Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          tykJF6DboR5k4q21U5Qq+5eJiiEi7rWGoBUT5R2EI3I=
Subject key identifier:   41:83:E7:50:5C:C5:DB:FD:EB:A8:A4:90:68:E2:D3:9E:BD:BE:92:7D
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       4A5AF9DC5B5699F1C4BCECFCA2AC6771ADA5B6EC
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:01 +0000
ROA not before:           Sun 03 May 2026 02:36:01 +0000
ROA not after:            Sun 02 May 2027 02:41:01 +0000
asID:                     38515
IP address blocks:        117.74.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5a:f9:dc:5b:56:99:f1:c4:bc:ec:fc:a2:ac:67:71:ad:a5:b6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:01 2026 GMT
            Not After : May  2 02:41:01 2027 GMT
        Subject: CN=4183E7505CC5DBFDEBA8A49068E2D39EBDBE927D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:d8:9a:75:37:ad:a5:08:99:5f:b9:7b:fd:
                    d2:1a:be:c4:df:59:5c:3d:48:71:bd:e4:ee:60:7c:
                    6b:d2:2c:60:d2:9e:a6:f9:a4:4a:b2:cf:b4:16:4f:
                    71:fa:46:8b:13:f6:5e:9c:48:70:4f:a1:fd:e7:f8:
                    ac:d7:5e:b0:9d:d9:5f:48:d1:4d:8f:44:4f:97:fd:
                    28:6a:f2:08:f8:7d:66:32:bb:33:ba:9a:1d:6b:ff:
                    0a:9c:4c:4c:5f:f3:87:7d:f7:41:e2:ab:13:b0:ed:
                    d2:c0:4c:a8:f0:99:a2:1b:a8:23:99:80:94:3b:b4:
                    b1:63:ce:96:6b:ac:1b:dc:b3:a9:a4:00:9d:9f:2d:
                    70:1c:89:60:a3:fe:f6:a4:9c:d3:22:03:7c:25:99:
                    fe:a0:60:05:af:89:20:5a:e2:0b:7b:a4:c6:4a:a9:
                    6c:88:62:6d:37:81:2c:3f:50:46:12:d3:22:bb:fc:
                    e6:3a:e6:05:9b:1d:1b:17:8c:f3:22:38:d4:f7:37:
                    d5:e0:3c:45:79:24:da:4a:f2:c4:af:47:b6:a6:d7:
                    24:57:d3:2f:2e:fb:da:fe:42:98:00:bb:63:0c:69:
                    41:d8:f0:1e:a5:bc:b2:45:30:77:2d:bf:27:87:80:
                    26:c5:4a:8a:49:3c:ad:8d:56:bf:ee:41:1c:da:76:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:E7:50:5C:C5:DB:FD:EB:A8:A4:90:68:E2:D3:9E:BD:BE:92:7D
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132302e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:04:9e:39:43:a5:5d:7f:21:31:7c:45:c9:be:45:fc:26:b9:
         13:bd:55:40:cd:77:86:bb:59:ab:d3:ad:b2:2b:b4:ab:30:1c:
         08:35:a5:62:7b:bd:f9:df:67:e2:39:13:13:e7:4f:34:27:92:
         bc:d2:91:3f:06:80:af:22:0b:ed:e9:1c:fb:27:20:b8:24:2d:
         9f:cd:17:0b:e0:7e:b1:9a:1c:4e:1d:0a:ea:9b:db:5a:51:33:
         ce:22:fe:10:e8:c5:7c:41:53:2b:d5:ab:b9:5f:ae:67:92:bf:
         a5:06:ae:84:08:f3:1b:12:6c:0b:da:bf:35:a5:44:12:b2:34:
         24:fa:f9:f1:48:0a:e2:d7:88:94:cd:df:75:3a:d3:10:05:d5:
         10:52:16:5f:ea:e9:ae:63:06:d7:e7:ba:5a:fb:f6:8d:6b:7c:
         d8:a6:cd:f6:34:0b:5b:a6:8a:16:1c:18:49:1c:7f:14:7f:ac:
         3e:10:1e:78:73:2d:69:f4:c7:41:11:1a:6d:0d:82:cf:af:a7:
         41:cd:b3:90:b3:8b:9b:d0:3b:65:54:26:30:24:86:59:78:0b:
         85:c7:c0:57:ef:8c:8a:da:8a:0b:9d:f5:22:d5:76:4a:64:2b:
         2b:aa:b2:2c:11:f3:71:26:59:51:06:12:a2:92:26:b5:86:7c:
         bb:f7:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:57 2026 by rpki-client