Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132322e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          tDbsfjEDMxa62P8bXV7786EDY10m/l1Hfbr/3+kciqg=
Subject key identifier:   C6:05:D9:14:3C:B3:77:44:6C:D8:C0:B6:C2:70:F6:74:BF:FA:4C:80
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       5F6E84F95D8083C868D6019CBE26B0C997A8A564
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:09 +0000
ROA not before:           Sun 03 May 2026 02:36:09 +0000
ROA not after:            Sun 02 May 2027 02:41:09 +0000
asID:                     38515
IP address blocks:        117.74.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:31:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6e:84:f9:5d:80:83:c8:68:d6:01:9c:be:26:b0:c9:97:a8:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:09 2026 GMT
            Not After : May  2 02:41:09 2027 GMT
        Subject: CN=C605D9143CB377446CD8C0B6C270F674BFFA4C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:07:f6:ac:89:0b:28:64:e5:c9:32:a6:19:
                    d6:01:b2:1f:c8:4b:35:aa:9c:f8:d7:0e:14:f8:38:
                    60:41:7a:2f:db:13:ad:63:f9:dd:69:35:4e:f3:03:
                    e8:40:19:a5:32:b9:f4:bb:16:35:5d:ac:ab:12:12:
                    0e:bd:32:1c:7f:b2:e5:17:0d:d9:be:36:a1:7c:93:
                    ce:bf:97:41:5d:b8:95:32:65:0f:4f:12:3e:59:7e:
                    e0:71:30:4b:c1:29:c2:21:b5:c0:9c:6e:cb:83:78:
                    30:8d:29:db:5f:d6:d2:14:3a:91:e5:46:41:40:22:
                    e9:3f:22:40:ee:c9:e8:dc:06:36:49:02:3d:33:2e:
                    97:ab:fa:4e:20:33:64:51:e4:2b:8a:b4:7e:23:f2:
                    be:0b:91:31:92:3b:e5:c2:cc:24:e4:a7:af:86:cd:
                    f5:b5:93:33:70:c5:42:0d:63:16:11:5f:e0:94:4a:
                    88:a4:14:37:a1:a1:d6:7f:e5:84:2e:c8:e9:51:b1:
                    7b:d7:92:4e:24:7a:6a:e7:74:dd:55:62:d5:4e:a7:
                    b8:e7:a3:12:c4:41:9d:79:f3:67:10:1b:8c:8c:60:
                    f3:31:2b:81:fa:b8:1e:7b:48:b8:4b:75:b3:96:8c:
                    23:44:45:d7:a0:13:64:35:05:73:30:1f:8f:6a:90:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:05:D9:14:3C:B3:77:44:6C:D8:C0:B6:C2:70:F6:74:BF:FA:4C:80
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132322e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:33:cf:2b:49:7b:fa:ca:c5:d7:8d:4a:6c:cc:d9:72:53:25:
         56:5d:96:07:a3:b0:93:35:48:03:f1:45:ed:48:36:1f:67:91:
         bc:0b:e3:7a:c9:66:81:f3:29:92:6d:1b:06:5d:d7:91:26:4a:
         24:6d:d8:30:18:f4:d4:4a:53:e4:4e:4a:c1:10:41:71:ae:c4:
         f9:c6:fa:c1:a3:5e:6b:7a:0b:5d:7c:33:82:80:cb:c5:ea:b3:
         cc:b4:2b:10:b9:4d:bc:7b:38:fe:a6:bc:47:9c:89:b7:e0:9c:
         99:07:35:00:07:ef:8c:0b:5e:ee:f3:28:be:88:0c:52:15:42:
         e2:2d:eb:13:c7:bb:51:a0:1b:bd:87:ee:f7:80:45:6c:31:67:
         85:ac:46:e3:cc:63:3d:32:32:46:a2:9c:0d:57:9f:e0:fa:bc:
         f1:5e:8d:c8:c9:c3:27:67:69:96:4c:cc:2f:19:20:81:0a:41:
         4a:e0:d0:d5:da:9e:4f:dd:a6:0a:95:48:d8:d6:3c:5a:39:af:
         35:44:37:6e:e3:d0:86:a4:11:e1:a1:11:fd:b8:d6:3a:77:39:
         c0:02:84:16:93:60:24:38:c5:3f:14:b8:91:97:e1:3c:2b:c6:
         fe:26:ea:bc:4d:42:1c:f4:01:d6:e9:cd:ef:41:2e:fd:d2:bb:
         b5:49:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:47:39 2026 by rpki-client