:89:72:8f:12:71:67:e2:4e:
                    42:1a:26:bd:94:b2:5e:38:a2:19:e0:b1:6c:a0:3c:
                    38:49:3d:c8:6c:70:a7:00:ea:06:0a:86:17:63:37:
                    bb:6e:e0:d0:cb:a4:b4:f0:82:9c:eb:49:0e:26:7c:
                    b1:35:11:53:7a:69:d5:ce:35:0d:ec:5a:e7:36:ea:
                    32:62:71:32:1e:55:f1:c3:c1:fd:4a:67:e0:a7:37:
                    95:cc:cd:3f:96:47:fd:28:aa:9e:5f:7c:07:27:ca:
                    9a:69:9a:9c:26:e2:f8:46:00:06:e1:7c:73:41:3b:
                    a8:1d:fc:10:bc:ad:62:b8:ca:fa:f7:04:3c:d5:fd:
                    be:5d:d2:d1:64:4d:12:77:6a:57:0a:7c:21:28:36:
                    83:07:a0:49:cd:f6:74:2c:a8:69:13:6b:c1:ba:94:
                    09:a3:27:b6:2b:a2:e9:65:e4:c4:33:22:20:d2:72:
                    37:9d:ec:70:c3:6a:95:be:45:29:53:82:d9:6c:50:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:B7:CD:CF:1C:AE:C4:C4:6C:C5:B5:D6:69:77:4B:3B:CD:9F:EF
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133312e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:81:fd:f5:d0:d9:3e:a5:3b:99:7a:90:27:6b:9c:3c:61:97:
         37:da:7b:c3:f7:9a:8f:c6:48:09:60:68:b2:77:2c:92:20:7e:
         1b:66:b7:5c:e5:1a:e6:ad:e6:c4:50:6c:ec:74:94:e1:ee:f5:
         3a:e8:4b:88:d6:c6:5d:73:20:27:3b:ec:80:8e:4d:aa:14:a2:
         a0:1d:0b:47:ca:63:57:6c:13:bb:1c:af:ed:5f:95:d3:94:a2:
         44:27:d6:fc:2a:69:39:22:2f:cc:37:d9:55:04:90:e3:57:07:
         6c:1a:b4:8e:cf:93:2e:89:60:7c:23:12:a0:ab:6f:96:df:c7:
         f9:30:7a:3f:38:72:ad:d1:7f:a4:38:98:41:e7:2d:d9:99:93:
         2a:05:fc:2a:a9:07:91:8b:db:5c:e5:6c:61:0f:6a:f7:9d:80:
         f9:b2:c0:03:39:ee:e9:0c:62:5c:5f:1b:c2:9b:0d:7b:dd:5d:
         dc:d1:70:93:85:a4:d7:69:31:68:a5:74:c3:db:bb:8a:01:83:
         ec:e2:8f:57:bb:da:8f:49:bc:3a:79:bf:e5:cc:59:86:70:14:
         b4:2f:41:14:94:32:00:12:40:9c:29:8c:c5:a0:1f:97:1a:33:
         19:c3:51:7c:68:bb:d1:b2:53:cc:50:1b:88:d7:f1:fa:f8:62:
         12:7b:8d:ea
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPYmClYjbiqgKNJH7kPYmIKOE3UQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIyOURGRTJFMEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZD
MENFQUUwNzAeFw0yNjA1MDMwMjE2MzRaFw0yNzA1MDIwMjIxMzRaMDMxMTAvBgNV
BAMTKDU1NEJCN0NEQ0YxQ0FFQzRDNDZDQzVCNUQ2Njk3NzRCM0JDRDlGRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hFEd36KjxiutWmj0DTGNL2Kt
cusOtqlNm13Uryy6r6g440S3z4wAOwDADau6cpznsc9A2a/o/i2T3LHZ/FzcPumJ
co8ScWfiTkIaJr2Usl44ohngsWygPDhJPchscKcA6gYKhhdjN7tu4NDLpLTwgpzr
SQ4mfLE1EVN6adXONQ3sWuc26jJicTIeVfHDwf1KZ+CnN5XMzT+WR/0oqp5ffAcn
ypppmpwm4vhGAAbhfHNBO6gd/BC8rWK4yvr3BDzV/b5d0tFkTRJ3alcKfCEoNoMH
oEnN9nQsqGkTa8G6lAmjJ7Yroull5MQzIiDScjed7HDDapW+RSlTgtlsUKbbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVUu3zc8crsTEbMW11ml3SzvNn+8wHwYDVR0j
BBgwFoAUcinf4uCjpXCpNSFgHrGmH8DOrgcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MjlhYjYwYjEtYTI0NC00YTc4LWIzMWItZmVjYTNkMTRlZDlmLzAvNzIyOURGRTJF
MEEzQTU3MEE5MzUyMTYwMUVCMUE2MUZDMENFQUUwNy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MjI5REZFMkUwQTNBNTcwQTkzNTIxNjAxRUIxQTYxRkMwQ0VB
RTA3LmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzI5YWI2MGIxLWEyNDQtNGE3OC1i
MzFiLWZlY2EzZDE0ZWQ5Zi8wLzMxMzEzOTJlMzEzNTJlMzEzMzMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNTMzMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHcPgzANBgkqhkiG
9w0BAQsFAAOCAQEAMIH99dDZPqU7mXqQJ2ucPGGXN9p7w/eaj8ZICWBosncskiB+
G2a3XOUa5q3mxFBs7HSU4e71OuhLiNbGXXMgJzvsgI5NqhSioB0LR8pjV2wTuxyv
7V+V05SiRCfW/CppOSIvzDfZVQSQ41cHbBq0js+TLolgfCMSoKtvlt/H+TB6Pzhy
rdF/pDiYQect2ZmTKgX8KqkHkYvbXOVsYQ9q952A+bLAAznu6QxiXF8bwpsNe91d
3NFwk4Wk12kxaKV0w9u7igGD7OKPV7vaj0m8Onm/5cxZhnAUtC9BFJQyABJAnCmM
xaAflxozGcNRfGi70bJTzFAbiNfx+vhiEnuN6g==
-----END CERTIFICATE-----
Generated at Wed May 13 07:45:44 2026 by rpki-client