Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          ENGP5zLLO55qc9V12DPptJXkXezLNtmXvdvfnad39Pw=
Subject key identifier:   BF:E0:10:B1:C3:AE:32:51:70:D2:78:92:D8:73:D9:CA:66:EC:36:EC
Certificate issuer:       /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial:       31B5A6E49195002E25EE4A18CE420B4B6E1AF875
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa
Signing time:             Sun 03 May 2026 02:49:42 +0000
ROA not before:           Sun 03 May 2026 02:44:42 +0000
ROA not after:            Sun 02 May 2027 02:49:42 +0000
asID:                     140481
IP address blocks:        110.76.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
                          rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b5:a6:e4:91:95:00:2e:25:ee:4a:18:ce:42:0b:4b:6e:1a:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
        Validity
            Not Before: May  3 02:44:42 2026 GMT
            Not After : May  2 02:49:42 2027 GMT
        Subject: CN=BFE010B1C3AE325170D27892D873D9CA66EC36EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:b0:a5:04:33:96:f9:fc:5a:0a:99:0d:e8:
                    87:75:d6:16:1b:1f:73:e5:a9:d7:90:aa:12:30:58:
                    1a:df:cf:d7:cc:d7:e1:26:f5:12:36:95:83:cb:39:
                    36:f8:05:f2:71:7a:e4:7e:fd:46:4b:a2:e3:6c:34:
                    19:58:02:ca:5d:93:af:98:31:47:5f:72:27:0d:e2:
                    10:65:ef:53:19:31:3c:85:af:3e:31:be:56:43:d6:
                    48:e6:3e:d5:95:ea:a4:db:54:45:5a:f0:89:8a:b3:
                    72:cd:4d:ea:c3:fb:2d:0a:cf:59:68:3a:de:ab:ee:
                    8c:26:28:43:32:2e:14:37:17:92:68:e1:3b:18:e5:
                    4a:88:aa:39:cd:cb:77:71:8d:4e:82:b6:85:00:85:
                    7d:ce:3c:ea:a8:93:6f:b8:11:2e:27:8c:e5:6b:ac:
                    16:5d:2b:ca:2c:09:f3:44:65:6f:87:01:95:db:8a:
                    11:d1:1f:ad:ed:88:a8:53:4f:81:24:37:07:5f:06:
                    e8:6b:b6:c1:7a:82:2e:76:76:c2:7d:03:7d:9e:d4:
                    de:cb:8b:4c:43:b0:9a:ec:db:fb:21:d2:9c:c3:3f:
                    80:06:13:29:2d:82:c3:42:e2:f7:c5:e5:a8:9b:84:
                    f7:ae:e3:31:a4:d2:75:d4:7d:b9:aa:0f:c9:91:77:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E0:10:B1:C3:AE:32:51:70:D2:78:92:D8:73:D9:CA:66:EC:36:EC
            X509v3 Authority Key Identifier:
                keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:11:53:44:2b:22:0f:f8:64:b1:0d:15:ae:9a:31:73:d8:ff:
         e4:53:57:7f:df:97:e5:c1:cd:81:05:36:9b:44:ab:4d:cc:7e:
         6d:9b:bf:aa:f9:f7:2d:8b:f8:16:dc:a4:10:71:3e:8a:f2:81:
         0e:bc:57:99:f2:7b:04:fb:80:11:95:9b:82:a6:90:9d:30:ca:
         9b:d3:f1:e8:1e:ef:12:26:40:88:ec:a9:74:fa:0e:17:dc:a7:
         51:4f:a8:03:8f:2b:39:5a:43:a9:e9:7a:3e:fe:1d:0d:70:af:
         a3:ec:1e:dc:d1:3d:b9:89:e8:c0:f8:df:85:27:fe:fc:9a:b9:
         5a:a7:82:78:bd:1b:88:65:2e:4f:ad:68:b1:c7:13:cb:59:1e:
         a0:5b:97:3b:9c:84:9e:0d:e9:7b:24:e9:ca:6b:26:ce:60:2c:
         d9:77:40:3e:ad:61:2e:35:b2:31:bf:36:23:9a:90:e5:98:41:
         7e:5d:f1:0e:9d:87:44:32:d5:59:bd:2d:88:3c:db:a9:c9:71:
         c3:33:ca:96:d4:d4:4e:84:32:a6:98:c0:c8:e8:09:58:ed:48:
         a3:cd:13:1e:35:e9:7e:66:67:60:ce:89:a5:b2:5e:ab:7b:25:
         cb:ac:dc:80:4c:e8:70:db:f1:a5:9e:ff:af:11:fd:9d:e3:58:
         77:c0:c7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:29 2026 by rpki-client