Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132332e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          psHY4jaTgzI0faEzcQs4jj9v5F7KEDrhP0uTR9a6JIs=
Subject key identifier:   96:13:C4:39:8F:E6:A5:EF:28:4C:DC:21:AC:E6:B5:A7:78:F4:0E:1C
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       7AD9F799A4933A73E5EC993389C01D34E09C46F7
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:08 +0000
ROA not before:           Sun 03 May 2026 02:36:08 +0000
ROA not after:            Sun 02 May 2027 02:41:08 +0000
asID:                     38515
IP address blocks:        117.74.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d9:f7:99:a4:93:3a:73:e5:ec:99:33:89:c0:1d:34:e0:9c:46:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:08 2026 GMT
            Not After : May  2 02:41:08 2027 GMT
        Subject: CN=9613C4398FE6A5EF284CDC21ACE6B5A778F40E1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a7:29:7a:79:6b:aa:34:c2:35:7c:9a:5d:74:
                    10:59:5d:50:cf:e9:cb:4e:96:21:a4:27:a6:71:92:
                    0b:f9:23:71:64:48:cf:7e:f2:61:2b:c6:e0:dd:16:
                    a7:ca:9f:d8:95:ba:f9:70:02:dd:5f:00:2c:5b:7e:
                    b9:72:ec:94:6a:56:5c:ba:09:4d:ed:6c:83:84:02:
                    72:31:2f:53:d7:e7:b8:59:65:ab:cd:41:ca:ef:70:
                    11:3d:93:5e:d7:0a:80:00:08:e5:f1:89:48:48:2d:
                    77:9f:2d:96:92:25:1b:39:04:09:52:6c:2a:3b:bc:
                    52:8b:c1:2a:40:36:e7:02:c2:0a:3a:cc:77:7b:59:
                    53:70:25:87:65:2d:d8:1d:68:a0:cf:be:37:91:d5:
                    af:84:49:88:8b:85:de:c0:c0:cd:2d:30:05:c9:5b:
                    05:cc:cd:d1:d4:66:f4:70:82:54:1c:23:be:a2:3a:
                    ab:2b:3e:04:3d:c2:64:03:11:1b:f4:81:81:ab:05:
                    c6:13:8f:e6:70:57:75:ec:cf:76:f6:4a:a0:f2:e0:
                    ac:cb:e3:96:e0:4c:cc:e4:86:40:ce:37:d9:b9:20:
                    01:e5:8a:bc:58:11:f9:48:20:42:bf:cb:54:a9:0e:
                    20:28:62:f5:08:42:d3:2e:1a:6f:03:10:cf:f3:b1:
                    d8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:13:C4:39:8F:E6:A5:EF:28:4C:DC:21:AC:E6:B5:A7:78:F4:0E:1C
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132332e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c5:44:77:51:aa:be:b8:5c:d0:89:d9:16:0d:6c:5e:70:93:
         90:d8:d8:fc:d7:a6:e6:46:e6:b5:47:05:24:59:e6:fd:91:0e:
         77:3a:15:55:49:90:c9:f5:09:46:e5:e8:51:dc:34:3a:82:fb:
         bb:1c:44:1f:5c:7a:ad:ab:40:09:ac:82:b8:1a:a1:e3:e8:70:
         4f:18:ec:57:10:16:21:92:1c:27:d7:69:90:2c:38:3b:f7:34:
         b4:87:35:d1:8c:5a:16:85:dd:50:4f:14:58:b3:fd:d8:eb:43:
         bf:89:65:66:cc:80:2f:a8:4a:44:67:b4:50:c9:c0:32:43:fe:
         4e:10:72:ac:fa:24:57:39:bd:af:9a:bb:0b:5e:21:3d:ba:7f:
         30:43:4e:64:11:3c:da:d6:0c:9f:28:af:69:e0:fd:8b:32:c3:
         a7:ac:96:fb:16:d7:2e:26:b6:b4:d1:4b:7a:61:89:8a:3e:a8:
         bb:d3:a2:59:9f:a3:09:da:6c:fe:f3:ad:78:36:fb:87:87:9f:
         fe:49:15:ff:3e:96:95:22:08:2d:0b:e0:04:de:6f:4c:d8:2b:
         46:63:42:3f:22:68:4a:cb:3f:f5:fb:19:e6:5d:48:ee:86:21:
         e4:af:ce:9b:ba:67:09:f8:fe:42:c6:30:c3:1c:18:fb:8a:46:
         6d:44:71:a4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUetn3maSTOnPl7JkzicAdNOCcRvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc4NjlCMTc3RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMz
MTQ3M0VFMjAeFw0yNjA1MDMwMjM2MDhaFw0yNzA1MDIwMjQxMDhaMDMxMTAvBgNV
BAMTKDk2MTNDNDM5OEZFNkE1RUYyODRDREMyMUFDRTZCNUE3NzhGNDBFMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDapyl6eWuqNMI1fJpddBBZXVDP
6ctOliGkJ6Zxkgv5I3FkSM9+8mErxuDdFqfKn9iVuvlwAt1fACxbfrly7JRqVly6
CU3tbIOEAnIxL1PX57hZZavNQcrvcBE9k17XCoAACOXxiUhILXefLZaSJRs5BAlS
bCo7vFKLwSpANucCwgo6zHd7WVNwJYdlLdgdaKDPvjeR1a+ESYiLhd7AwM0tMAXJ
WwXMzdHUZvRwglQcI76iOqsrPgQ9wmQDERv0gYGrBcYTj+ZwV3Xsz3b2SqDy4KzL
45bgTMzkhkDON9m5IAHlirxYEflIIEK/y1SpDiAoYvUIQtMuGm8DEM/zsdhrAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUlhPEOY/mpe8oTNwhrOa1p3j0DhwwHwYDVR0j
BBgwFoAUZ4abF31kbdCBVj025ul3XDFHPuIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NmM0YzY0YTktMzUzNy00YmM3LTg2MTMtOGU5ODE2MjllNGNhLzAvNjc4NjlCMTc3
RDY0NkREMDgxNTYzRDM2RTZFOTc3NUMzMTQ3M0VFMi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82Nzg2OUIxNzdENjQ2REQwODE1NjNEMzZFNkU5Nzc1QzMxNDcz
RUUyLmNlcjCBowYIKwYBBQUHAQsEgZYwgZMwgZAGCCsGAQUFBzALhoGDcnN5bmM6
Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzZjNGM2NGE5LTM1MzctNGJjNy04
NjEzLThlOTgxNjI5ZTRjYS8wLzMxMzEzNzJlMzczNDJlMzEzMjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVKezANBgkqhkiG
9w0BAQsFAAOCAQEAAcVEd1Gqvrhc0InZFg1sXnCTkNjY/Nem5kbmtUcFJFnm/ZEO
dzoVVUmQyfUJRuXoUdw0OoL7uxxEH1x6ratACayCuBqh4+hwTxjsVxAWIZIcJ9dp
kCw4O/c0tIc10YxaFoXdUE8UWLP92OtDv4llZsyAL6hKRGe0UMnAMkP+ThByrPok
Vzm9r5q7C14hPbp/MENOZBE82tYMnyivaeD9izLDp6yW+xbXLia2tNFLemGJij6o
u9OiWZ+jCdps/vOteDb7h4ef/kkV/z6WlSIILQvgBN5vTNgrRmNCPyJoSss/9fsZ
5l1I7oYh5K/Om7pnCfj+QsYwwxwY+4pGbURxpA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:43 2026 by rpki-client