Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa
File:                     3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (raw, json)
Hash identifier:          S51iq2UcNRvUTkOeNsl1ftHxsutly3ACMHYzox9ZhNE=
Subject key identifier:   20:F3:D1:59:C6:86:76:50:5C:A5:86:84:C6:98:38:3D:CC:61:7A:D9
Certificate issuer:       /CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
Certificate serial:       0615EFA900C94F4BF442C22AF573928719AAFE71
Authority key identifier: 21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa
Signing time:             Sun 03 May 2026 02:49:41 +0000
ROA not before:           Sun 03 May 2026 02:44:41 +0000
ROA not after:            Sun 02 May 2027 02:49:41 +0000
asID:                     140481
IP address blocks:        110.76.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl
                          rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:15:ef:a9:00:c9:4f:4b:f4:42:c2:2a:f5:73:92:87:19:aa:fe:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A1AF13820FECAAC871E77BA706DF913EB6445B
        Validity
            Not Before: May  3 02:44:41 2026 GMT
            Not After : May  2 02:49:41 2027 GMT
        Subject: CN=20F3D159C68676505CA58684C698383DCC617AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:b4:7a:ba:61:4b:d5:b2:15:6c:c6:0a:ca:
                    76:8e:12:b4:33:92:35:92:a6:aa:b2:62:5f:e2:56:
                    f3:d4:96:af:3a:89:91:bb:27:e7:29:38:ca:83:99:
                    28:db:9f:ef:3d:d3:1e:0d:4b:c8:ff:7a:b0:21:b4:
                    9c:76:93:cc:76:42:34:98:51:da:a1:39:90:c5:70:
                    b1:f8:3e:37:c2:12:2a:78:26:6d:28:94:35:a9:44:
                    f0:cd:5e:b0:25:aa:46:e8:45:37:99:89:a3:a5:b3:
                    b7:10:25:39:4c:43:34:c2:b5:5e:d3:c8:7f:3b:87:
                    57:d2:e7:aa:0c:96:1c:d5:d8:cd:d5:06:c9:d3:6c:
                    9b:fc:95:4f:4e:53:75:f9:5c:dc:b2:ca:a9:a5:6a:
                    bc:cf:92:4d:aa:94:ae:73:89:ee:c3:c2:ee:47:e7:
                    fd:95:d7:12:a6:ec:09:41:35:4a:25:ba:b3:76:4c:
                    6e:43:4f:8e:e4:a6:4b:c8:e5:1b:79:f6:15:3d:28:
                    da:b9:e8:03:b9:a2:50:c5:2f:89:54:ad:7e:f2:96:
                    6c:22:70:79:d3:93:fb:d9:0f:74:fc:2e:47:ba:3c:
                    4e:1a:79:61:42:85:85:49:92:0a:e4:85:16:71:46:
                    e7:be:f1:7c:68:ea:3f:6c:81:a4:fb:18:a7:05:35:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F3:D1:59:C6:86:76:50:5C:A5:86:84:C6:98:38:3D:CC:61:7A:D9
            X509v3 Authority Key Identifier:
                keyid:21:A1:AF:13:82:0F:EC:AA:C8:71:E7:7B:A7:06:DF:91:3E:B6:44:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/21A1AF13820FECAAC871E77BA706DF913EB6445B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/21A1AF13820FECAAC871E77BA706DF913EB6445B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5b:10:a7:63:1c:eb:3f:23:bb:6e:77:df:6f:dc:a9:a4:c7:
         ba:6f:db:df:81:c0:24:6a:0f:ff:bd:2d:7c:9d:3b:33:67:66:
         70:df:28:1b:14:8e:91:8a:c7:6d:74:63:37:d7:00:e8:af:72:
         19:f7:f2:84:82:e8:7f:81:80:01:6d:ca:53:fa:09:9a:b3:79:
         d2:a7:56:91:54:94:e7:a2:35:e4:88:b4:5a:f4:b5:0c:f6:5d:
         89:c0:cf:4a:e9:59:c6:7e:1b:13:69:1b:4b:01:28:fd:6a:2e:
         68:cf:61:c1:9e:3e:43:fd:dc:9a:c5:d8:3b:8f:1f:af:4c:50:
         a9:91:50:cc:2a:46:7a:08:64:75:9a:25:f9:14:d1:0c:83:50:
         71:36:93:ba:b4:d9:4a:ae:29:7a:68:b7:d8:a7:8d:d5:18:0e:
         2b:67:79:7a:1a:55:ae:24:91:d8:86:fe:f7:33:8f:7c:64:59:
         f5:fa:d4:1e:52:6f:3e:6c:e2:b6:80:a1:dc:58:b8:f0:6a:f7:
         55:14:1b:c0:e9:d2:7b:aa:8a:78:d1:b5:ec:e9:d8:98:c3:f5:
         39:52:1d:5c:3f:b7:ee:e4:27:2d:96:64:19:40:50:8d:70:8d:
         8c:a6:3a:2c:36:03:01:d6:a9:a5:74:c2:0f:51:08:dc:10:cf:
         71:c2:ee:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:55 2026 by rpki-client