Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          phcDv0m0vLlfwZ99qeKbMtyh63ijZFKiTdhh4MVincM=
Subject key identifier:   DB:A4:47:ED:B7:88:3A:4B:90:87:C2:C2:E2:3D:7B:2F:C1:E1:B6:3B
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       39C0246D7E96A4D49CAD9AF19F29248FB2A76E80
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 03 May 2026 02:32:23 +0000
ROA not before:           Sun 03 May 2026 02:27:23 +0000
ROA not after:            Sun 02 May 2027 02:32:23 +0000
asID:                     18004
IP address blocks:        115.178.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c0:24:6d:7e:96:a4:d4:9c:ad:9a:f1:9f:29:24:8f:b2:a7:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: May  3 02:27:23 2026 GMT
            Not After : May  2 02:32:23 2027 GMT
        Subject: CN=DBA447EDB7883A4B9087C2C2E23D7B2FC1E1B63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3b:8e:7f:4f:23:41:0e:72:c0:6b:90:83:95:
                    9f:6c:d0:03:b2:0c:23:31:7c:91:89:ce:36:f5:ac:
                    67:38:12:07:4b:e1:79:e9:79:44:35:26:02:cb:64:
                    24:f9:97:53:5e:79:2e:df:fd:65:a6:90:28:7e:32:
                    43:b1:14:17:3e:86:ed:09:68:70:e7:19:a3:ce:30:
                    82:40:25:e2:dc:fb:23:b9:5a:85:53:4b:fc:b2:c9:
                    06:0b:06:85:11:aa:b6:f1:12:d3:76:3b:3a:6b:b6:
                    45:63:2f:c7:6f:96:d6:9f:ae:f6:aa:2e:7a:32:d6:
                    71:5e:0c:dd:83:51:bc:fe:71:bb:ba:d4:32:55:ab:
                    56:60:a2:68:c1:a1:73:fb:b9:f3:24:35:06:93:82:
                    b0:46:d3:31:05:40:0b:f4:1f:1f:9d:89:d1:f0:8c:
                    24:ac:53:fb:81:de:08:88:aa:45:51:1c:ab:04:79:
                    a4:df:ba:c3:d9:13:42:a7:cd:52:bc:fb:e1:48:c7:
                    4b:14:13:1b:17:4b:bf:fd:ad:5a:23:47:2d:a3:da:
                    00:f4:97:d5:bb:94:56:49:ea:43:7a:c4:1d:53:72:
                    e7:6d:7f:88:15:60:b0:c6:d5:94:57:5b:2b:74:0a:
                    44:4b:96:f3:af:5d:9c:76:69:c2:da:66:86:fb:2b:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A4:47:ED:B7:88:3A:4B:90:87:C2:C2:E2:3D:7B:2F:C1:E1:B6:3B
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3136302e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9e:34:83:99:df:46:72:50:64:f7:df:66:b0:c5:33:f4:a2:c6:
         47:fe:64:d8:42:fb:e2:ea:f0:f7:38:8a:f0:7f:7d:36:93:5d:
         49:f1:f0:dc:39:9b:84:c4:d3:68:03:ea:2f:b6:1b:e1:bc:b8:
         1c:60:27:8e:e9:5a:e9:3b:b4:ed:c6:9e:16:42:e5:b9:44:48:
         c5:27:40:61:47:de:57:37:a9:3b:b0:ce:b3:9e:37:da:35:67:
         96:4f:14:7c:43:e1:44:1c:c9:9c:da:9f:6f:27:ea:22:72:30:
         b1:d8:68:20:11:9b:e4:c5:af:fe:d0:9e:f4:26:7f:ee:45:55:
         fe:2c:9d:3c:f4:f4:f7:65:bf:5e:27:fe:6c:25:64:69:c8:f5:
         6e:c6:d3:a6:5c:ba:4b:5d:93:14:4d:bc:f8:41:ee:53:3a:7d:
         9e:4a:44:f6:33:26:a4:44:68:60:1b:67:87:b5:7c:ab:2f:7a:
         04:62:d5:25:f2:2e:46:75:13:ff:30:e9:a1:93:3d:2b:31:bb:
         a3:e1:b1:5b:16:b0:04:12:b7:f2:f7:b3:0f:c3:42:a3:1c:fc:
         61:03:c0:d7:21:84:1e:5c:bf:d4:d0:94:ca:15:ea:c0:ee:8b:
         a3:7b:08:c8:d4:76:10:05:22:a8:62:6c:12:64:25:ec:ff:bc:
         8a:5d:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:21 2026 by rpki-client