Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
File:                     3131372e37342e3132342e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          qGWjnJJ/GYC6/UdMykV4yUNqj/n0gbris8Cxoim6J/s=
Subject key identifier:   05:2D:1D:1D:D8:4B:CD:7E:C2:84:8B:6B:3E:37:75:12:DD:02:80:9C
Certificate issuer:       /CN=67869B177D646DD081563D36E6E9775C31473EE2
Certificate serial:       228E84947717716FA626CD4DB354DFB38E328BAA
Authority key identifier: 67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa
Signing time:             Sun 03 May 2026 02:41:06 +0000
ROA not before:           Sun 03 May 2026 02:36:06 +0000
ROA not after:            Sun 02 May 2027 02:41:06 +0000
asID:                     38515
IP address blocks:        117.74.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl
                          rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 11:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8e:84:94:77:17:71:6f:a6:26:cd:4d:b3:54:df:b3:8e:32:8b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67869B177D646DD081563D36E6E9775C31473EE2
        Validity
            Not Before: May  3 02:36:06 2026 GMT
            Not After : May  2 02:41:06 2027 GMT
        Subject: CN=052D1D1DD84BCD7EC2848B6B3E377512DD02809C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:28:15:fe:05:c2:4d:64:af:3c:2b:fc:de:
                    ad:e6:c2:78:fe:f7:99:4c:b4:65:3b:17:77:a4:07:
                    01:c7:71:77:55:77:6f:fb:c5:f5:17:3c:80:79:24:
                    61:17:52:4d:b2:8e:d1:7d:f4:9c:3e:9a:1d:5d:4d:
                    05:64:88:c4:45:29:7d:03:e0:ef:5f:2a:b3:5c:8c:
                    4c:0f:c3:d3:d7:af:73:05:45:b2:02:a3:f3:3e:ab:
                    de:d6:91:db:b8:76:ba:70:a0:27:1a:be:f3:62:c3:
                    69:ba:96:11:b5:ec:eb:63:c8:be:6a:77:1b:f8:90:
                    97:06:7d:85:8e:ae:d3:f4:0a:76:e9:d4:b8:92:0e:
                    e3:69:6c:c6:86:c7:31:50:84:6e:45:6c:e2:d8:10:
                    77:bd:c7:61:c2:ba:e0:31:00:dd:9b:8f:fe:07:f4:
                    63:6d:33:1c:d5:78:80:29:1f:f9:b2:ba:9f:dc:c7:
                    ba:1f:82:36:f6:f2:e6:c0:8a:86:e7:19:17:12:17:
                    c1:c7:bd:6d:35:e4:73:9b:cc:bf:f0:30:af:e9:2d:
                    eb:13:70:fb:b2:8a:44:00:c7:e1:69:9b:b0:11:c6:
                    cc:73:55:24:13:63:e5:8a:ee:d0:92:45:1f:58:c4:
                    0f:2d:36:17:57:81:a2:26:74:7a:b8:88:79:6a:d3:
                    97:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:2D:1D:1D:D8:4B:CD:7E:C2:84:8B:6B:3E:37:75:12:DD:02:80:9C
            X509v3 Authority Key Identifier:
                keyid:67:86:9B:17:7D:64:6D:D0:81:56:3D:36:E6:E9:77:5C:31:47:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/67869B177D646DD081563D36E6E9775C31473EE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67869B177D646DD081563D36E6E9775C31473EE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3131372e37342e3132342e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:a9:44:a4:e6:83:2e:98:4a:e9:e0:29:62:d9:bb:4c:be:
         be:d7:29:4e:75:4a:a4:21:63:5f:36:da:ff:ac:21:e8:ae:0a:
         91:db:fa:44:9e:72:cf:7a:cc:8c:e1:dc:f8:df:4e:b9:4b:1d:
         a5:18:94:84:ad:3f:d2:18:cd:ca:d0:5a:95:a0:f3:16:8c:2e:
         44:f3:6b:b0:7e:4f:03:4a:e4:db:79:1a:83:70:71:38:0b:64:
         4a:b1:4a:aa:43:04:d8:b1:cd:20:2d:01:11:17:9a:57:d3:cd:
         af:c2:80:64:74:2c:4d:91:3c:4c:0f:95:2c:24:fb:96:94:3e:
         a9:f0:44:ba:ac:8b:2d:6f:56:1c:09:66:05:4b:22:33:55:cc:
         da:f2:be:53:47:89:04:bf:7d:7f:a2:5e:53:62:1e:41:81:2a:
         c5:8c:50:9d:84:64:39:d0:d4:20:93:01:0f:45:62:13:7a:8a:
         55:c2:05:c4:4f:39:60:21:67:4b:51:5e:5a:32:af:df:7c:15:
         20:9d:af:eb:a7:c6:da:ce:c1:dc:7c:d9:50:fd:9d:d2:12:fa:
         0b:0d:45:4a:44:03:57:c4:88:09:eb:7d:a8:54:86:e2:d5:04:
         da:41:fb:7c:31:0e:4d:14:78:a3:15:90:0b:f2:1e:ce:9a:e2:
         cb:fa:c2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:20 2026 by rpki-client