Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa
File:                     3131392e322e34362e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          eg33xn4TSyFY2G/shK0oMfIfKBVDTtztPgCQ5iaYRbU=
Subject key identifier:   FF:6D:13:A1:A9:EF:F6:69:97:43:F9:80:F2:57:F4:B0:86:26:71:68
Certificate issuer:       /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial:       2EDC39C8DA190596EC20EA97D1949F5187D24890
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa
Signing time:             Sun 03 May 2026 02:46:25 +0000
ROA not before:           Sun 03 May 2026 02:41:25 +0000
ROA not after:            Sun 02 May 2027 02:46:25 +0000
asID:                     38524
IP address blocks:        119.2.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
                          rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dc:39:c8:da:19:05:96:ec:20:ea:97:d1:94:9f:51:87:d2:48:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
        Validity
            Not Before: May  3 02:41:25 2026 GMT
            Not After : May  2 02:46:25 2027 GMT
        Subject: CN=FF6D13A1A9EFF6699743F980F257F4B086267168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:d5:c1:a8:6f:38:ad:35:e4:19:94:38:52:
                    a6:c8:d7:c1:57:e2:19:06:3c:9e:79:4e:73:40:d2:
                    1c:b0:23:9b:d5:10:8c:38:bc:b2:40:e7:b3:f7:9f:
                    90:43:08:58:53:1f:9c:c1:b0:db:0d:22:c0:2e:c9:
                    49:d5:37:38:48:e0:86:7d:24:b7:20:c3:8d:21:db:
                    1f:48:cb:4e:48:ec:d3:8c:ae:3f:9a:7c:bc:9f:5d:
                    d7:9c:90:28:25:b8:0e:12:e6:47:5b:82:26:d2:4d:
                    c6:bc:2d:c8:9c:29:18:d6:b6:a7:84:2b:44:05:f6:
                    99:10:51:c9:83:9f:2f:cf:7d:f9:41:be:d0:e0:93:
                    ce:2b:ec:91:e6:a5:4f:32:e9:d7:e1:c8:49:ab:d2:
                    a7:f4:0b:9c:64:7c:d9:b6:a3:09:ba:a0:7c:a0:3e:
                    8b:6e:63:46:18:fd:62:2a:a7:3c:ca:82:66:52:0c:
                    54:61:a0:c4:b8:20:b6:d9:90:ce:11:76:48:c4:97:
                    aa:c4:04:ad:cc:29:f7:14:6d:d1:eb:6d:97:34:95:
                    1c:b9:2f:64:df:75:81:53:74:52:d5:af:8a:94:2e:
                    89:4b:e2:0f:27:c8:a6:50:14:71:38:ec:b4:3a:4d:
                    99:ab:67:c3:11:35:1d:55:5f:f3:66:8e:76:62:ac:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6D:13:A1:A9:EF:F6:69:97:43:F9:80:F2:57:F4:B0:86:26:71:68
            X509v3 Authority Key Identifier:
                keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34362e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:3c:69:0a:2f:ff:e1:e7:ac:a3:1d:67:85:4a:f9:37:fc:
         c7:5f:6d:f9:ec:0c:c7:79:9f:a0:89:38:b3:7a:ea:de:07:89:
         07:24:a8:d4:2b:d1:ac:10:bc:59:06:72:34:c5:ce:98:80:48:
         4a:c4:b3:a5:c6:49:7a:b0:cd:3e:0a:72:38:4d:82:8b:ba:39:
         f3:dd:04:c3:f3:43:d7:a6:51:dc:9c:58:c2:93:87:f1:26:f8:
         5c:8c:53:73:c7:c8:5b:f9:33:35:a8:3f:dd:f1:24:49:92:0b:
         95:c4:75:66:5b:49:66:72:90:1a:9e:bd:73:40:2b:d3:02:e2:
         c1:29:ba:56:f3:0e:4f:f1:df:fe:04:12:48:3d:46:72:3a:fe:
         0d:5f:b4:76:15:b7:6f:ea:cf:14:11:72:75:d3:cd:37:0f:0e:
         00:2a:64:e4:a2:08:9e:50:47:bc:d0:28:f4:3c:39:3f:3b:7e:
         8c:ff:93:58:bf:0e:c6:d3:2d:e0:c7:5c:e1:85:d1:6a:14:f6:
         7e:38:3f:70:94:0b:45:a9:24:d7:7a:f0:a0:f3:1f:3a:d5:dc:
         43:d9:a6:05:3a:c6:2e:a5:05:62:ab:e7:db:66:cf:56:ae:d8:
         f4:6e:59:63:84:08:a0:32:26:0d:4a:15:42:6c:e7:40:12:ca:
         52:8a:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:44 2026 by rpki-client