Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
File:                     3131392e31352e3133352e302f32342d3234203d3e203435333036.roa (raw, json)
Hash identifier:          nJbUH2HeehvwuwWk5Ov+PdaciTDOUHySNuFD9i+1zG8=
Subject key identifier:   E2:16:DE:C5:3C:FD:52:46:9D:8F:84:26:55:C7:9E:D1:47:C1:76:24
Certificate issuer:       /CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
Certificate serial:       1161091381859A67526279AE835828CD75649B4D
Authority key identifier: 72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa
Signing time:             Sun 03 May 2026 02:21:36 +0000
ROA not before:           Sun 03 May 2026 02:16:36 +0000
ROA not after:            Sun 02 May 2027 02:21:36 +0000
asID:                     45306
IP address blocks:        119.15.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl
                          rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 20:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:61:09:13:81:85:9a:67:52:62:79:ae:83:58:28:cd:75:64:9b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7229DFE2E0A3A570A93521601EB1A61FC0CEAE07
        Validity
            Not Before: May  3 02:16:36 2026 GMT
            Not After : May  2 02:21:36 2027 GMT
        Subject: CN=E216DEC53CFD52469D8F842655C79ED147C17624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9d:50:ec:d0:0d:68:e9:cc:8a:38:94:fc:54:
                    34:f8:66:fe:32:a1:5a:bc:c5:5d:ce:de:af:11:7c:
                    36:06:8a:85:68:f5:11:0e:fd:b3:2a:fa:43:87:ab:
                    b8:27:f2:3d:85:7f:29:2b:76:fe:cb:ff:67:5e:e6:
                    7e:f3:b7:6c:02:32:2d:30:1a:ff:5b:a0:74:cc:9d:
                    c4:06:81:2a:36:13:f6:09:d1:90:ae:13:04:81:e9:
                    d8:ad:20:bd:b7:6d:3b:bd:8d:e2:78:22:c4:14:34:
                    58:2b:96:cf:a3:bc:0e:cf:79:87:27:66:5b:6c:7e:
                    6f:d1:8f:43:c1:98:bd:94:6b:03:b2:84:28:f4:55:
                    92:c9:e9:29:a9:9d:f9:4a:f8:87:7e:28:6a:de:3f:
                    a6:8b:44:e1:d8:87:5d:00:43:43:5e:7e:63:b7:c7:
                    7d:de:3c:48:f4:19:e9:f2:d2:8d:27:06:9c:d4:7d:
                    94:5d:81:ed:94:46:82:71:9e:cf:b4:54:52:6a:02:
                    cf:f4:9f:bd:22:23:f8:87:46:95:64:92:6a:8b:4d:
                    47:61:2d:2b:1b:8b:46:ae:d3:d7:b7:db:7c:ba:d1:
                    83:29:a8:dc:ce:62:39:2b:22:18:43:5f:c0:19:39:
                    d0:82:44:56:79:64:5f:98:88:14:19:c2:70:cf:a0:
                    90:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:DE:C5:3C:FD:52:46:9D:8F:84:26:55:C7:9E:D1:47:C1:76:24
            X509v3 Authority Key Identifier:
                keyid:72:29:DF:E2:E0:A3:A5:70:A9:35:21:60:1E:B1:A6:1F:C0:CE:AE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/7229DFE2E0A3A570A93521601EB1A61FC0CEAE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29ab60b1-a244-4a78-b31b-feca3d14ed9f/0/3131392e31352e3133352e302f32342d3234203d3e203435333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.15.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:26:66:47:f3:89:9b:e6:58:27:35:74:f0:45:0d:85:7e:88:
         51:8e:d9:fd:af:3b:64:52:7b:58:40:83:c3:d7:12:91:8d:f2:
         b5:e5:3b:3e:5e:15:fd:2b:1c:2a:2c:76:d0:e7:9a:e4:6a:c7:
         cb:27:38:2f:06:bf:27:8c:10:42:4f:ba:a1:7f:95:6b:99:0a:
         2b:5b:da:fe:6a:9a:a0:6d:9a:90:66:61:7f:4d:2f:d1:f1:95:
         a7:28:08:d2:d5:a3:f5:68:cb:ff:df:f8:85:1a:64:66:65:0e:
         74:7f:3a:32:82:f2:c9:92:a2:c1:7c:1d:1a:e1:2c:5b:42:aa:
         8b:67:ba:73:e5:4c:d2:fe:cc:0b:21:bf:22:ee:36:37:fa:c0:
         e3:5a:13:3a:ef:62:0c:99:fb:68:37:0d:7f:9c:60:0f:55:c1:
         d9:53:b4:58:e9:28:79:95:6b:3e:15:8e:9f:8c:1c:09:ee:cc:
         a2:d2:d2:18:14:d7:ac:a1:3a:9c:ba:5f:b3:aa:29:08:82:84:
         40:83:16:9c:08:b7:f7:17:2f:04:4e:88:93:1e:2d:33:a6:0a:
         9b:0b:eb:20:ae:ef:23:05:de:8e:b5:de:69:00:51:b3:bc:3f:
         e3:79:bd:88:ce:bb:d1:ad:81:fd:c0:1a:b4:84:64:8c:14:40:
         fd:d8:60:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:15 2026 by rpki-client