Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa
File:                     3131392e322e34372e302f32342d3234203d3e203338353234.roa (raw, json)
Hash identifier:          /uCR0ldyLWtQwldeWX1wR8IL8mdOypv1FRb1qPBB8ZQ=
Subject key identifier:   B4:E9:A9:80:D0:36:5A:CF:F5:B9:50:21:F8:04:52:50:2E:B5:C9:89
Certificate issuer:       /CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
Certificate serial:       76E5A1ABF08262B9E4371976C16E78C85CA63689
Authority key identifier: 94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa
Signing time:             Sun 03 May 2026 02:46:27 +0000
ROA not before:           Sun 03 May 2026 02:41:27 +0000
ROA not after:            Sun 02 May 2027 02:46:27 +0000
asID:                     38524
IP address blocks:        119.2.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl
                          rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e5:a1:ab:f0:82:62:b9:e4:37:19:76:c1:6e:78:c8:5c:a6:36:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9436E607F375F72BBD96588FBB7CE6D5B628FF86
        Validity
            Not Before: May  3 02:41:27 2026 GMT
            Not After : May  2 02:46:27 2027 GMT
        Subject: CN=B4E9A980D0365ACFF5B95021F80452502EB5C989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a8:32:11:90:43:1e:9a:e5:07:01:bd:cb:5e:
                    54:b3:dc:36:12:ea:a6:e3:c6:6c:30:12:d4:17:11:
                    29:c5:b5:84:81:f2:72:70:24:ba:cb:37:da:51:aa:
                    2d:d3:b8:fc:13:20:e3:1f:23:6c:eb:17:19:d8:2c:
                    f3:84:f6:a9:0c:40:2b:08:36:0c:9a:cf:74:5e:0c:
                    2b:1a:f0:75:95:55:13:37:fe:c1:27:e9:80:57:bb:
                    67:fd:29:ec:2a:65:98:6c:b3:b2:1d:c7:30:0c:26:
                    f6:c0:98:ec:63:98:46:46:33:44:b8:d1:80:09:3c:
                    ce:38:4b:d4:bd:1a:d1:ba:a7:2c:ea:74:30:43:95:
                    19:d5:f2:6c:90:db:ad:d6:21:ac:f0:3d:cf:4b:76:
                    39:8a:62:ce:e4:75:b4:85:10:b6:b0:b8:a3:64:49:
                    4b:cd:53:ee:37:b9:e9:d3:f4:1e:25:da:c9:dc:7c:
                    56:2c:92:db:de:db:f2:a9:ab:2e:4b:e8:ab:0f:a8:
                    5a:a8:91:00:fe:4c:78:27:dc:0a:27:be:ce:27:57:
                    cc:77:31:b9:50:5b:a7:3a:33:b4:24:f2:5f:ae:d4:
                    ce:13:6c:82:93:54:90:eb:2e:cb:10:d6:ce:28:ce:
                    c9:ee:a6:a0:1a:89:f5:a7:9e:12:40:31:06:b4:7c:
                    36:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E9:A9:80:D0:36:5A:CF:F5:B9:50:21:F8:04:52:50:2E:B5:C9:89
            X509v3 Authority Key Identifier:
                keyid:94:36:E6:07:F3:75:F7:2B:BD:96:58:8F:BB:7C:E6:D5:B6:28:FF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/9436E607F375F72BBD96588FBB7CE6D5B628FF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9436E607F375F72BBD96588FBB7CE6D5B628FF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/3131392e322e34372e302f32342d3234203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.2.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:77:d5:c3:3d:60:f3:f8:34:da:40:a3:62:17:b8:74:65:
         3c:d1:85:cc:e2:28:a7:06:8d:84:18:e2:42:51:9e:bf:76:7d:
         33:17:05:4c:32:5c:7d:e6:b2:75:7d:d2:77:4a:44:33:94:3e:
         c5:e9:e4:bc:60:a4:05:bf:a3:75:37:74:ad:c1:e9:67:b6:27:
         44:f0:6b:85:b0:d4:18:0d:8f:17:e0:9d:9c:3f:ed:3e:7d:95:
         c5:e4:3e:1e:c2:e0:f5:0c:b1:45:a5:c7:33:02:2d:dc:7d:bd:
         f6:5f:6d:14:72:39:92:27:3d:fb:09:56:35:aa:0a:68:a1:42:
         ed:47:85:4b:14:da:37:a9:60:e4:0e:1b:da:1a:12:c2:87:d1:
         59:33:bc:65:c8:8a:8c:39:bd:ef:76:38:7f:24:be:9d:e5:aa:
         69:e0:af:d1:e0:24:46:06:24:7e:ff:47:d9:83:2a:03:91:83:
         1d:68:b6:07:c9:fe:1c:bf:7f:6a:71:c4:94:aa:14:cd:3b:5e:
         af:40:49:a8:70:e8:55:11:76:41:61:f8:11:8c:f8:34:35:1a:
         ac:48:05:f3:37:9a:01:89:c1:48:e7:1c:20:5f:0e:84:23:da:
         9a:6b:3a:00:36:12:fc:29:b3:e5:58:aa:55:ca:99:6c:c7:b6:
         b3:0b:d0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:20 2026 by rpki-client