Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa
File:                     3131302e35302e38302e302f32312d3234203d3e203137363730.roa (raw, json)
Hash identifier:          pEjlBEcf4SMwhsnq2l8vEuSNRarcFG9m4tfJC8/w2lc=
Subject key identifier:   E1:C2:3E:52:2D:54:5F:ED:85:78:C4:06:86:F6:EE:64:C5:3B:17:2C
Certificate issuer:       /CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
Certificate serial:       23DD862F8428BABD6103E13B6DB2E26A40FC80C6
Authority key identifier: 70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa
Signing time:             Sun 03 May 2026 02:37:19 +0000
ROA not before:           Sun 03 May 2026 02:32:19 +0000
ROA not after:            Sun 02 May 2027 02:37:19 +0000
asID:                     17670
IP address blocks:        110.50.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl
                          rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 01:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:dd:86:2f:84:28:ba:bd:61:03:e1:3b:6d:b2:e2:6a:40:fc:80:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70562FBF0E190EE7E1BA063D6E46853A67FFEFAA
        Validity
            Not Before: May  3 02:32:19 2026 GMT
            Not After : May  2 02:37:19 2027 GMT
        Subject: CN=E1C23E522D545FED8578C40686F6EE64C53B172C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:f2:3e:aa:ab:35:03:ad:cd:1c:02:d7:d5:
                    d2:c7:89:ec:35:b6:29:94:ea:ca:05:07:4d:07:af:
                    3e:37:08:0e:e8:11:a5:20:4a:1b:01:b0:eb:6e:23:
                    10:c6:1d:eb:a6:6f:d2:90:8a:48:dd:49:70:ea:7b:
                    e0:c6:f1:b6:35:6d:94:71:f9:af:b4:2e:11:d3:12:
                    66:3c:1a:44:af:7e:36:2e:f3:2e:85:7a:45:30:6e:
                    5c:55:25:80:6d:e9:5b:06:fb:fb:e0:71:b8:f8:18:
                    bf:f4:c7:7a:63:83:58:39:9b:63:53:e3:5a:6e:57:
                    90:2d:cb:83:60:a6:25:f9:62:28:46:56:89:c7:d4:
                    46:64:21:97:ce:ba:1d:ed:a3:34:99:42:d3:a3:66:
                    5d:9c:85:7d:3d:df:42:90:07:b2:a1:b1:79:d8:d3:
                    d7:d0:fb:f4:03:b2:64:25:20:00:1f:1c:4e:0c:06:
                    20:4c:e2:e0:6c:d8:ae:47:23:3a:db:1e:b0:e5:86:
                    5e:1a:25:ef:d0:28:49:08:17:d2:35:95:fb:eb:e9:
                    be:bd:2a:50:c3:19:8a:0c:92:1e:39:80:19:5e:bb:
                    e1:b1:13:eb:62:70:ec:a2:06:ca:38:5f:b8:d4:ae:
                    cb:d4:9d:6d:e4:04:02:03:8b:2e:4f:f5:c6:1c:de:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C2:3E:52:2D:54:5F:ED:85:78:C4:06:86:F6:EE:64:C5:3B:17:2C
            X509v3 Authority Key Identifier:
                keyid:70:56:2F:BF:0E:19:0E:E7:E1:BA:06:3D:6E:46:85:3A:67:FF:EF:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/70562FBF0E190EE7E1BA063D6E46853A67FFEFAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/3131302e35302e38302e302f32312d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:6d:99:54:56:e5:1c:24:45:7d:cb:22:53:4d:ee:84:df:b0:
         28:2f:87:3a:a2:94:aa:d1:99:14:bc:ca:a1:7e:10:b8:d9:81:
         ca:22:df:ce:8f:8c:c5:da:5e:71:90:53:2f:9a:de:37:5e:ae:
         b9:59:da:1b:c8:c9:ef:3d:ae:5e:a3:e1:9f:d2:2b:0b:8a:03:
         d5:85:a6:1a:e9:7a:c6:b1:1e:9a:98:ab:a0:43:53:69:85:a0:
         ae:65:de:1a:53:9c:c4:7e:75:ae:f3:e0:26:0b:49:16:d1:42:
         f2:4b:c1:74:85:58:61:36:7a:4b:ec:02:cb:1e:f5:a3:d9:67:
         1d:ee:de:ff:93:cc:28:47:28:2f:df:44:ce:75:0c:ba:81:ea:
         bf:4e:ef:e2:9f:0a:16:70:0e:b5:dd:a1:98:2f:ea:5d:c1:19:
         73:3e:f1:d9:df:4d:9f:40:63:be:14:2d:aa:27:ab:07:00:eb:
         69:2c:27:1c:81:a7:70:c7:d5:62:38:9c:dc:d1:e1:b8:31:e9:
         f1:82:8e:6f:b2:22:cb:40:78:5c:b7:42:53:07:61:5e:66:f1:
         16:ff:f8:2e:5b:c6:19:4b:82:79:71:1f:76:10:7e:12:a8:8b:
         8c:1f:a0:f4:be:98:b5:b3:4d:53:15:d7:24:67:ae:7b:d9:58:
         66:8e:65:65
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUI92GL4Qour1hA+E7bbLiakD8gMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA1NjJGQkYwRTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2
N0ZGRUZBQTAeFw0yNjA1MDMwMjMyMTlaFw0yNzA1MDIwMjM3MTlaMDMxMTAvBgNV
BAMTKEUxQzIzRTUyMkQ1NDVGRUQ4NTc4QzQwNjg2RjZFRTY0QzUzQjE3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPy/I+qqs1A63NHALX1dLHiew1
timU6soFB00Hrz43CA7oEaUgShsBsOtuIxDGHeumb9KQikjdSXDqe+DG8bY1bZRx
+a+0LhHTEmY8GkSvfjYu8y6FekUwblxVJYBt6VsG+/vgcbj4GL/0x3pjg1g5m2NT
41puV5Aty4NgpiX5YihGVonH1EZkIZfOuh3tozSZQtOjZl2chX0930KQB7KhsXnY
09fQ+/QDsmQlIAAfHE4MBiBM4uBs2K5HIzrbHrDlhl4aJe/QKEkIF9I1lfvr6b69
KlDDGYoMkh45gBleu+GxE+ticOyiBso4X7jUrsvUnW3kBAIDiy5P9cYc3nWZAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU4cI+Ui1UX+2FeMQGhvbuZMU7FywwHwYDVR0j
BBgwFoAUcFYvvw4ZDufhugY9bkaFOmf/76owDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NWZiMWM4MGMtNGQ2Yy00NDA4LTg5NDctZmJhNmU3YzRiZTdjLzAvNzA1NjJGQkYw
RTE5MEVFN0UxQkEwNjNENkU0Njg1M0E2N0ZGRUZBQS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MDU2MkZCRjBFMTkwRUU3RTFCQTA2M0Q2RTQ2ODUzQTY3RkZF
RkFBLmNlcjCBoQYIKwYBBQUHAQsEgZQwgZEwgY4GCCsGAQUFBzALhoGBcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzVmYjFjODBjLTRkNmMtNDQwOC04
OTQ3LWZiYTZlN2M0YmU3Yy8wLzMxMzEzMDJlMzUzMDJlMzgzMDJlMzAyZjMyMzEy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANuMlAwDQYJKoZIhvcN
AQELBQADggEBAJ9tmVRW5RwkRX3LIlNN7oTfsCgvhzqilKrRmRS8yqF+ELjZgcoi
386PjMXaXnGQUy+a3jderrlZ2hvIye89rl6j4Z/SKwuKA9WFphrpesaxHpqYq6BD
U2mFoK5l3hpTnMR+da7z4CYLSRbRQvJLwXSFWGE2ekvsAsse9aPZZx3u3v+TzChH
KC/fRM51DLqB6r9O7+KfChZwDrXdoZgv6l3BGXM+8dnfTZ9AY74ULaonqwcA62ks
JxyBp3DH1WI4nNzR4bgx6fGCjm+yIstAeFy3QlMHYV5m8Rb/+C5bxhlLgnlxH3YQ
fhKoi4wfoPS+mLWzTVMV1yRnrnvZWGaOZWU=
-----END CERTIFICATE-----
Generated at Wed May 13 13:30:30 2026 by rpki-client