Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa
File:                     3131342e37392e302e302f31382d3234203d3e203138303034.roa (raw, json)
Hash identifier:          0O4aswxD1VoxCc8I8JRXFhna+2fhOQAti4akwG9PjgQ=
Subject key identifier:   BD:F8:04:BF:32:7B:7C:1C:3A:9E:8B:11:D1:A0:77:C7:8B:90:E2:EC
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       48140BB2081ED875752265EF4A4F3F75EF0CA66C
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa
Signing time:             Sun 03 May 2026 02:32:26 +0000
ROA not before:           Sun 03 May 2026 02:27:26 +0000
ROA not after:            Sun 02 May 2027 02:32:26 +0000
asID:                     18004
IP address blocks:        114.79.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:14:0b:b2:08:1e:d8:75:75:22:65:ef:4a:4f:3f:75:ef:0c:a6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: May  3 02:27:26 2026 GMT
            Not After : May  2 02:32:26 2027 GMT
        Subject: CN=BDF804BF327B7C1C3A9E8B11D1A077C78B90E2EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:36:5f:7e:78:0e:56:c3:30:81:59:5c:ff:
                    15:88:4a:a9:3c:0c:fb:14:6a:08:46:f3:c2:42:ef:
                    47:99:ec:bb:69:05:33:86:25:46:80:39:fe:1c:4f:
                    1a:da:d6:3d:b3:49:8c:4d:44:ca:39:93:4f:d0:c7:
                    99:3e:8e:ac:8c:77:fe:6a:8b:e1:c5:a9:cf:64:9b:
                    7c:26:f9:26:f7:40:6f:fb:28:5a:e0:a7:e5:3f:72:
                    3f:97:b7:21:c9:12:6a:06:aa:9c:37:22:e3:6d:e7:
                    e9:93:cd:a5:e6:74:31:10:dd:e7:e1:72:96:e8:39:
                    df:ce:31:c7:56:20:84:0c:4a:48:dc:3c:00:74:54:
                    19:57:8f:19:f1:16:84:d4:78:5b:f4:fa:1a:5a:10:
                    de:ab:03:eb:a2:87:0b:df:40:b7:97:c8:3d:d7:03:
                    80:d9:81:ea:7a:e7:4a:ee:bb:6d:28:1e:5e:10:2a:
                    92:7c:56:3c:e4:b0:63:33:bd:4e:11:ac:da:ca:3a:
                    00:ce:da:16:4a:61:0b:fb:12:33:44:58:b4:e5:ef:
                    06:0b:ff:4a:29:0c:05:ea:f5:46:8d:6f:19:af:f7:
                    32:8b:22:74:57:f2:f5:58:94:8e:77:54:dc:78:47:
                    a2:10:26:54:86:6e:ee:c9:b9:e4:26:df:99:c4:05:
                    d3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:04:BF:32:7B:7C:1C:3A:9E:8B:11:D1:A0:77:C7:8B:90:E2:EC
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131342e37392e302e302f31382d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.79.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:d1:e3:6b:ff:a3:4d:b1:73:c1:99:ac:4b:e6:12:f9:46:
         c9:42:08:4e:93:0d:3c:af:78:ef:88:00:78:f8:49:72:75:61:
         dc:82:76:e1:7c:88:f3:9e:64:d1:84:19:b0:41:5d:45:fa:54:
         d0:7f:21:39:56:5f:ff:8a:be:50:2f:1c:3f:e5:d7:cf:85:e1:
         0c:76:dd:28:b5:83:34:e6:d9:7d:1b:8f:51:d5:bf:5c:38:c8:
         72:18:61:ec:29:4d:16:df:44:c7:76:08:46:6f:42:6c:18:3b:
         6d:77:fb:29:0f:ad:b0:4e:58:46:55:22:81:89:69:a6:24:9c:
         0c:57:ef:92:a3:e1:2b:45:d7:5e:8f:89:c1:21:df:b8:40:23:
         c5:5f:c4:9d:d8:36:53:ff:fa:13:9d:62:90:03:fe:8a:72:b5:
         22:78:00:a4:b0:3d:b7:b4:73:2a:5d:60:d0:a8:23:5d:7f:ac:
         4d:7d:42:31:3f:d7:48:90:d8:40:41:2a:53:3a:8c:c9:bf:35:
         b1:e1:62:cc:54:06:08:1a:48:f6:4f:c3:98:b1:80:6d:20:9d:
         62:73:f3:c8:3e:2c:55:b2:5e:e4:f5:e5:cd:b4:97:38:dd:82:
         be:8a:7d:db:7f:64:02:98:65:11:22:ed:4c:56:32:5f:08:ed:
         99:f7:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:00 2026 by rpki-client