Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa
File:                     3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa (raw, json)
Hash identifier:          ho4hOFufXidWAYsTbOliD6cEtUCuHGtc5gpjUTGtn7w=
Subject key identifier:   68:6C:F6:D9:91:39:2B:1F:A7:A2:58:2B:56:60:28:65:B9:08:94:FD
Certificate issuer:       /CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
Certificate serial:       0C9FB1AC82E1CAC4CD3D3A3874F980208F5A0AA2
Authority key identifier: E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa
Signing time:             Sun 03 May 2026 02:32:24 +0000
ROA not before:           Sun 03 May 2026 02:27:24 +0000
ROA not after:            Sun 02 May 2027 02:32:24 +0000
asID:                     18004
IP address blocks:        115.178.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl
                          rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 22:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9f:b1:ac:82:e1:ca:c4:cd:3d:3a:38:74:f9:80:20:8f:5a:0a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793
        Validity
            Not Before: May  3 02:27:24 2026 GMT
            Not After : May  2 02:32:24 2027 GMT
        Subject: CN=686CF6D991392B1FA7A2582B56602865B90894FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:bf:2b:6d:33:fc:96:87:17:19:86:f0:b4:
                    c6:95:6d:5a:9a:c2:5c:e6:b1:fc:08:60:2a:fa:a6:
                    f4:6e:79:64:bc:6c:e4:0d:d4:a0:64:a1:1e:25:f7:
                    ca:67:5a:6f:dd:da:83:96:75:cf:ae:e6:d1:20:d3:
                    41:99:4b:57:2e:7b:fc:54:93:62:7a:5b:9c:8d:b1:
                    a9:ab:f9:a2:a8:29:75:6d:1e:7b:3d:28:e8:0b:38:
                    6c:25:a7:1f:a2:ac:73:c2:22:8f:30:29:53:c1:c4:
                    c7:b9:3b:0e:01:58:e7:4d:66:ee:98:b5:5e:f6:ea:
                    ab:68:0a:9d:d7:ab:ff:e6:38:3f:5b:18:18:9a:69:
                    dd:84:c0:fa:d5:76:37:36:4c:f2:2a:23:f8:a8:b8:
                    52:8f:89:a3:9b:a6:9c:2e:2e:6b:c4:02:5d:0a:77:
                    2d:01:aa:24:f5:d3:cf:84:d5:2e:f7:8f:f3:fb:9b:
                    9e:8f:c0:ad:68:64:4a:25:37:b9:26:dd:5d:96:c2:
                    6d:fb:f7:d2:00:cd:b9:06:cc:9e:34:b0:70:2f:37:
                    7e:cd:d1:c6:c6:22:e8:97:95:48:ae:25:6c:b3:22:
                    c9:de:79:c6:64:c4:86:98:35:fd:40:39:19:23:f9:
                    99:1a:56:4c:5d:f1:51:f2:97:a1:9b:c6:fb:2f:b0:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6C:F6:D9:91:39:2B:1F:A7:A2:58:2B:56:60:28:65:B9:08:94:FD
            X509v3 Authority Key Identifier:
                keyid:E6:EC:35:CF:C2:49:3A:3A:79:DC:D5:9D:1C:1D:BA:FB:2E:74:27:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E6EC35CFC2493A3A79DCD59D1C1DBAFB2E742793.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3131352e3137382e3139322e302f31392d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:eb:be:20:48:85:96:ea:83:b7:ce:38:b3:9b:31:ce:54:
         d8:e7:26:8e:39:fa:4b:a4:13:62:9c:c4:78:5e:47:83:2a:8f:
         a9:1a:09:11:4e:f7:69:f4:f7:e0:59:f1:aa:97:13:e9:27:4d:
         be:67:5e:6d:df:c3:de:8d:cb:e7:25:27:ac:9d:3b:39:db:3d:
         8e:98:91:ca:b0:d4:7c:ef:0a:a8:1d:a8:5f:16:f2:df:04:01:
         c6:65:c4:6d:f8:e3:b7:3e:b5:91:75:f1:1f:b0:56:38:b2:de:
         b6:16:d8:40:b0:d7:c9:30:1a:d6:1f:48:89:6f:40:a4:54:b7:
         9f:76:97:15:08:3f:14:3d:ca:8d:7a:dd:9c:14:09:8c:a2:b1:
         d8:f5:49:2b:53:6a:77:cd:95:05:31:46:21:5c:db:9f:a2:f1:
         45:57:90:4b:16:bc:7c:a7:0c:97:38:10:29:08:b6:71:84:eb:
         68:41:9b:94:48:98:3c:ce:43:87:7a:3e:11:40:5c:3d:5b:df:
         b5:cd:d1:47:04:77:00:23:a0:88:fe:0c:28:90:4c:4a:fb:88:
         d8:6d:e1:cf:c0:79:94:8a:0f:5a:99:1a:e1:9d:69:fa:3b:98:
         f2:6e:86:ae:e9:25:62:b0:d7:18:d0:fd:8a:98:d4:6d:5f:3b:
         7a:80:13:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:36 2026 by rpki-client