Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
File:                     3231382e3130302e37342e302f32342d3234203d3e203535363539.roa (raw, json)
Hash identifier:          5nElrE2bFD3jeHzGP2EqItlqHxQy+rl4TSko98reQ+k=
Subject key identifier:   87:6B:06:38:3B:8C:92:48:D4:3E:1F:8D:2F:85:E0:4D:D4:79:60:B4
Certificate issuer:       /CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
Certificate serial:       35BD0E3D8ECBCA96817F2B24759CCDB81B1C00A6
Authority key identifier: 25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa
Signing time:             Sun 03 May 2026 02:29:07 +0000
ROA not before:           Sun 03 May 2026 02:24:07 +0000
ROA not after:            Sun 02 May 2027 02:29:07 +0000
asID:                     55659
IP address blocks:        218.100.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl
                          rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:34:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bd:0e:3d:8e:cb:ca:96:81:7f:2b:24:75:9c:cd:b8:1b:1c:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2535F6A9A65395B5881ADB0B432A16679C88CC60
        Validity
            Not Before: May  3 02:24:07 2026 GMT
            Not After : May  2 02:29:07 2027 GMT
        Subject: CN=876B06383B8C9248D43E1F8D2F85E04DD47960B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2a:b6:26:19:b7:32:87:50:6e:a5:4f:17:6a:
                    0d:bf:93:0e:18:66:27:ff:58:76:77:30:62:39:a1:
                    b1:49:34:d6:c6:80:a7:f4:b2:53:f8:e2:ba:b8:36:
                    f3:38:da:6d:1c:d7:6d:75:6b:d3:cb:c7:bb:9b:4d:
                    9d:64:e5:6b:b4:10:ad:22:83:d6:90:5b:f3:72:cd:
                    8a:ab:f6:4a:7d:ee:28:1d:50:e6:1f:28:fa:93:c1:
                    af:1e:68:d1:96:62:8e:e2:33:59:45:6f:18:5a:ed:
                    fc:9d:91:0c:50:1d:89:57:c5:76:12:20:c1:1a:9f:
                    bd:67:9c:3e:9e:71:9f:42:7c:9e:4f:dc:8d:9e:84:
                    ee:63:18:67:72:3b:a6:61:44:ff:e8:cc:57:9b:37:
                    5e:e2:e3:f9:59:1a:66:3a:c7:3c:c5:2e:d1:34:1a:
                    af:9b:3c:d2:19:60:40:e9:5d:a6:3c:dd:1d:dc:3b:
                    4c:8f:88:75:2a:9d:71:dd:2e:33:df:29:3f:9c:7d:
                    da:77:2e:d5:cd:7b:e5:87:f5:57:29:b2:34:c5:ca:
                    37:1e:66:68:ae:44:e3:bf:65:d6:4b:8c:82:db:90:
                    1d:be:5f:cc:36:94:74:ef:02:43:23:b4:34:0d:f6:
                    5a:3f:04:55:f2:97:8d:a9:f7:c2:a1:1e:ea:0b:72:
                    47:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6B:06:38:3B:8C:92:48:D4:3E:1F:8D:2F:85:E0:4D:D4:79:60:B4
            X509v3 Authority Key Identifier:
                keyid:25:35:F6:A9:A6:53:95:B5:88:1A:DB:0B:43:2A:16:67:9C:88:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/2535F6A9A65395B5881ADB0B432A16679C88CC60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2535F6A9A65395B5881ADB0B432A16679C88CC60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/41db3730-f499-449f-b6f2-7a5deb532b0c/0/3231382e3130302e37342e302f32342d3234203d3e203535363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:de:1c:9f:31:96:af:b8:70:41:89:13:d7:27:e8:6b:7b:
         71:c5:dc:91:59:07:f0:61:90:eb:6a:18:5a:c0:ca:aa:0f:4c:
         51:a9:82:bc:e4:21:cd:db:a5:48:51:17:77:23:60:5a:2a:7e:
         4c:b1:65:9e:72:2b:e1:c1:b2:78:5f:7b:9e:ac:8b:5a:e7:1e:
         4f:89:16:ad:2c:8f:4e:44:4e:6b:54:a0:46:5c:db:31:95:60:
         70:73:09:ac:e2:d1:56:43:e4:d4:b1:6f:68:ab:c8:8f:68:40:
         c3:a7:31:ff:4f:28:ec:eb:48:ad:7a:6d:44:93:af:97:11:94:
         b8:f6:d3:38:df:9b:f4:5f:20:e2:d5:8c:85:95:16:ec:ad:e7:
         02:a6:6d:ab:4d:0f:80:f5:1a:05:1e:80:a4:8d:fb:98:00:9e:
         33:f0:cd:d9:2f:df:71:05:af:d2:5e:4e:9d:ad:53:ac:03:0b:
         a1:9b:fb:42:97:a3:b4:a8:3b:21:06:11:1e:94:57:fd:66:3c:
         e7:c1:75:87:c0:e7:49:07:7b:25:60:42:38:b0:0b:85:15:81:
         66:cc:ed:d2:da:70:50:14:d9:fc:b7:73:5f:de:63:47:83:c2:
         04:5a:09:68:20:ec:3b:ec:f7:89:9e:f8:14:ca:eb:de:af:46:
         f7:c0:6b:ce
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNb0OPY7LypaBfyskdZzNuBscAKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjUzNUY2QTlBNjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5
Qzg4Q0M2MDAeFw0yNjA1MDMwMjI0MDdaFw0yNzA1MDIwMjI5MDdaMDMxMTAvBgNV
BAMTKDg3NkIwNjM4M0I4QzkyNDhENDNFMUY4RDJGODVFMDRERDQ3OTYwQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKrYmGbcyh1BupU8Xag2/kw4Y
Zif/WHZ3MGI5obFJNNbGgKf0slP44rq4NvM42m0c1211a9PLx7ubTZ1k5Wu0EK0i
g9aQW/NyzYqr9kp97igdUOYfKPqTwa8eaNGWYo7iM1lFbxha7fydkQxQHYlXxXYS
IMEan71nnD6ecZ9CfJ5P3I2ehO5jGGdyO6ZhRP/ozFebN17i4/lZGmY6xzzFLtE0
Gq+bPNIZYEDpXaY83R3cO0yPiHUqnXHdLjPfKT+cfdp3LtXNe+WH9VcpsjTFyjce
ZmiuROO/ZdZLjILbkB2+X8w2lHTvAkMjtDQN9lo/BFXyl42p98KhHuoLckcDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUh2sGODuMkkjUPh+NL4XgTdR5YLQwHwYDVR0j
BBgwFoAUJTX2qaZTlbWIGtsLQyoWZ5yIzGAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDFkYjM3MzAtZjQ5OS00NDlmLWI2ZjItN2E1ZGViNTMyYjBjLzAvMjUzNUY2QTlB
NjUzOTVCNTg4MUFEQjBCNDMyQTE2Njc5Qzg4Q0M2MC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8yNTM1RjZBOUE2NTM5NUI1ODgxQURCMEI0MzJBMTY2NzlDODhD
QzYwLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzQxZGIzNzMwLWY0OTktNDQ5Zi1i
NmYyLTdhNWRlYjUzMmIwYy8wLzMyMzEzODJlMzEzMDMwMmUzNzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANpkSjANBgkqhkiG
9w0BAQsFAAOCAQEAd7/eHJ8xlq+4cEGJE9cn6Gt7ccXckVkH8GGQ62oYWsDKqg9M
UamCvOQhzdulSFEXdyNgWip+TLFlnnIr4cGyeF97nqyLWuceT4kWrSyPTkROa1Sg
RlzbMZVgcHMJrOLRVkPk1LFvaKvIj2hAw6cx/08o7OtIrXptRJOvlxGUuPbTON+b
9F8g4tWMhZUW7K3nAqZtq00PgPUaBR6ApI37mACeM/DN2S/fcQWv0l5Ona1TrAML
oZv7QpejtKg7IQYRHpRX/WY858F1h8DnSQd7JWBCOLALhRWBZszt0tpwUBTZ/Ldz
X95jR4PCBFoJaCDsO+z3iZ74FMrr3q9G98Brzg==
-----END CERTIFICATE-----
Generated at Wed May 13 13:31:14 2026 by rpki-client