Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa
File:                     3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (raw, json)
Hash identifier:          8bY1t1WWG1ycFYAnepDoYlqaZY4Ueot1JfgflfLyzZA=
Subject key identifier:   F7:00:21:67:72:DC:BC:F1:69:77:F0:73:0B:81:CB:44:D3:29:C7:5E
Certificate issuer:       /CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
Certificate serial:       2E078F09A11C5D7FD796D8AE5FD6BB2140C38DF4
Authority key identifier: 1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa
Signing time:             Sun 03 May 2026 02:25:13 +0000
ROA not before:           Sun 03 May 2026 02:20:13 +0000
ROA not after:            Sun 02 May 2027 02:25:13 +0000
asID:                     38523
IP address blocks:        117.74.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl
                          rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:07:8f:09:a1:1c:5d:7f:d7:96:d8:ae:5f:d6:bb:21:40:c3:8d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A4531574FEFFD9E221DE0D82CE657853E4CEE3A
        Validity
            Not Before: May  3 02:20:13 2026 GMT
            Not After : May  2 02:25:13 2027 GMT
        Subject: CN=F700216772DCBCF16977F0730B81CB44D329C75E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:b5:b3:ea:b4:89:8a:c5:84:7e:5e:aa:78:
                    ad:fd:e7:51:3c:44:a6:84:c1:e0:00:6b:62:a4:ae:
                    a2:db:25:dd:94:eb:44:d5:5f:24:80:13:d9:e4:19:
                    99:5e:07:a8:ed:13:60:29:2a:0d:d0:05:4d:c3:45:
                    21:b4:13:85:f2:ea:7e:e5:f4:2d:d3:cf:12:05:2c:
                    7f:be:24:10:c6:de:75:eb:98:be:7b:a9:7a:58:f0:
                    d1:06:66:40:12:3d:0e:de:84:75:de:55:14:c6:29:
                    ee:d6:08:ab:da:91:30:8a:1e:24:b0:06:5d:87:fb:
                    3d:81:7d:b8:84:72:42:d0:26:1f:10:b0:87:f3:32:
                    68:a1:22:b7:61:13:9c:df:6b:d1:68:2e:dc:7b:f3:
                    df:4d:af:58:78:e9:78:f4:39:bf:9f:ee:96:1a:09:
                    15:d1:78:b9:c1:f7:33:90:10:cf:f9:2c:36:5f:b7:
                    c1:d0:05:63:bc:e7:30:9e:97:1c:1c:9e:11:0e:25:
                    ea:ec:d5:06:05:31:3e:cc:a2:65:71:4f:44:c4:29:
                    a3:d2:ab:97:68:93:98:cd:87:78:4a:35:b9:5b:72:
                    00:f8:0f:c1:dc:f9:72:54:f9:7c:1d:69:68:4f:4a:
                    2e:05:78:00:cc:e4:52:2a:e4:9d:b9:ef:62:1c:95:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:21:67:72:DC:BC:F1:69:77:F0:73:0B:81:CB:44:D3:29:C7:5E
            X509v3 Authority Key Identifier:
                keyid:1A:45:31:57:4F:EF:FD:9E:22:1D:E0:D8:2C:E6:57:85:3E:4C:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1A4531574FEFFD9E221DE0D82CE657853E4CEE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/3131372e37342e3131352e302f32342d3234203d3e203338353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:52:c2:8b:df:47:26:7d:39:8f:c2:4e:fb:4a:b1:ba:65:
         89:52:9e:35:53:98:8a:52:ab:4f:c0:f3:58:67:80:97:35:7b:
         c1:a4:e8:8f:91:f2:51:0d:5a:0e:dd:bd:75:b2:30:c6:55:01:
         f8:2c:99:ad:61:db:b3:ed:1f:20:f5:3c:11:71:a9:71:ef:df:
         90:ae:cf:d0:2a:33:1f:fc:1e:a4:9c:09:0e:ca:72:aa:08:2b:
         54:9a:9a:84:e4:5d:39:ea:26:b8:6e:35:e3:7a:a4:de:7f:46:
         18:36:8e:0e:6a:66:7f:5f:fa:5e:59:82:6d:10:9f:17:ae:05:
         53:a6:5a:2f:1c:75:62:66:ed:45:54:48:f1:01:3d:c2:5c:b0:
         dd:58:29:1c:4a:13:20:37:c8:c5:ee:4a:f3:1d:94:27:18:a1:
         87:bf:23:33:7c:9d:fc:2b:b8:76:85:4a:a5:5e:6d:c6:ea:a7:
         c3:da:b9:13:ce:01:9b:e9:31:27:68:96:4d:0b:3e:15:66:85:
         11:53:fb:62:e3:18:72:ba:2d:cc:8f:49:22:dc:4f:3d:64:8e:
         71:9f:8d:94:8c:8d:02:4e:09:7a:7a:e2:13:cb:2a:3c:14:56:
         98:fb:cf:b4:cc:ef:8b:5c:7e:48:b0:3c:33:f4:d1:03:ec:48:
         3f:04:07:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:53 2026 by rpki-client