Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
File:                     3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          x0+nTiLuywHrbCvvzbq5AhPaFfQTWXHRzoe0pMzs92s=
Subject key identifier:   03:52:3B:C6:02:7B:BE:7D:20:13:4F:48:3B:6E:A9:A0:F8:B3:05:34
Certificate issuer:       /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial:       5A4CB1F83FB220B15AA0707CC8F03D1681B59541
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa
Signing time:             Sun 03 May 2026 02:49:41 +0000
ROA not before:           Sun 03 May 2026 02:44:41 +0000
ROA not after:            Sun 02 May 2027 02:49:41 +0000
asID:                     140481
IP address blocks:        110.76.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
                          rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4c:b1:f8:3f:b2:20:b1:5a:a0:70:7c:c8:f0:3d:16:81:b5:95:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
        Validity
            Not Before: May  3 02:44:41 2026 GMT
            Not After : May  2 02:49:41 2027 GMT
        Subject: CN=03523BC6027BBE7D20134F483B6EA9A0F8B30534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:ab:5f:f8:73:f7:ef:af:97:18:22:f8:37:
                    ae:a7:fc:28:ce:b0:da:63:fc:74:7c:ff:bb:d8:51:
                    76:c4:b7:f2:9a:18:a3:ff:07:43:ca:8a:6e:63:1d:
                    85:8b:89:eb:3b:c8:79:c5:77:8b:59:8f:1d:16:6c:
                    39:2e:20:96:76:f5:de:58:ca:c3:db:73:86:6f:63:
                    72:5f:4e:61:de:74:81:e2:fa:60:5a:1a:6e:dd:5f:
                    6c:2b:46:33:89:ff:0e:cd:28:fc:c5:5e:f1:22:9e:
                    cc:ec:9f:7e:cc:4e:90:d2:d9:3e:b2:5e:a2:e9:8b:
                    bb:6a:2f:19:22:e2:52:f7:d2:6e:d5:e3:06:62:31:
                    7d:5f:d6:7f:e7:83:5e:a3:5b:74:ec:5b:a8:e4:52:
                    a2:c2:67:ce:ea:6f:61:3c:de:62:56:a0:d5:dd:a9:
                    6f:36:89:0c:31:d2:ce:40:20:cc:fc:12:1e:18:2c:
                    72:10:30:5e:59:c2:77:ec:8d:e8:85:98:2e:ac:54:
                    19:a6:51:df:ed:ea:36:78:45:8a:52:e4:3f:c3:14:
                    4d:f1:86:aa:2f:57:82:d7:c9:0b:7b:e7:e7:4a:24:
                    2c:72:51:97:cc:60:03:56:1b:b9:37:87:86:e8:7c:
                    fb:ed:d0:a3:85:6b:75:04:89:27:3f:bb:dc:2e:31:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:52:3B:C6:02:7B:BE:7D:20:13:4F:48:3B:6E:A9:A0:F8:B3:05:34
            X509v3 Authority Key Identifier:
                keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:08:a2:89:d7:78:d6:3a:9d:e0:c7:ad:d7:ee:17:14:69:93:
         1a:4c:ea:f7:be:dc:f9:21:07:c2:74:ae:f5:6a:f1:b8:6f:6d:
         a1:a7:39:9e:29:6b:a5:00:d1:39:71:10:32:b3:4b:b4:3f:49:
         10:6f:38:73:2d:64:43:da:ba:63:2b:21:ea:17:34:cd:ff:3c:
         4a:12:fd:f5:dc:63:86:b7:d2:5c:fa:22:e5:18:67:4c:b8:6d:
         dc:8e:88:d9:c2:24:cc:e9:8d:98:77:29:12:4b:4f:17:a6:ba:
         1c:ae:df:f5:1a:36:dc:91:cd:d0:6e:4e:d3:25:d3:51:8c:ad:
         c5:0c:8d:ee:1b:30:ea:cf:1b:c3:45:73:9a:02:3b:1f:e5:ed:
         91:c9:9b:4a:37:e8:25:f6:92:4b:75:65:8a:e8:da:49:05:f3:
         01:b3:8b:a0:b7:4a:df:88:7c:da:91:ac:63:bc:d0:bf:03:e9:
         ad:56:7f:6e:0f:61:dd:ef:ce:d7:71:c1:54:8f:51:9e:fa:88:
         8a:02:95:8c:c7:5e:c6:2b:1c:94:4f:9e:eb:2e:c2:74:44:6a:
         88:37:12:df:b2:13:77:1a:ac:5b:41:0a:e0:1d:59:b9:0a:b3:
         55:76:62:5d:9e:a8:78:45:12:58:f5:c5:17:64:21:7c:f9:c7:
         67:33:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:15:47 2026 by rpki-client