Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa
File:                     3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (raw, json)
Hash identifier:          u4YO8mcvpSigq2msr/rPGT2aYCAjR6L4NPIl+j/rv/s=
Subject key identifier:   85:91:08:D1:31:54:FB:B3:BF:7D:4B:9E:EC:60:EC:AB:1B:74:3E:BA
Certificate issuer:       /CN=5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3
Certificate serial:       6E43EBC72DA3A81D11650C837275F6DD57CC6C8E
Authority key identifier: 5E:DD:E5:05:0B:CC:3E:FD:11:26:73:4D:62:D3:31:8E:CC:8E:AE:E3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa
Signing time:             Sun 03 May 2026 02:40:16 +0000
ROA not before:           Sun 03 May 2026 02:35:16 +0000
ROA not after:            Sun 02 May 2027 02:40:16 +0000
asID:                     9326
IP address blocks:        118.151.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.crl
                          rsync://rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:43:eb:c7:2d:a3:a8:1d:11:65:0c:83:72:75:f6:dd:57:cc:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3
        Validity
            Not Before: May  3 02:35:16 2026 GMT
            Not After : May  2 02:40:16 2027 GMT
        Subject: CN=859108D13154FBB3BF7D4B9EEC60ECAB1B743EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:8b:c5:ed:60:b0:2a:d7:65:a1:1d:e5:db:
                    ea:ca:eb:3e:59:b3:06:bf:90:f8:c4:ca:2c:fa:cc:
                    6d:1d:0d:89:c2:3c:8e:d7:c3:e8:c3:69:5e:36:8f:
                    d7:da:8d:fb:cb:b7:57:93:28:9a:fc:0d:87:93:c7:
                    a1:1e:6c:22:15:e7:ea:bc:45:82:3c:d9:4e:91:f7:
                    a3:74:34:52:28:06:9b:87:49:75:aa:bc:3b:f9:5a:
                    b0:c8:29:8d:15:a8:30:d0:dd:74:d9:a1:db:7a:f7:
                    a6:5b:21:df:69:56:eb:f2:2f:a0:77:2f:05:91:52:
                    86:8e:d0:31:ac:4f:c2:01:10:7b:33:30:38:d5:1d:
                    a7:fa:d8:d2:00:77:5d:86:07:1f:db:a8:6d:dd:2a:
                    dd:e9:cb:6b:93:96:7e:67:c8:97:02:84:e6:a1:36:
                    a3:94:e8:00:c6:c0:cd:06:e9:90:35:c2:da:23:1f:
                    2d:76:b5:a9:53:e5:7e:10:05:9f:40:bd:72:b6:23:
                    97:5a:9b:34:b7:bf:cd:e9:ef:e4:51:41:81:81:19:
                    b9:a0:85:18:a5:a0:e1:03:32:9d:1f:19:d5:a2:e0:
                    dc:3e:5a:ec:37:e6:57:4d:1a:78:49:25:64:f8:bd:
                    4f:eb:02:c2:6e:85:91:76:01:dc:0e:85:00:93:3e:
                    a6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:08:D1:31:54:FB:B3:BF:7D:4B:9E:EC:60:EC:AB:1B:74:3E:BA
            X509v3 Authority Key Identifier:
                keyid:5E:DD:E5:05:0B:CC:3E:FD:11:26:73:4D:62:D3:31:8E:CC:8E:AE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5EDDE5050BCC3EFD1126734D62D3318ECC8EAEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:5b:a4:3b:e5:8d:3d:ee:17:95:df:3c:cc:36:b9:c5:d3:
         fa:f1:76:16:61:1c:69:d7:22:43:e1:a8:0f:d5:a4:29:5b:c7:
         cb:d6:e5:c1:85:f9:aa:10:73:8c:a1:f1:6b:e9:50:4d:3d:17:
         bc:01:16:4d:fc:3f:04:01:3d:73:43:47:10:0a:1a:55:6e:0c:
         85:31:8d:e5:c7:a8:1a:87:57:4a:71:cb:35:83:83:7d:60:54:
         6c:99:99:4e:24:5e:4f:4d:a0:05:82:34:d3:30:95:df:cf:3c:
         61:62:f4:d2:cd:f7:6a:2b:aa:3b:9b:27:ab:10:a3:32:d4:40:
         39:37:38:5a:08:43:cf:68:8e:48:d4:9d:71:57:4d:11:c8:4e:
         87:f7:4d:81:99:74:a2:ae:fb:6e:50:c4:fe:43:a1:07:10:e5:
         a1:40:65:e2:f9:0b:04:ca:bb:bf:82:dd:99:66:5c:0e:a7:39:
         44:cc:06:33:4c:ae:cc:9f:9c:82:d2:6e:d1:30:6d:bb:6d:01:
         d7:2e:63:46:03:29:90:bd:30:8d:e0:c8:92:eb:b1:5d:98:df:
         91:02:b0:5a:b8:a9:31:ca:de:b7:85:9d:87:c2:e4:20:ff:41:
         19:b8:1e:01:75:ad:87:33:6f:e7:d6:74:d1:44:52:c9:5f:4d:
         d9:d8:39:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:45 2026 by rpki-client